[OriLife × TonFarm] Identifying 180 Million Durians Without Physical Labels

The Problem: A $3.36 Billion Supply Chain Built on Peelable Stickers

Vietnam's durian exports to China totaled $3.36 billion USD in 2024 — over 90% of the country's durian export revenue, employing hundreds of thousands of farmers across the Central Highlands, with Đắk Lắk Province holding the largest single concentration of plantations. The entire traceability system underpinning this supply chain rests on physical QR labels — printed paper stickers attached to each fruit — that can be peeled off one fruit and stuck onto another in seconds, with no detection, no audit trail, and no recourse.

The 2025 scandal exposed exactly how this fails at scale: 17 individuals criminally prosecuted, 55+ plantation codes revoked by Chinese customs, 2,000+ containers stuck at port pending re-inspection, with industry estimates of $200M+ USD in trapped inventory and contract penalties. The investigation revealed fraudulent operators were systematically peeling labels from properly registered, GACC-approved durians and re-attaching them to fruits sourced from unregistered plantations or — in some cases — fruits with cadmium contamination above legal thresholds.

The root cause is structural, not technological: when the identity carrier can be separated from the product, fraud is inevitable, regardless of how sophisticated the blockchain behind the label is. No amount of cryptographic anchoring fixes this if what you're anchoring is a detachable sticker. The solution must make the product itself the identity. That is what Bio-ID does — it extracts a fingerprint from the fruit's structural skin texture, an identity inseparable from the durian until consumption. Working PoC: orilife.io/demo.

Five Pressures That Cannot Be Delayed

Pressure 1 — Institutional Endorsement. The Đắk Lắk Agricultural Extension Center has formally endorsed TonFarm to support the digitization of 12,000 hectares of durian via the cooperation MOU signed in March 2026, with Letter 351-CV/HNDT (December 22, 2025) from the Đắk Lắk Farmers' Union confirming institutional support. OriLife is the production-grade infrastructure designed for this scale.

Pressure 2 — National Pilot Summary July 10, 2026. Decision 5272/QĐ-BNNMT mandates a Durian Traceability Pilot from January 1 to June 30, 2026, with national summary on July 10, 2026. On April 4, 2026, the first Green Lane shipment under this pilot was successfully exported to China — but the export still uses peelable physical labels, leaving the structural fraud vector wide open. OriLife addresses precisely the weakness the government's current pilot has not yet resolved.

Pressure 3 — Nationwide Formalization from July 1, 2026. Vietnam's national Traceability System launches for all key agricultural products on July 1, 2026. OriLife is built to bridge into the national system via the BCT Portal API, allowing Đắk Lắk farms to satisfy national-system reporting from a single interface.

Pressure 4 — Hard Legal Deadline December 1, 2026. Article 15 of Circular 11/2026/TT-BCT (issued February 27, 2026, effective April 16, 2026):

"Food production establishments must connect to and provide information to the Traceability System from December 1, 2026."

OriLife provides the production-grade traceability layer and the certified bridge into that national system. Failure to connect carries direct legal consequences: product recall orders, administrative fines, operational suspension, and criminal prosecution for fraudulent data.

Pressure 5 — China's GACC Tightening. GACC continues tightening Orders 248 & 249 throughout 2025–2026 with stricter plantation code verification, expanded residue testing (cadmium, Auramine O), and faster revocation procedures after the 2025 scandal. Without fraud-resistant traceability, Vietnam risks losing volume to its largest market — which absorbed over 90% of durian export volume in 2024.

Why This Demand Is Non-Discretionary

Jurisdiction	Regulation	Role for this GA
Vietnam	Circular 11/2026/TT-BCT	Mandatory deadline Dec 1, 2026 — directly applies to all 12,000 ha
China	GACC Orders 248 & 249	Mandatory for export — GACC is >90% of the durian export market
EU	EUDR (2023/1115)	Reinforcing market for SDK expansion (coffee, future crops)
US	FDA FSMA Section 204	Reinforcing market for future expansion

Vietnam's Circular 11 and China's GACC are the binding constraints for this GA. EU and US frameworks add reinforcing value as the open-source SDK expands beyond durian — not preconditions for the durian deployment.

The structural distinction from prior platforms: predecessors (IBM Food Trust, VeChain × Walmart China, SEA2SEE, TE-FOOD) operated on enterprise procurement decisions — adoption depended on enterprises choosing to subscribe, and stalled when budgets shifted or grants expired. OriLife operates on farm-level legal obligation — every individual food production establishment is required by Vietnamese law to connect, regardless of any enterprise's procurement preference.

The Alliance: Earned the Right to Solve This

TonFarm 2024 — The Expensive Lesson Already Paid

TonFarm is an agricultural digitization project launched by DDC Holdings in 2024 in Đắk Lắk. DDC actually deployed across multiple farms over two harvest seasons, actually failed in five concrete and instructive ways, and drew lessons that cannot be acquired from textbooks. Verifiable: TonFarm NFT collection on TON.

DDC mobilized dozens of employees to manually attach printed QR codes to durian trees, store collected data on a single centralized server, and hash each individual fruit as a separate on-chain transaction. Five concrete failures emerged:

Weakness	Real-world Impact
QR labels detachable	Peeled and re-attached — zero anti-fraud value
Data on a single server	Modifiable at any time by anyone with database access
1 fruit = 1 transaction	Linear cost — economically infeasible at any chain
Farmers dependent on field staff	Staff turnover = data collection stops
Hash ≠ validation	Proves data unchanged since hashing, not that it was correct at hashing

Despite these failures, DDC built irreplaceable assets: UX validated with farmers aged 50+ over two harvest seasons; institutional trust across 46 communes (conference video, 50,000+ participants); standardized highland onboarding; offline queue logic with zero data loss. Copyright Certificate No. 4420/2025/QTG (June 2, 2025) confirms this is research and deployment continuing since 2024 — not a new project.

The Three-Company Alliance

• DDC Holdings — Field Operations & Government Relations. Trust relationships with farmers and government agencies across 46 communes, validated over two harvest seasons. They failed publicly with the old QR-label approach in 2024 and understand exactly why it failed at the architectural level. Field activity log: tonfarm.co/activity.
• GreenSun Tech — R&D and Core IP. Holds 4 USPTO Provisional Patent Applications (filed April 6–7, 2026) covering OriLife platform, PhoenixKey identity, LampNet distributed storage, and VeData validation protocol. The PPAs establish priority date; GreenSun commits to filing Non-Provisional applications within the 12-month window. Also actively deploying 1,000 EV charging stations with V-Green (VinFast) — proven operational capacity at provincial scale.
• Aladin Contract — Product Development and User Experience. Building Aladin App 2.0 (June 2026) with three modules — Chat, Work, and Trace. Users join Cardano via fingerprint and face: no seed phrase, no email, no blockchain knowledge required.

The Strategic Decision

The three teams unified in early 2026 around a single conclusion: migrate the entire infrastructure to Cardano. eUTXO provides constant per-batch cost today (production-tested), while the Midnight and Identus/Atala PRISM roadmaps align with our M5–M8 timeline. If Midnight does not reach mainnet by M5, OriLife operates on Cardano L1 with consumer-facing fields on-chain and trade secrets off-chain on LampNet — Midnight is an upgrade, not a dependency.

Strategic Opportunity for Cardano

OriLife is positioned to apply for inclusion in Vietnam's list of national strategic traceability platforms under Decision 1236/QĐ-TTg (National Blockchain Strategy 2024–2030). Selection — if granted — would mark the first sovereign-government adoption of Cardano for provincial-scale agricultural infrastructure. This is upside, not a dependency. Circular 11 applies regardless; OriLife is the compliant solution for Đắk Lắk's 12,000 ha either way.

Resolution 57-NQ/TW (Politburo, Dec 22, 2024) identifies AI and blockchain as national strategic technologies, with agriculture topping the priority list — the highest political corridor a tech project can operate within in Vietnam.

Verifiable Evidence — Verify Before You Vote

• Working PoC: orilife.io/demo · lampnet.cloud
• VeData on Cardano Preprod: verified batch transaction
• Source code: OriLifeTrace · PhoenixKeyDID · LampNetCloud
• Forum discussion: Cardano Forum thread
• Whitepaper: orilife.io/whitepaper
• Legal IP: USPTO PPAs #64/030,398· #64/031,291 · #64/031,472 · #64/032,593

Alliance self-invested nearly $500,000 USD before this proposal — funding the PoC, LampNet MVP, PhoenixKey prototype, two seasons of TonFarm field deployment, institutional relationship-building across 46 communes, USPTO PPA filings, and conferences. Demonstrated commitment, not theoretical. The Treasury is asked to scale work that already works.

What Does the Cardano Treasury Invest In?

1. Real-World On-Chain Activity at Full Scale (Targets, Not Guarantees)

Metric	Target at M7	Basis
Area covered	12,000 ha	Extension Center MOU
Farm households	12,000	~1 ha/household
PhoenixKey DIDs created	24,000	2 persons/household
Durian trees registered	1,200,000	100 trees/ha
Fruits identified per season	180,000,000	150 fruits/tree
On-chain events per year	~1.0M–1.2M	Detailed below

Activity breakdown at full operational scale:

Activity	Events/year	Settlement	Required or optional
VeData batch anchors (cultivation, Bio-ID)	~600,000 events → ~6,000–7,500 L1 tx	Path A direct L1	Required for compliance
Setup (DID, NFT minting)	~100,000	Direct L1	One-time per farm
Commercial escrow (farmer ↔ trader)	~60,000	Direct L1 Plutus tx	Optional — adopted at trader's choice
Labor contracts (farmer ↔ worker)	~300,000	Direct L1 Plutus tx	Optional — opt-in dispute-resolution layer, not required by law
Path B audit decommits (Hydra)	~2,190	Hydra → L1 every 4–8h	Fixed system cost

Important distinction. Compliance traceability (VeData anchors + setup) is the legally-required core. Commercial escrow and labor contracts are optional opt-in modules — adopted only where dispute-resolution value justifies the per-tx MAGIC cost. The 1.0–1.2M figure is upper bound; realistic Year 1 may be 50–60%. All transaction fees paid by users via MAGIC, not from this GA.

2. ADA Permanently Locked at M4

Lock Location	ADA
minADA in 12,000 Farm NFTs	~24,000
minADA in 24,000 farmer wallets	~48,000
Commercial escrow contracts	~3,000+
Total at M4	~75,000+ ADA

This is immediate, verifiable, permanent value to the Cardano ecosystem regardless of future activity volume. minADA returns to owners only on NFT burn or wallet closure — neither occurs in normal operation.

3. Treasury Returns Are Multi-Dimensional

A common objection: "If Treasury earns ~$7,150/year in fees, payback is 84 years." This frames OriLife as a bond, which it is not. Treasury receives four distinct returns:

1. ~75,000 ADA permanently locked at M4 — immediate verifiable value.
2. 24,000 new Cardano users with W3C DIDs — addressable for any future Cardano application.
3. ~28,600–28,800 ADA/year fee contribution at full scale, growing as the SDK extends to adjacent crops.
4. First sovereign-government-affiliated Cardano agricultural deployment at provincial scale.

Fee contribution is the smallest of the four. Treating it as the only return understates the investment.

Why Cardano Is the Right Chain

Three requirements must be met simultaneously. Cardano is the only L1 where all three primitives are mature today or on a roadmap aligned with our M5–M8 timeline:

Requirement	Cardano's answer
Constant per-batch cost for high-volume identification	eUTXO + Sparse Merkle Tree — 1 transaction commits up to 15,000 fruit state changes; cost does not grow with batch size. Production-tested today.
Commercial privacy for export trade	Midnight ZK Proof — selective disclosure per party. Mainnet timing aligns with M5; fallback uses Cardano L1 with off-chain trade fields on LampNet.
Government-scale W3C DID	PhoenixKey on Identus / Atala PRISM — biometric, no seed phrase. Source: github.com/PhoenixKeyDID.

Ethereum: gas wars make batch economics unpredictable. Solana: no native privacy primitive. Other L1s: no production-ready W3C DID infrastructure.

Per-batch cost economics. Each Farm NFT stores only a 32-byte Merkle root. Updating 50 of 150 trees recomputes ~700 nodes; other trees and fruits cost zero recomputation. Datum size bounded at ≤580 bytes — never grows with record count.

Cost reduction vs label-per-fruit baseline. Legacy TonFarm 2024 on TON (verifiable on tonviewer) hashed each fruit as a separate tx at ~$0.17/fruit (2024 rates). OriLife on Cardano with VeData batching delivers ~$0.000009/fruit at $0.25/ADA. Reduction: ~19,000×.

Why a Production Deployment, Not a Larger Spec

Predecessor platforms invested heavily without solving the structural problem:

Platform	Investment	Status	Core limitation
IBM Food Trust	~$200M+	Pivoted to FSMA 204 compliance tool	Voluntary enterprise procurement; label-dependent
VeChain × Walmart China	~$10–50M	Operational	Physical label still detachable
SEA2SEE (EU Horizon)	€5.4M / 4 yrs	Pilot stage	No legal liability for non-compliance
TE-FOOD	~$10M	Operational; TONE token -99%+	Label-dependent; speculative tokenomics

The 2025 Vietnam scandal occurred in a market where TE-FOOD has operated at scale (400K+ tx/day) for years. The label could still be peeled. Investment level was not the bottleneck — architecture was.

OriLife resolves two structural failures predecessors share:

1. Adoption layer: enterprise procurement vs farm-level legal obligation. Predecessors required enterprises to subscribe; adoption stalled when budgets shifted. Circular 11/2026/TT-BCT places the legal obligation directly on each food production establishment.
2. Identity carrier: detachable label vs biological feature. Bio-ID uses the durian fruit's structural skin texture — see orilife.io/demo. There is no label to peel, no QR code to transplant. The fraud vector is closed at the source.

Cost efficiency. OriLife targets ~$50/ha digitized vs typical $300–800/ha for comparable Vietnamese-context grants. Drivers: Vietnamese engineering cost structure with global-quality output, AI-assisted development workflows, building on Cardano's public primitives.

Data Flow

• Farm → LampNet: AI processes on-device, signs with PhoenixKey, sends <1KB. Image content-addressed via lamp://CID, available to consumers ~5s — Layer 0 visible before VeData validation (Layer 1, ~15–25s) and Cardano confirmation (Layer 2, ~41–61s). Source: github.com/LampNetCloud.
• LampNet → VeData: 5-layer validation — device origin, image authenticity, GPS within registered farm boundary, temporal validity, biological plausibility. Failure rejects data before Cardano.
• VeData → Cardano (Path A): Farm NFT updates batched every ~20s, ~80–100 farms per tx, ~0.0089 ADA per NFT after CIP-33 reference script optimization. PRIORITY_HIGH events bypass timeout for ~25–35s confirmation.
• VeData → Cardano (Path B): Hydra Head (3 LampNet nodes) commits Merkle root to L1 every 4–8h at ~0.45 ADA per decommit. Path A operates correctly regardless of Path B status.
• Cardano → Parties: Midnight View Keys (when available) deliver per-party data; until then, OriLife operates with consumer-facing fields on-chain and trade-secret fields off-chain on LampNet.

Milestones (M0–M8)

#	Milestone	Target	ADA	USD	%
M0	Foundation + Mobilization Advance	—	360,000	$90,000	15.0%
M1	Alpha — 750K sample fruits	750K	260,000	$65,000	10.8%
M2	Beta App + Contract Freeze	—	220,000	$55,000	9.2%
M3	Audit + Mainnet Launch	—	180,000	$45,000	7.5%
M4	Pilot — 7.5M fruits / 500 ha	7.5M	280,000	$70,000	11.7%
M5	SDK Open + Multi-app	—	200,000	$50,000	8.3%
M6	Beta — 45M fruits / 3,000 ha	45M	260,000	$65,000	10.8%
M7	Mass — 180M fruits / 12,000 ha	180M	280,000	$70,000	11.7%
M8	Global Integration + Sustainability	—	360,000	$90,000	15.0%
Total		180M	2,400,000	$600,000	100%

Each milestone has Output — Acceptance Criteria — Evidence for IOB. Funds locked in Intersect-managed escrow (Annex D), disbursed only upon 2-of-3 IOB signatures. Automatic timeout returns ADA to Treasury — no new vote required.

M0 advance protection. The 360,000 ADA M0 tranche is a Mobilization Advance disbursed immediately upon GA ratification. Protected by: (a) 90-day Clawback if M1 not submitted; (b) 30-day Spending Report — failure freezes all M1–M8; (c) IOB 2-of-3 sign-off on M0 preconditions before disbursement.

Treasury Protections

Scenario	Action
M0 advance disbursed	90-day Clawback if M1 not submitted
M0 Spending Report missed (30 days)	All M1–M8 frozen until remediated
Milestone overdue	Smart contract auto-returns ADA to Treasury
IOB rejects milestone	No disbursement; 30 days to remediate
Project terminates	All remaining ADA to Treasury within 14 days
Surplus at M8	Reimburse Alliance self-funded → contingency → ecosystem reinvestment

Sustainability After the Grant

Three revenue streams sustain operations: (1) MAGIC credit usage fees — users purchase MAGIC in VND for on-chain settlement, LampNet storage, AI processing; internal compute energy with no public trading market; (2) B2B Compliance SaaS — export enterprises subscribe for GACC + GS1 EPCIS v2.0 + Midnight View Key services, paid as MAGIC; (3) SDK ecosystem expansion to coffee, melon, aquaculture.

Post-M8, adoption is market-driven by Circular 11's legal pressure on every Vietnamese food production establishment. The 20% Treasury fee mechanism ensures every transaction contributes to Cardano's Treasury without further commitment.

Financial Discipline

Alliance self-invested ~$500,000 USD before this GA. Budget anchored at $0.25/ADA.

• At ≥ $0.25: Full planned scope executes. Surplus at M8 follows Annex D Scenario 6.
• Below $0.25: Alliance self-funds the gap. Deployment continues without scope reduction.
• Above $0.30: Surplus reimburses Alliance self-funded; remainder becomes contingency or ecosystem reinvestment.

No tiered scenarios between $0.25 and $0.30.

Conflict of Interest — Disclosed

Duc Tiger is the Project Manager and also a dRep / SPO (TIGER pool). He votes ABSTAIN on this GA and all Treasury Withdrawal GAs during the voting period. All Alliance members — including Duc Tiger and Nguyễn Hùng Sơn — receive reasonable compensation from the GA budget, by role and contribution, recorded in milestone Spending Reports. Compensation breakdown in Annex C. No token allocation to voters. No Alliance member holds positions where ratifying this GA produces a side payment outside the documented compensation.