AT-251 tokens are digital collectibles tied to the oldest trees on Earth. Each tree can only be claimed once. When a tree dies, its token dies with it.
The battle to save the trees is being fought with political will.
History has shown that political will tires eventually.
We want to sign up a new army that won’t.
Every asset is a consensus. Gold. Currency. Land. This one is simple: old-growth trees are worth protecting, and scarcity is real.
The entire Mediterranean basin was forested. Gilgamesh walked through cedar forests in what is now arid Turkey. The cedars of Lebanon built Solomon’s Temple. All gone. Not because ancient peoples were evil, but because when someone needed wood more than the tree, self-interest won. We have tried governments, regulations, NGOs, corporations, and culture. They all fail on long enough timescales. We have never tried making trees too expensive to cut down.
Every AT-251 token is tied to a real tree. Free to claim. Free to hold. If the tree dies, fire, disease, logging, the token freezes. Permanently. Non-transferable. Gone. That risk is the entire point.
what if it does? ↗There is no payout when a tree dies. No insurance. No recovery. The only way to protect your position is to protect the tree. Your incentive and the tree’s survival are the same thing.
Only old-growth trees qualify, 250 years or older. They aren’t being made anymore. Every death reduces the supply permanently. The math only goes one direction.
why is that valuable? ↗The token references a GPS coordinate, like a trading card with a number on it. No landowner approval. No government partnership. No NGO. Observable reality, on-chain.
really? ↗Logging a tree is free, only network gas. The pool funds itself from recertifications every twenty-five years and from claims of dead-tree tokens, both paid by the person making the request. The protocol takes nothing on sales. Ever.
The Arboreal Root Encoding System generates a unique visual fingerprint for every tree on Earth. Enter any coordinate and the algorithm deterministically produces a root network. Same coordinates, same art, every time.
This is Phase 1 of a three-phase oracle decentralization roadmap. The contract is deployed and verified on Base mainnet. Eleven genesis trees are minted to the oracle wallet.
The protocol’s behavior is constrained by three commitments. They are not enforced by the contract. They are enforced by discipline, made visible here so you can hold us to them.
One, the genesis collection is sealed at eleven. The oracle wallet only ever holds these eleven trees. Future tokens, when user submissions open, mint directly to the submitter. The founder is never the recipient.
Two, the protocol takes nothing on sales. No royalties. No transfer fees. No hooks. Pool funds come from recertifications and dead-tree claims only.
Three, ownership of the contract will move toward distributed control, not be renounced. Phase 2 is multisig. Phase 3 is on-chain arbitration. At no point does the contract become unowned, because an unowned contract cannot transition to its next phase.
Phase 1, current. Single oracle wallet, founder-operated. Submissions reviewed by an automated coordinate sense-checker and the founder. Eleven genesis trees minted; user submissions admitted by review. The centralization is a necessary evil. The rules above are how we engineer against rugging while it persists.
Phase 2, multisignature oversight. Triggered when the registry has grown to a size at which single-operator review is no longer sufficient, the multisig group has assembled, and the verification process has been documented to the standard of a written specification. The threshold permits founder recusal, no signature from the founder is structurally required. Walletless onboarding lands; submitted trees become claimable without a crypto wallet.
Phase 3, permissionless verification. Triggered when the pool has self-funded for twelve months without external subsidy, a verifier population sufficient to bootstrap the Schelling game’s economic dynamics has formed, and ten or more active verifiers have demonstrated independent capability under the documented protocol. Oracle authority is replaced by a permissionless verification mechanism. The founder becomes a regular user.
Each phase’s required capability is provisioned by the same conditions that necessitate the phase. The multisig is unnecessary while one careful operator suffices, becomes necessary as the registry grows, and the registry grows by attracting the people who themselves operate the multisig. The same shape applies at the next transition. Nothing about the path forward depends on a separate scaling effort.
Three-layer architecture: satellite monitoring, holder self-verification, and emergent app ecosystem. Alive-until-proven-dead default. Technology exists commercially today.
Implemented in contract: ERC-721 _update reverts transfers of dead trees. One-way, irreversible. Token exists as memorial but never trades again.
“Tagging equals mining.” Submit coordinates of unregistered old-growth. If verified, tagger gets first token. Gold rush dynamics bootstrap the registry.
Two endogenous flows fund the pool: recertification fees, paid every twenty-five years per tree by whoever holds the token at recertification time, and claim fees, paid by anyone proving a tree has died and burning the token in exchange. No protocol fee on transfers. No external dependency. The pool’s solvency is a function of the registry’s activity, not of any oracle’s prices.
how does that work? ↗Kleros-style decentralized arbitration for edge cases. Key constraint: no party profits from a death ruling. Dispute stakers forfeit if they report falsely. The incentive architecture mirrors the core mechanism.
A collectible. A trading card with coordinates. You can’t cut the tree down with it, can’t fence it off. It references observable reality, no different from writing a latitude on a napkin and selling the napkin. It’s a Pokémon card with a number on it.
Read Research Note 001: The Permissionless Instrument →Know an old-growth tree that deserves protection? Submit its coordinates. Submitted trees are reviewed and added to the mintable set. When walletless onboarding lands in Phase 2, you’ll be able to claim a tree without a crypto wallet, starting with the trees people have submitted.