#dusk $DUSK @Dusk I tried to onboard onto Dusk Trade's waitlist page today, expecting the usual drill — upload an ID, a selfie, wait for a human to check it. That's not how it's built.
Turns out Dusk runs eligibility through something called Citadel. A License Provider checks you once, off-chain, and hands you a private credential. After that you never hand your ID to anyone again — you generate a zero-knowledge proof that you hold a valid credential, without revealing which one, your wallet, or any of the details behind it. The chain only ever sees a proof that checked out.
Here's the part that got me thinking twice: Citadel doesn't decide if you get in anywhere. It only proves the credential's real. Each venue still picks which License Providers it trusts and what it wants. That's not a gap they missed — a Dutch MTF and a German broker don't run on the same rulebook, so one universal on-chain whitelist could never satisfy both. Splitting "prove it's valid" from "who accepts it" is what lets one credential work across venues that legally can't agree on the same standard.
Felt like flashing a wristband that proves you're old enough to get in, without ever handing over your ID at the door — except every venue on the street runs a different age law, and the wristband only proves the fact, never their local rule.
So does that actually make it easier to move between regulated venues on one credential, or does it just mean every venue quietly rebuilds its own gatekeeping behind the scenes, and "permissionless" ends up being a rounding error in how compliance really works here?
Turns out Dusk runs eligibility through something called Citadel. A License Provider checks you once, off-chain, and hands you a private credential. After that you never hand your ID to anyone again — you generate a zero-knowledge proof that you hold a valid credential, without revealing which one, your wallet, or any of the details behind it. The chain only ever sees a proof that checked out.
Here's the part that got me thinking twice: Citadel doesn't decide if you get in anywhere. It only proves the credential's real. Each venue still picks which License Providers it trusts and what it wants. That's not a gap they missed — a Dutch MTF and a German broker don't run on the same rulebook, so one universal on-chain whitelist could never satisfy both. Splitting "prove it's valid" from "who accepts it" is what lets one credential work across venues that legally can't agree on the same standard.
Felt like flashing a wristband that proves you're old enough to get in, without ever handing over your ID at the door — except every venue on the street runs a different age law, and the wristband only proves the fact, never their local rule.
So does that actually make it easier to move between regulated venues on one credential, or does it just mean every venue quietly rebuilds its own gatekeeping behind the scenes, and "permissionless" ends up being a rounding error in how compliance really works here?