Anyone's face.
Anyone's voice.
A ledger entry.
If a face or voice is used for commercial purposes — that use is a transaction. It should be recorded, metered, and paid. Every time. Without exception.
We built the enforcement layer. Every AI generation against a human identity creates an immutable receipt. Royalty is calculated and charged atomically — before the model runs. Not after. Not maybe. Before.
The Problem
Billions in AI generations. Zero receipts.
Every face trained on. Every voice cloned. Every likeness used in a campaign. Right now, none of it is in a ledger. None of it pays the person it came from.
One payment. Then silence.
A brand pays once, trains a private model on a talent's face or voice, and generates 50,000 images. The talent sees €0 of that.
A document. Not a lock.
Contracts can be ignored. Platforms rewrite terms. Royalty clauses disappear. You have no technical recourse.
Just a pointer on a chain.
ERC-721 royalties are suggestions. Any marketplace can bypass them. Secondary value flows to the platform, not you.
The Insight
Royalties in the transfer function, not the document.
ERC-721C solved NFT royalty bypass by embedding enforcement inside transferFrom() itself. Non-compliant transfer? It reverts. No workaround.
We applied the same principle to AI generation. Every generation call is a transfer event. Our pipeline calls consume_talent_usage() before any model runs. The gate checks seven constraints — atomically, with row-level locking. Non-compliant? Generation reverts.
// Before every AI generation:
const result = await consumeTalentUsage({
licenseId,
userId,
territory: "DE",
platform: "studiomunich",
// 7 gates. Row-locked.
})
// ok: false → generation reverts.
if (!result.ok) return 403
// Only now — model fires.
await generateWithAI(...)
Architecture
Three token types. One protocol.
Each mirrors what will be minted on-chain in Phase 2. The off-chain enforcement is live now.
Identity Sovereign
Your biometric identity on-chain. Cannot be sold, stolen, or transferred. Consent lives here — revoke it and every license locks instantly.
- Face hash (SHA-256)
- Voice hash
- Consent version
- Revocation flag
Usage License
What brands purchase. Contains the rules — usage cap, territory, platform whitelist, expiry, royalty rate. Generation reverts if any rule is violated.
- Usage cap + counter
- Territory allowlist
- Platform whitelist
- Royalty basis points
- Expiry date
Generation Receipt
Every single generation mints a receipt. Who generated, which license, which territory, how much royalty was paid. The ledger is permanent.
- License ID
- Talent ID
- Territory
- Credits charged
- Royalty paid
Enforcement
How every generation earns for you.
Brand purchases a license
Usage cap, territory, platform, and royalty rate are encoded in the token at purchase. These terms cannot be changed without issuing a new license.
Generation call fires
Before any AI model runs, our pipeline calls consume_talent_usage() — a database-level enforcement gate using row locking.
Seven gates checked atomically
Ownership → status → expiry → usage cap → territory → platform → talent revocation. All in one atomic transaction. No race conditions.
Royalty calculated and receipt minted
Royalty is deducted at the configured basis points. An immutable receipt is written. Generation proceeds only on ok: true.
Comparison
Standard licensing vs the protocol.
Who it's for
Every form of human talent.
Models, actors, voice artists, musicians, athletes, influencers — if your identity has commercial value, this protocol protects it.
Your face is a royalty stream.
Every campaign, every catalog, every variation — each generation charges the brand and credits you. Not once. Every time. Forever.
Register your identityYour likeness. Your terms.
Set the use cases you approve — editorial, commercial, avatar, digital twin. Anything outside your whitelist is technically blocked. No clause, no court. Just a reverted generation.
Register as actorYour voice earns while you sleep.
License your voice for narration, avatar, and synthesis. Set the cap. Set the territory. Set the rate. The platform enforces it — no lawyer required.
License your voiceMusicians. Athletes. Influencers. Creatives.
If your face, voice, or likeness has commercial value — this protocol protects it. Any talent type. Any use case. Enforced at the generation level.
Register your identityCommission built into every generation.
The revenue split is encoded in the license token — talent %, agency %, platform %. It cannot be renegotiated after issuance. Your commission is structural, not contractual.
Partner with usFull compliance. Zero ambiguity.
Every generation has a receipt. Territory, consent, and usage cap are technically enforced — not contractually hoped for. Audit trail is permanent.
License talentRoadmap
Three phases. Off-chain today.
Off-chain enforcement
- Talent identity registration
- Usage license issuance
- 7-gate atomic enforcement
- Immutable generation receipts
- Royalty calculation per generation
On-chain identity
- Soulbound ERC-5192 Identity Token
- Minted on Base L2 (low gas)
- Biometric hash on-chain
- Consent signature on-chain
- IPFS receipt anchoring
Full on-chain enforcement
- ERC-721C Usage License tokens
- consumeUsage() in smart contract
- USDC royalty streaming
- Marketplace transfer validator
- Diamond facet upgrades
Legal Framework
The law already agrees with you.
We built to the most protective standard across every jurisdiction we operate in. Not the minimum. The maximum.
Blanket releases are void.
Broad 'all uses forever' releases are legally unenforceable for AI replicas in California. Every license on this platform is project-specific and time-bounded by default.
Union talent gets the full rider.
SAG-AFTRA-covered talent triggers the Digital Replica Rider workflow automatically. Brands must acknowledge union obligations before any license issues.
Revoke consent. Block generation. Instantly.
One action. Your biometric hash is nullified. Every active license reverts. No generation can fire against your identity from that moment forward.
Biometric data has legal weight.
BIPA violations start at $1,000 per instance. We treat biometric consent as the highest-risk data category on the platform — collected once, stored hashed, erasable on demand.
The ledger is the contract.
Generation receipts replace invoice-based royalty accounting. Every generation is timestamped, territoried, and linked to a specific license. The record is immutable and available on demand.
Training ≠ inference. Always.
Digital twin training requires separate consent and a separate license class. A brand cannot train a model on your identity and then generate from it under a single usage license.
Remuneration
Royalties that compound.
Every generation creates a receipt. Every receipt accrues to your balance. Monthly settlement — bank transfer today, USDC on-chain tomorrow.
The revenue split is encoded in the license token at issuance. It cannot be renegotiated. The platform cannot change it. Your agency commission is structural — not a clause someone rewrites.
Monthly accrual + bank transfer
Royalties accrue per generation. Monthly settlement via Stripe Connect to your bank account. Minimum €50 threshold.
USDC stablecoin payout
Stripe stablecoin infrastructure. Opt into USDC settlement for any accrual — no conversion friction, no banking delays.
On-chain streaming royalties
Every generation triggers an on-chain USDC micro-payment to your Base L2 wallet. Near-real-time. No settlement lag. The ledger and the payment are the same event.
If it's commercial,
it's in the ledger.
That's the standard. Not a preference. Not a clause in a contract. A technically enforced fact — for every face, every voice, every generation.
Register your identity. Set your terms. Every use — receipted.