Soulbound Token
What Soulbound Means
A soulbound token is a blockchain token that is permanently bound to a single address and cannot be transferred, sold, or delegated. Unlike standard NFTs or fungible tokens, it cannot move between wallets.
REP is minted as a soulbound token because reputation is identity-bound. A credential that can be sold is not a credential — it is an asset. Repute AI issues credentials, not assets.
The soulbound mechanic ensures that:
- REP represents the actual behavioral history of its holder, not a purchased reputation
- High-REP accounts cannot sell their influence weight to bad actors
- The protocol’s credibility infrastructure cannot be financialized
Technical Standard
REP soulbound tokens are implemented on TON using a custom non-transferable NFT contract. The contract enforces non-transferability at the protocol level — transfer operations are rejected by the contract’s logic, not just by policy.
The implementation is based on the TON NFT standard (TEP-62) with transfer operations explicitly disabled. This makes the non-transferability a smart contract guarantee, not a social convention.
The exact contract address will be published upon mainnet deployment. Pre-launch testing uses TON testnet. All on-chain interactions are cryptographically verifiable against the deployed contract.
Token Metadata
Each REP soulbound token stores the following metadata on-chain:
| Field | Type | Description |
|---|---|---|
rep_score | uint16 | Current REP score (0–1000) |
tier | uint8 | Current tier (0 = Explorer, 1 = Analyst, 2 = Structural Analyst, 3 = Intelligence Contributor) |
telegram_id_hash | bytes32 | One-way hash of the Telegram user ID (not reversible to raw ID) |
last_updated | uint64 | Unix timestamp of last metadata update |
avi_snapshot | uint8 | AVI normalized score at last update |
sis_snapshot | uint8 | SIS score at last update |
nsm_snapshot | uint8 | NSM normalized score at last update |
bpm_snapshot | uint8 | BPM × 100 (stored as integer) at last update |
tri_snapshot | uint8 | TRI score at last update |
Non-Transferability Guarantees
The soulbound contract enforces:
- No transfer function: The standard TON NFT transfer operation is not implemented in the contract. Calling it returns an error.
- No delegation: There is no mechanism to assign proxy rights to another address.
- No burn-and-remint: To prevent workarounds where a user burns their token and has someone else remint to a new address, reminting is only possible to the same address that holds the original token.
- Address binding: The
telegram_id_hashis permanently bound to the minting wallet address at the time of first mint. Any attempt to link the same Telegram identity to a new wallet is rejected by the protocol.
Permanent Wallet Binding
Once your REP soulbound token is minted, your Telegram identity is permanently bound to that wallet address in the protocol. If you lose access to your wallet, your REP cannot be transferred or reminted to a new wallet. Choose your wallet carefully before minting.
Updatability
While the token cannot be transferred, its metadata is updateable. As your REP score changes over time, the on-chain token metadata is updated to reflect the current score, tier, and model snapshots.
Updates are triggered by the REP recomputation process (every 24 hours if a meaningful delta is present). The wallet address and telegram_id_hash fields are immutable — only score and snapshot fields change.