Investor brief · 2026
The rail for money that must keep its purpose.
Purpose-bound money for Pakistan — disbursement that can only be spent by the right person, for the right purpose, at approved vendors, with cryptographic proof that every rupee arrived.It is one engine, not four products: an employer, a fund, a charity, and a government issue the same cryptographically-signed, purpose-bound grants — and read the same every-rupee reconciliation. The value never touches us — by design it settles on a licensed partner's rails, and securing that partner is our gating validation, not a closed deal. The intended moat is the protocol and the regulatory structure, not custody.
Why now: India's e-RUPI proved purpose-bound vouchers at national scale, Pakistan's Raast rails have matured into instant settlement, and funders everywhere face rising pressure to prove delivery.
One rail · four markets
Everyone who sends money with strings attached.
The same protocol serves four large, separate markets. We architect for all of them and open enterprise first — the lightest regulatory overlay — with the others unlocking in sequence as the structure clears each regulator. The code is shared; the go-to-market and regulatory work is per segment.
Enterprise & employer benefits
Allowances that can't leak.
Meal, fuel, medical, and per-diem allowances become policy-locked spend with reconciliation built in — a recurring, high-volume line with no expense claims to process. The lightest regulatory overlay, so it's the first market we open.
Investment & grants
Prepaid budgets, drawn on purpose.
Funds, accelerators, and grant-makers prefund a purpose-bound budget a portfolio company or grantee draws down only against approved categories — provably prepaid, never credit, every rupee traceable to its use. A large, recurring flow of grant and directed capital moves this way each year.
Charity & institutional giving
Per-rupee proof of delivery.
Foundations and Zakat funds disburse vast sums with little proof a rupee reached the right hands. We make delivery provable — and give donors a reason to give again.
Government & development
The leakage problem, at the source.
Provincial social-protection programs and development funders run subsidy and welfare budgets exposed to vast leakage. Bind a benefit to the named recipient and its purpose, and it can't be resold, diverted, or spent off-purpose — with every rupee reconciled to its use.
Ed25519
signed, single-use grants
Merkle
vendor-allowlist inclusion proofs
Hash-chained
append-only audit ledger
0 floats
integer paisa, end to end
What is built vs simulated
We'd rather you trust the map than the territory.
The grant engine — signing, the vendor allowlist, the append-only ledger — is real and tested. Redemption policy and the licensed-partner settlement leg are simulated behind real interfaces. Here is the honest line between them.
| Capability | Status | Note |
|---|---|---|
| Purpose-bound grant + signing | Live in code | forgeGrant / verifyGrant on Ed25519 with a kash-grant-v1 domain tag; unit-tested. |
| Merkle vendor-allowlist | Live in code | Root + per-vendor inclusion proofs on @kashscript/identity-zkp. |
| Hash-chained audit ledger | Live in code | Append-only transition ledger over Postgres; integer-paisa throughout. |
| Redemption + settlement | Simulated | The redemption policy engine + the licensed-partner fiat leg are the next build (Phases 2–3). |
| Licensed bank/EMI partner | Specified | The structure is designed; securing the partner is the gating validation. |
Trust-minimized, not trustless
What the math guarantees — and what it doesn't.
Cryptography makes theft, diversion, and tampering mechanically impossible or provably detectable: a grant can't be double-spent, resold, redeemed at an unapproved vendor, or spent on the wrong purpose — and the operator can't silently rewrite history. What it can't prevent — a beneficiary and an approved vendor colluding to split cash — is deterred economically and caught by audit. We say so plainly.
No 'trustless' overclaim. The value sits at a licensed partner; Duedale custodies nothing.
Let's talk.
Request the data room for the full architecture, the trust model, the regulatory structure, and the go-to-market.