Sovereign Recovery
Recoverable without handing anyone permanent control.
Self-custody fails in one direction: the person who holds everything can lose everything. Sovereign Recovery makes recovery possible without making custody the price of it — the secret is split across people and devices you choose, and no share, including ours, is ever enough on its own.
A threshold, not a backup.
The recovery phrase is split into shares distributed to guardians you name, with a threshold set by you: any T of N can restore it and any T−1 learn nothing at all. Losing a guardian is survivable by design, which is the difference between a recovery scheme and a second thing to lose.
Each share encrypted to its own guardian.
A share is sealed to that guardian’s hybrid public key — X25519 combined with ML-KEM-768 — so a guardian holds something only they can open, and an adversary who records the traffic today cannot open it once a quantum computer exists. The guardians never see each other’s shares and never see the phrase.
There is no master key at UTXO Labs.
Not held offline, not held in escrow, not held for emergencies. A recovery path that ends at the company that wrote the software is custody wearing a friendlier word, and it is the single failure that every seized, frozen or abandoned platform has in common. If UTXO Labs Team could restore your assets, so could anyone who compelled the team.
The same mechanism, beyond the phrase.
The design extends the same split-and-threshold model to credentials, encrypted archives, a Vigi Passport, an agent identity and enterprise infrastructure. Today it protects a wallet; the parts that generalise it beyond the wallet are specified and not yet written, and this page will say so until they are.
The ten layers
Every layer, and what it is today.
- 01Vigi WitnessRunning
- 02Vigi PassportRunning
- 03Sovereign RecoveryRunning
- 04Vigi Autonomous EscrowProven end to end on a real chain — not yet on the public network
- 05Vigi ProvenanceRunning
- 06Proof of ProcessRunning
- 07Vigi Data V2Live public-testnet pilot — limited participation
- 08Vigi ContinuityProven end to end on a real chain — not yet on the public network
- 09Proof of RecoveryProven end to end on a real chain — not yet on the public network
- 10Vigi Machine EconomyLive public-testnet pilot — limited participation
Sovereign post-quantum network for verified value.
Post-quantum cryptographic security software: a sovereign network that strengthens custody, settlement and identity. Testnet active; mainnet opens when independent validation supports it. Ten layers, each with its own page and its real state on it: three running, two half-built, five written but not yet on the network.