AirShare+

Airsidian Inc · Version 0.4

ASP White Paper

AirShare+ connects people, places, opportunities and payments. ASP is intended to support member-to-member utility, while Seer helps explain the experience without controlling financial actions.

Open September 20 PDF snapshot ↗

Web status updated October 1, 2026. The PDF is a September 20 snapshot. The v0.4 paper below is retained as a historical draft and contains superseded token figures. Beta ASP credits have no monetary value.

Current controlled update · October 1, 2026

What ASP is meant to do for members

ASP is intended as a utility and payment layer for jobs, services, marketplace purchases and eligible participation across AirShare+. Members should see the recipient, amount, fees, network and settlement status before confirming a real transfer. Using the network does not require staking ASP.

Cardano ASP / ADA integration is in owner testing. General member availability and successful settlement of a particular transaction require current account eligibility and a confirmed settlement record. Do not describe all ASP as test credits, or announce unrestricted trading from implementation notes. A limited company mainnet sASP mint/send/return trial has confirmed receipts. General member private ASP settlement is not live. Company trials do not prove customer ASP debits, recipient ASP credits or unrestricted availability.

Token supply correction

Native ASP is a Cardano asset. The owner confirmed 1 billion whole ASP with zero decimals; the registry has no decimals entry. Test credits are separate and have no monetary value. Supply is not a valuation or proof of an immutable mint cap. The owner selected a $0.005 starting reference followed by a price that moves with trading. This is not a fixed peg, guaranteed redemption price, or verified external market price. Use a fresh executable quote for any actual payment or exchange. Reserve allocation, circulation, lockups and any permanent mint cap require separate verification. Historical burn figures below are superseded.

Seer and member control

Seer can explain published rules and guide members through supported screens. Optional OpenAI-generated wording is constrained by AirShare+ policy and reviewed facts. Seer cannot access a recovery phrase, sign transactions, move funds, change wallet settings or approve a financial action. Members must review and confirm eligible actions through the designated wallet flow.

The sections below reproduce historical version 0.4 for transparency. Where they conflict with the current update above, the older figures are not current terms.

Document control
Field
Publisher
Controlled value
Airsidian Inc
Field
Ecosystem
Controlled value
AirShare+ / ASP
Field
Version
Controlled value
0.4 — Cardano and exchange launch scope
Field
Network stage
Controlled value
Cardano Preprod preparation; Preview available for isolated development
Field
Mainnet status
Controlled value
Not launched
Field
Maximum lifetime supply
Controlled value
100,000,000 ASP
Field
Custodial operator
Controlled value
Airsidian Inc
Field
Federal filing status
Controlled value
Management reports a submitted FinCEN filing; supporting evidence requires verification
Field
Review cycle
Controlled value
Before each material release and at least annually

Important notice

This paper describes a specified technology and utility ecosystem. It is not an offer to sell securities, a solicitation, investment advice, a guarantee of launch, or a promise of profit, price appreciation, liquidity, rewards, exchange listing, or regulatory approval. Testnet ASP has no monetary value. Any future mainnet release will require separate approvals and final documentation.

Contents

Part
1-3
Subject
Executive summary, purpose and design principles
Part
4-6
Subject
Cardano architecture, token specification and supply
Part
7-10
Subject
Utility, payments, marketplace, voting and participation rewards
Part
11-13
Subject
Burn mechanism, Burner badges and custody
Part
14-17
Subject
Security, compliance, governance and roadmap
Part
18-20
Subject
Risk factors, disclosures, glossary and sources
1. Executive summary

AirShare+ connects people, places, opportunities and payments in one real-world network. Developed by Airsidian Inc, AirShare+ combines social connection, local discovery, jobs, services, commerce, crypto and payments in a single utility network. AirShare+ is in its live beta launch. People use the network to meet, find what is nearby, discover work, arrange services and participate in local commerce; each screen identifies what is available during beta. ASP is the economic and payment layer underneath these experiences; its purpose begins with useful activity inside the network.

The maximum lifetime supply is 100 million ASP with six display decimals. Supply would be allocated across community rewards, marketplace and participation incentives, ecosystem treasury, liquidity, contributors, and partnerships. Only a limited portion would enter circulation initially. No ASP presale has taken place.

1.1 The network and its economic layer

Management has confirmed 100,000,000 ASP as the lifetime supply cap and the burn mechanism as part of the system design. ASP staking is not part of the launch plan. Native asset issuance, burn execution and exchange require verified implementation before activation. Initial issuance and circulation are separate quantities.

The full utility stack brings together job and task payments, marketplace purchases, services, rewards and other in-app transactions, with transaction fees, the burn mechanism, treasury and custody infrastructure, and eligible governance or voting. These functions support network activity; availability remains explicit in each product screen.

AirShare+ is the first major application described in this paper. ASP and the underlying account, payment, custody and intelligence infrastructure can eventually support additional Airsidian products and services. Expansion requires separate integration, permissions and activation evidence; it does not imply that other applications or markets already operate.

1.2 What is available today

Area
Beta ASP
Current state
In-app test credits and member-to-member test transfers; no monetary value and no claim on future tokens.
Area
Cardano
Current state
Primary network selected. Preprod integration is in preparation; no deployed ASP policy or native asset is claimed.
Area
Exchange and Listings
Current state
Dedicated Buy ASP / Sell ASP and review screens cover ASP / ADA. Verified prices, fees and settlement are not connected; confirmation and execution remain disabled.
Area
AirVoting
Current state
Test-credit-weighted ballots and timed credit locks exist. XRP / ATOM is the next prepared pair vote, pending publication of its closing date.
Area
Burn mechanism
Current state
Information section and defined operating rules; burn execution remains disabled. ASP staking is excluded from launch.
Area
Seer
Current state
Guidance and supported authenticated read-only tools. No custody signing or autonomous financial execution.

ASP is separate from any future Airsidian corporate share allocation. A beta checklist or test-credit balance is not a share certificate, token redemption right or investment entitlement.

1.3 What ASP is intended to do

• Pay for eligible jobs and completed tasks, marketplace purchases, local services and other in-app transactions using one economic layer.

• Reward verified contribution and participation without promising investment returns.

• Support community signaling and governance mechanisms that resist simple wealth-based capture.

• Create transparent, verifiable supply and burn records on Cardano.

• Allow future dApp and smart-contract integration without rebuilding the asset as a conventional contract token.

1.4 What ASP is not

• ASP is not equity, ownership in Airsidian, or a claim on corporate revenue or assets.

• ASP is not a stablecoin and is not promised to maintain a fixed dollar value.

• ASP is not a bank deposit and is not represented as FDIC-insured.

• ASP does not guarantee voting control, profit, yield, liquidity, redemption, or exchange listing.

• Testnet ASP cannot be purchased, redeemed, or converted into future mainnet ASP.

2. Purpose and ecosystem role

AirShare+ is a major application within the broader Airsidian ecosystem. Its social connections and local signals create the context for opportunities, completed work, commerce and payments. ASP supplies a common economic unit for eligible transactions across that network. The architecture keeps the everyday experience centered on what people want to do, with wallet, custody and settlement infrastructure supporting the activity underneath.

2.1 One network three supporting layers

AirShare+ is the experience layer: people, places, opportunities, work and commerce. ASP is the economic layer: eligible payments, fees, rewards and settlement. Seer is the intelligence layer: guidance, useful insights, moderation signals, trends and system intelligence from appropriately authorized network activity and platform data.

A member can discover an opportunity, agree a task or purchase, complete the interaction and follow its payment record within the same network. On-chain and off-chain adaptability supports different transaction types: private internal account movements for suitable in-app activity and Cardano settlement where a public-chain transaction is needed. The accounting must reconcile across both paths; off-chain does not mean unrecorded or hidden from the custodian.

Use area
Jobs and tasks
Defined ASP role
Payment for accepted and completed duties
Default user protection
Agreed amount, completion evidence, review and disputes
Use area
Services
Defined ASP role
Pay eligible providers for agreed work or services
Default user protection
Clear scope, milestones and fee disclosure
Use area
Marketplace
Defined ASP role
Purchases and settlement between eligible buyers and sellers
Default user protection
Delivery, refund and dispute records
Use area
In-app transactions
Defined ASP role
Eligible features, transfers and transaction fees
Default user protection
Recipient confirmation and itemized receipts
Use area
Participation rewards
Defined ASP role
Funded rewards for eligible contributions
Default user protection
Published eligibility, limits and funded budgets
Use area
Burn mechanism
Defined ASP role
Fee-funded and voluntary supply reduction
Default user protection
Confirmed execution and shared supply floor
Use area
Treasury and custody
Defined ASP role
Account records, reserve management and settlement
Default user protection
Segregation, reconciliation and controlled signing
Use area
Eligible governance
Defined ASP role
Community voting and governance signaling
Default user protection
Eligibility, scoped authority and anti-abuse controls
3. Design principles

Real-world utility first. Every ASP function must serve people, places, opportunities, work, commerce or payments, with a product purpose independent of token price.

Safety before scale. Real value remains disabled until technical, operational, licensing, and governance gates close.

Transparent supply. Minting, treasury movement, vesting, rewards, and burns must be independently verifiable.

Customer assets are not company funds. Custodial balances must be segregated and reconciled.

Simple user experience. AirShare+ should abstract blockchain complexity without hiding material risks or fees.

Progressive decentralization. Governance can expand only when participation, security, and legal structure can support it.

Chain adaptability. Critical product records should remain portable if Airsidian later launches or adopts another network.

3.1 Public transparency commitments

• Publish the verified Cardano policy ID before any mainnet distribution.

• Publish maximum supply, circulating supply, treasury balances, vesting wallets, and cumulative burns.

• Identify which actions occur on-chain and which are recorded on Airsidian's internal custodial ledger.

• Disclose material smart-contract, custody, counterparty, liquidity, and regulatory risks.

• Maintain change history for tokenomics and governance rules.

4. Why Cardano

ASP is designed to operate on Cardano as a native token within the Cardano ecosystem. Its primary utility is the economic and payment layer underneath AirShare+, with potential use across the wider Airsidian ecosystem. Cardano is the underlying blockchain; ASP is the application token. Native ASP issuance is still in preparation.

Cardano supports native assets at the ledger level. A Cardano token is identified by its policy ID and asset name, and basic transfers do not require execution of a separate token contract. Smart contracts remain available for functions that genuinely require programmable enforcement, such as governed treasuries, participation contracts, or specialized mint-and-burn controls.

ADA pays Cardano transaction fees and supplies the minimum ADA required in native-token outputs. ASP is a distinct native asset identified by policy ID and asset name. Holding ASP does not make it ADA and does not itself participate in Cardano consensus staking. Treasury ADA, customer ADA and any pool rewards require separate accounting.

Capability
Native asset model
Relevance to ASP
ASP can move under Cardano's multi-asset ledger rules without a conventional token contract for every transfer.
Capability
eUTXO architecture
Relevance to ASP
Transactions are explicit and locally testable, supporting deterministic accounting and controlled batching.
Capability
Smart contracts
Relevance to ASP
Advanced marketplace, governance, locking, escrow, and treasury functions can be added selectively.
Capability
Proof of stake
Relevance to ASP
Energy profile and ecosystem align with long-term network participation.
Capability
Test networks
Relevance to ASP
Preview supports active development; Pre-production supports final pre-mainnet rehearsal.
Capability
Tradeoff
Relevance to ASP
Token-bearing outputs require minimum ADA, and operational UTXO management needs careful engineering.
5. Token specification
Parameter
Asset name
Defined design value
ASP
Status
Defined
Parameter
Display name
Defined design value
AirShare Plus Token
Status
Defined
Parameter
Blockchain
Defined design value
Cardano
Status
Selected for testnet
Parameter
Test network
Defined design value
Preprod preparation; Preview for isolated development
Status
Planned
Parameter
Mainnet policy ID
Defined design value
Not created
Status
Open
Parameter
Maximum lifetime mainnet supply
Defined design value
100,000,000 ASP
Status
Defined
Parameter
Display decimals
Defined design value
6
Status
Defined; metadata convention
Parameter
Smallest display unit
Defined design value
0.000001 ASP
Status
Defined
Parameter
Initial circulating target
Defined design value
10-15 million ASP
Status
Planning range
Parameter
Presale
Defined design value
No presale has taken place
Status
Current decision
Parameter
Custodial operator
Defined design value
Airsidian Inc
Status
Current design
Parameter
External withdrawals
Defined design value
Disabled by default
Status
Separate activation gate

5.1 Minting-policy objective

The specified policy should permit a single authorized initialization and thereafter reject all positive issuance while allowing properly authorized burns. A simple reusable signing-key policy alone would not prove a permanent lifetime cap. The 100 million ASP lifetime cap, one-time initialization condition, burn authority and no-remint rule must be formally specified and independently tested before the policy ID is final.

• Initialization requires a defined one-time condition and approved multisignature authority.

• The target is to prevent any administrator from exceeding the lifetime issuance cap or replacing burned units through later minting. That protection is not implemented or audited yet.

• Burns require authorized transactions and auditable references.

• Treasury and policy keys use separate roles, hardware protection, recovery procedures, and approval thresholds.

• Testnet keys, policy IDs, and assets are never reused on mainnet.

5.2 Precision and asset identity

The specified six decimals imply 100,000,000,000,000 base units at the 100 million ASP cap; 0.01 ASP equals 10,000 base units. Cardano records integers. Services must use checked integer arithmetic, store the exact policy ID and asset name, and reject wrong-network or look-alike assets. Existing beta credits use a separate internal representation and must not be silently converted into this future supply.

6. Supply allocation and release
Allocation
User rewards and participation
Share
30%
Maximum ASP
30,000,000
Purpose
Verified contribution, adoption and community programs
Allocation
Marketplace and participation incentives
Share
20%
Maximum ASP
20,000,000
Purpose
Marketplace growth and verified participation rewards
Allocation
Airsidian ecosystem treasury
Share
20%
Maximum ASP
20,000,000
Purpose
Development, compliance, security and ecosystem operations
Allocation
Liquidity reserve
Share
15%
Maximum ASP
15,000,000
Purpose
Orderly market support subject to approved controls
Allocation
Team and contributors
Share
10%
Maximum ASP
10,000,000
Purpose
Long-term contributors under vesting restrictions
Allocation
Grants and partnerships
Share
5%
Maximum ASP
5,000,000
Purpose
Approved integrations and community initiatives

Allocation is not the same as immediate circulation. Treasury-controlled allocations remain non-circulating until released under published authority, schedules, and operational controls. The specified initial circulating range is 10-15 million ASP; the exact amount and release schedule remain open.

6.1 Presale status

No ASP presale has taken place. Airsidian has not included a presale in the current launch plan. Test ASP has no monetary value and may not be sold or represented as an investment. Any future mainnet distribution must follow a published release policy and applicable approvals; participation in AirShare+ does not promise token appreciation, profit, liquidity, or an exchange listing.

• No early purchaser receives ASP at a confidential preferential price.

• Team and contributor allocations remain subject to disclosed vesting and conflict controls.

• User rewards are earned only under published program rules for verified activity.

• A future public purchase feature, if ever approved, would require separate pricing, consumer-disclosure, licensing, tax, sanctions, and token-classification review.

7. Payment utility

ASP is intended to function as an optional payment method inside approved AirShare+ experiences. Marketplace and job prices may be displayed in a familiar reference currency while settlement uses the calculated ASP amount. A quote must state its source, timestamp, expiration, fees, burn contribution, and final amount before confirmation.

7.1 Jobs and completed duties

AirShare+ may let an authorized requester offer ASP for a defined job, duty, task, service, or community contribution. The app records the scope, ASP amount, deadline, acceptance criteria, authorized payer, and dispute terms before work begins. ASP is released only after the required completion event or an approved dispute decision; Airsidian then posts the corresponding entries to its custodial ledger and includes the payment in an on-chain settlement batch when required.

A requester publishes or assigns an eligible job or duty with a stated ASP payment.

An eligible participant accepts and completes the work.

The requester, approved reviewer, or rule-based workflow verifies completion.

AirShare+ releases the stated ASP to the participant's custodial balance, less only charges disclosed in advance.

The receipt identifies the job, payer, recipient, gross ASP, fee, burn contribution, completion evidence, and settlement status.

7.2 Proxy Jobs payment states

The specified duty flow is offer → accepted → funds reserved → work submitted → review or dispute → approved settlement → receipt. A requester should fund or reserve the full worker payment and disclosed fee before work begins. A pending reservation is unavailable for a second payment. Partial milestones, cancellation, deadlines, worker acceptance and dispute escalation must be agreed in advance.

Seer may help write a clear duty description, summarize completion evidence and guide both parties through status. She cannot certify physical work merely from a chat message or approve her own payment decision. Settlement needs the designated human approval or a separately approved deterministic rule, with an appeal path.

For illustration only, a duty paying 100 ASP with a separately disclosed 1 ASP fee would debit 101 ASP, credit the worker 100 ASP, and allocate 0.01 ASP from the earned fee to a pending burn reserve. The remaining 0.99 ASP is company fee revenue before other costs. No such production fee schedule is currently activated.

7.3 General transaction lifecycle

A verified user selects an eligible product, service, or transfer.

The app displays the ASP amount, recipient amount, platform fee, burn contribution, network treatment, and refund status.

Airsidian checks account status, location, limits, sanctions controls, fraud signals, and available custodial balance.

The internal ledger posts an immutable double-entry record. On-chain settlement occurs only when required by the operating model.

The user receives a receipt with transaction ID, timestamp, amount, fee, burn amount, status, and support path.

7.4 Fee mechanism

Airsidian charges the disclosed platform fee when the relevant production service is activated for eligible job payments, marketplace purchases, transfers, or other enabled services. The fee is separate from the seller's or worker's stated payment unless the confirmation screen expressly shows a different arrangement. Airsidian recognizes the fee in its operating ledger and funds the scheduled 0.01 ASP burn from that earned fee; the burn is not an additional deduction from the recipient.

• The confirmation screen shows the gross payment, payer charge, recipient amount, Airsidian fee, burn contribution, and any network charge.

• Fees are shown before authorization and cannot be hidden inside an exchange rate.

• No-fee transactions generate no automatic burn unless Airsidian intentionally funds it from an approved treasury budget.

• Failed or fully reversed transactions do not generate a final burn unless a disclosed nonrefundable fee was validly earned.

• Bots, wash activity, and self-dealing do not qualify for incentives or Burner recognition.

8. Marketplace model

The marketplace may enable approved users to exchange eligible goods and services using ASP. Airsidian's role, custody model, dispute process, prohibited items, refunds, tax reporting, seller verification, and jurisdiction availability must be disclosed before activation.

At checkout, AirShare+ reserves the buyer's ASP, confirms the seller and listing remain eligible, and posts settlement to the private custodial ledger. Depending on the product rules, funds may release immediately, after delivery confirmation, or after a disclosed holding period. A refund reverses the applicable internal entries when still reversible; completed on-chain transfers require a new authorized return transaction rather than deletion of the original record.

Control area
Seller onboarding
Minimum design
Identity, business information where applicable, sanctions and prohibited-business checks
Control area
Listing controls
Minimum design
Prohibited-items taxonomy, reporting, moderation and evidence preservation
Control area
Payment protection
Minimum design
Clear settlement state; escrow only if specifically implemented and authorized
Control area
Disputes/refunds
Minimum design
Time limits, evidence intake, decision authority and ledger treatment
Control area
Fees and burns
Minimum design
Itemized platform fee and fee-funded burn shown on receipt
Control area
Geography
Minimum design
Deny by default until each jurisdiction and product combination is approved

8.1 Delivery disputes and refunds

Marketplace settlement must link the order, listing snapshot, delivery evidence, buyer and seller approvals, and exact payment authorization. A delivery claim alone is not final proof. Product rules define when a hold expires, who can decide a dispute, and which evidence is shared. Disputed or refundable fees should not be included in a burn batch until eligibility is established.

An internal refund uses compensating ledger entries, preserving the original receipt. If tokens have already been burned, they cannot be unburned; the company must fund any valid fee refund from its own reserve. A return from an external wallet requires a new transaction and cannot be guaranteed.

9. Voting and governance signaling

ASP may support community signaling on specified new AirShare+ items, features, marketplace categories, badge designs, community programs, and other published choices. A proposal page should explain the item, choices, voting window, eligibility rule, vote-weight method, quorum, result status, and whether the outcome is advisory or binding. Token ownership alone should not buy unrestricted control over AirShare+ or Airsidian.

9.1 Anti-capture model

• Verified-person eligibility and anti-Sybil controls.

• Voting-power caps so a small number of large holders cannot dominate every decision.

• Quadratic or conviction-based mechanisms only after simulation and abuse testing.

• Separate proposal categories for community preferences, treasury grants, product priorities, and protocol changes.

• No community vote can require unlawful conduct, expose confidential security controls, seize customer property, or override sanctions and safety obligations.

9.2 Initial voting scope

May be considered
Community feature priorities
Reserved to Airsidian / regulated functions
Custody, sanctions, fraud and account restrictions
May be considered
Badge themes and community programs
Reserved to Airsidian / regulated functions
Legal and regulatory compliance
May be considered
Eligible grant recommendations
Reserved to Airsidian / regulated functions
Corporate governance and fiduciary decisions
May be considered
Marketplace category feedback
Reserved to Airsidian / regulated functions
Emergency security actions and incident response
May be considered
Published ecosystem proposals
Reserved to Airsidian / regulated functions
Minting-policy keys and protected infrastructure

9.3 Current pair vote and future voting controls

ASP / ADA stays first. The prepared next vote chooses XRP or Cosmos ATOM as an additional planned pair, not a replacement primary chain. After a closed vote with a sole winner, Listings can show ASP / ADA, then ASP / XRP or ASP / ATOM, followed by Next voting. Ties or no votes select neither. Selection does not create liquidity, a bridge, an exchange listing or permission to trade.

The current beta ballot uses the amount of in-app credits a member locks as vote weight, with one recorded ballot per account per proposal and release after the fixed deadline. The caps, verified-person rules and anti-capture mechanisms above are specified improvements, not claims about the current implementation. Custody, security and regulatory decisions remain outside community voting authority.

10. Participation and funded rewards

ASP staking is not part of the launch plan. Members do not need to stake ASP to use eligible payments, jobs, services, marketplace purchases or ordinary transfers. The network focuses on useful activity and completed transactions.

Participation rewards can recognize verified contributions under published eligibility rules, per-account limits and an approved funded budget. Rewards are drawn from the defined allocations within the 100 million lifetime supply cap. Holding ASP alone does not create an entitlement to yield. No ASP lock-up or staking reward program is offered at launch.

AirVoting reservations and job or marketplace payment holds serve specific transactions. They remain separately disclosed, time-bound account states; they are not an ASP staking program. The same funds cannot be spent while reserved. Release and refund entries preserve the original audit record.

10.1 ADA delegation is separate

Delegating ADA to a Cardano stake pool supports Cardano consensus and may earn protocol rewards. ASP is a separate native asset and does not secure Cardano consensus through staking. Any delegation of company-owned ADA is a separate treasury decision with its own accounting. Customer assets are not automatically delegated, lent or reused.

Any later ASP reward or locking product would require a separate decision, published terms and verified implementation. There is no promised APR, APY, fixed return or staking launch date in this paper.

11. Burn mechanism

ASP uses a defined, transparent burn mechanism funded from Airsidian's platform-fee revenue on eligible completed transactions. Burning means permanently destroying ASP through an authorized negative-mint transaction under the Cardano policy, thereby reducing outstanding supply. Burning does not guarantee scarcity-driven demand, price appreciation, liquidity, or economic return.

Parameter
Base burn
Rule
0.01 ASP per eligible completed fee-bearing transaction
Parameter
Economic source
Rule
Airsidian's collected platform fee
Parameter
Sender treatment
Rule
Pays the disclosed transaction amount and platform fee
Parameter
Receiver treatment
Rule
Receives the stated payment amount without burn deduction
Parameter
No-fee activity
Rule
No automatic burn by default
Parameter
Failed/refunded activity
Rule
No final burn unless the underlying fee remains earned and policy permits
Parameter
Verification
Rule
Cardano transaction reference and cumulative public burn counter
Parameter
Change control
Rule
Published governance and Airsidian approval; prospective changes only

11.1 Burn examples

Eligible transactions
100
ASP burned
1 ASP
Percent of 100M maximum
0.000001%
Eligible transactions
10,000
ASP burned
100 ASP
Percent of 100M maximum
0.0001%
Eligible transactions
1,000,000
ASP burned
10,000 ASP
Percent of 100M maximum
0.01%
Eligible transactions
100,000,000
ASP burned
1,000,000 ASP
Percent of 100M maximum
1.0%

11.2 Burn safeguards

• The burn floor is 50,000,000 ASP of total outstanding supply after the one-time issuance, not circulating supply. Initial circulation of 10–15 million ASP is a separate release measure. Company-funded and voluntary burns share this floor: reject any burn that would reduce outstanding supply below 50 million ASP. The minting policy must enforce the floor and forbid positive reminting after initialization. Until those controls are implemented and independently tested, execution remains disabled.

• Automated burning pauses when a circuit breaker, reconciliation exception, policy error, or security incident is active.

• Burns never come from segregated customer balances without the customer's explicit voluntary instruction.

• Published reports distinguish fee-funded burns, voluntary personal burns, corrections, and testnet activity.

11.3 From fee event to confirmed burn

An eligible, final fee event first creates a pending burn obligation using a unique transaction reference and policy version. The burn amount is capped by actually earned company ASP fees or an explicitly approved company top-up. A fee below 0.01 ASP must not silently debit the recipient or customer principal; the event waits for authorized funding or follows a published exception rule.

The service groups eligible obligations into a batch, verifies the source treasury UTXOs, supply-floor rule, reconciliation, approvals, minimum ADA and network fee budget, and constructs a negative-mint transaction under the ASP policy. An isolated signer authorizes it. Submission is pending, not burned. Only after the required Cardano confirmation policy is met does the service mark obligations confirmed and update the public burn total.

Duplicate job delivery must not create a second burn. Persist a stable batch ID and transaction hash, reconcile an uncertain submission before retrying, and recheck the final chain outcome after interruptions. Public reporting distinguishes scheduled, submitted, confirmed, failed and reversed-before-submission events. A treasury transfer or a database balance reduction is not proof of an on-chain burn.

Voluntary burns require an eligible member, exact asset and amount, sufficient available balance, explicit irreversible confirmation and step-up authentication. Personal consent is bound to one request. No customer asset is included merely because it shares an omnibus wallet with treasury assets. The policy must allow burning without enabling unauthorized reminting.

12. Burner badges

A Burner badge recognizes a user's cumulative, personally initiated and verified voluntary burns. Automatic platform-fee burns support the global burn counter but do not count toward personal badge status. Badges are recognition features, not financial benefits or promises of token value.

Badge
Spark
Defined verified lifetime voluntary burn
100 ASP
Visual direction
Silver spark with purple center
Badge
Flame
Defined verified lifetime voluntary burn
1,000 ASP
Visual direction
Purple flame with obsidian border
Badge
Inferno
Defined verified lifetime voluntary burn
10,000 ASP
Visual direction
Layered violet and silver flame
Badge
Obsidian Flame
Defined verified lifetime voluntary burn
100,000 ASP
Visual direction
Black flame, purple core, silver edge

• Every voluntary burn requires an irreversible-action warning, amount review, strong authentication, and final confirmation.

• Badge records remain after the burn because they represent verified historical activity.

• Airsidian may exclude compromised, fraudulent, sanctioned, bot-driven, or self-dealing activity.

• The app should display ASP units, not a claimed future dollar value, beside badge progress.

13. Airsidian custodial model

Airsidian Inc is designated in this design as the custodial operator. Airsidian would control the production custody infrastructure and maintain an internal customer subledger representing each customer's entitlement to ASP held in controlled Cardano wallets. Custody does not convert customer assets into corporate assets.

13.1 Custodial responsibilities

• Maintain authoritative customer subledger balances and immutable transaction history.

• Segregate customer-controlled value from Airsidian operating, treasury, reward, liquidity, and fee wallets.

• Use role-based access, multisignature or MPC controls, transaction limits, allowlists, and dual approval for material movements.

• Screen onboarding, names, locations, funding sources, devices, and relevant blockchain addresses.

• Reconcile the sum of customer liabilities to controlled on-chain assets and approved pending items every day.

• Maintain recovery, key-compromise, incident-response, business-continuity, complaint, and withdrawal-review procedures.

• Provide accurate receipts, balance history, fee disclosure, support access, and applicable customer notices.

13.2 Internal transfers and on-chain settlement

ASP and ADA backing the service are held on-chain in Airsidian-controlled custodial wallets, while individual customer balances and routine in-app activity may be represented off-chain on Airsidian's private internal ledger. Airsidian remains the custodian in this hybrid model. The blockchain records controlled-wallet assets and approved settlement movements; it does not need to expose a separate public address or transaction for every user's marketplace purchase, vote, reward, or internal transfer.

This structure can improve user privacy, reduce network cost, increase transaction speed, support disclosed reversals before final settlement, and simplify small payments. It does not make transactions anonymous: Airsidian retains customer identity, authorization, compliance, and audit records and may be legally required to produce them. The interface must clearly distinguish pending, completed, reversible, irreversible, internal, and on-chain states.

13.3 On-chain / off-chain adaptability

Mode
Off-chain private mode
Custody and record
Airsidian custodies pooled ASP/ADA on-chain; user entitlements move on the private double-entry subledger
Primary purpose
Routine in-app payments, marketplace settlement, rewards, voting and small transfers
Mode
On-chain settlement mode
Custody and record
Airsidian signs Cardano transactions from controlled custodial wallets and maps them to internal records
Primary purpose
Treasury movement, liquidity, reserve rebalancing, batched settlement and verified burns
Mode
External self-custody mode
Custody and record
Approved user withdraws to a screened external Cardano address
Primary purpose
Future separately gated portability feature

• The product can route eligible activity between internal and Cardano settlement without changing the user's ASP unit of account.

• Customer-facing privacy comes from omnibus custody and internal accounting, not from hiding records from Airsidian or lawful oversight.

• On-chain wallet labels and public reports should avoid publishing unnecessary personally identifiable information.

• Proof-of-reserves or attestation designs must avoid exposing individual customer balances.

• Every off-chain balance remains fully reconcilable to the appropriate on-chain asset pool and approved pending items.

13.4 External withdrawals

Self-custody deposits and withdrawals are separate products and remain disabled by default. Activation requires supported-wallet standards, address validation, step-up authentication, cooling periods, sanctions and blockchain screening, travel-rule assessment where applicable, network-risk handling, customer education, and jurisdiction approval.

14. Technical architecture
Layer
AirShare+ applications
Function
User interface, quotes, disclosures, authentication, permissions and receipts
Layer
Airsidian custody services
Function
Wallet orchestration, transaction approvals, signing and recovery
Layer
Internal double-entry ledger
Function
Customer liabilities, treasury accounts, fees, rewards, burns and reconciliation
Layer
Compliance controls
Function
KYC, sanctions/PEP, geolocation, device risk, transaction monitoring and cases
Layer
Cardano integration
Function
Chain queries, UTXO management, transaction construction, submission and confirmation
Layer
ASP policy
Function
Mainnet issuance cap, authorized initialization and burn validation
Layer
Evidence store
Function
Immutable logs, policy versions, approvals, vendor results and audit exports

14.1 Expo Cloudflare and the custody boundary

Expo and React Native provide the phone interface. Cloudflare can serve the versioned white paper and other static assets, cache public network information and coordinate background work. Queues can carry confirmation checks and approved batch jobs; delivery may repeat, so ledger and chain operations require persistent deduplication. Durable Objects are a possible coordination layer, not an automatic guarantee that an external blockchain action runs once.

The authoritative customer ledger remains in its existing controlled backend unless a separately tested migration is approved. Cloudflare must not maintain a competing spendable balance. The device shows server-verified status while refreshes and long-running confirmation checks happen in the background. Image caching, screen rendering and network latency still require their own performance work.

Production signing keys do not belong in Expo, client JavaScript, white-paper files, ordinary logs or a language-model context. Workers would request signing from a separately approved custody service that enforces exact transaction limits and quorum controls. Public document hosting can be deployed independently of any financial worker. Burn execution is not connected to production funds. ASP staking is excluded from the launch scope.

14.2 Seer as the network intelligence layer

Seer connects intelligence across discovery, social interaction, work, services, commerce and payments. Authorized platform data, public activity and suitably aggregated network signals can support useful insights, local trends, moderation signals and system-health explanations. Today, Seer provides guidance, research and supported read-only checks; broader analytics depend on connected data sources and validated services. A description of the intelligence architecture is not a claim of continuous access to every activity.

Member guidance and operational intelligence use different access scopes. Seer must respect user choices, account permissions, data minimization and the privacy of personal conversations. Trend or moderation output needs source, time and confidence; it is a signal for review, not automatic proof of misconduct. Seer cannot sign payments, move funds, certify completed work or approve her own conclusions.

Seer can explain the approved white paper, decode statuses, guide users to Exchange, Burn mechanism, help them understand a receipt and use supported authenticated read-only tools. Answers should identify whether data is live, cached, specified or unavailable. An account lookup must be bound to the signed-in member and the tool permissions.

Future capabilities may include summarizing a job agreement, organizing marketplace dispute evidence, checking an allowed transaction status, explaining an expiring quote and preparing a draft instruction for user review. Each capability requires a defined tool, authorization checks, evaluation and release approval; describing it here does not mean it exists today.

Seer cannot hold a signing key, move funds, burn tokens, stake balances, approve payouts, alter a vote, bypass sanctions, decide a SAR or guarantee returns. A chat instruction never replaces the transaction confirmation screen. Final execution belongs to a deterministic authorized service after the member or designated staff approves the exact action.

Uploaded listings, messages, receipts and documents are untrusted input. Embedded instructions must not change Seer permissions. Minimize sensitive data, redact logs, avoid exposing other members’ records, test prompt injection and financial misinformation, and provide human support when confidence or permission is insufficient.

14.3 Future exchange and transfer execution

The dedicated Exchange screen starts with Buy ASP (pay ADA, receive ASP) or Sell ASP (pay ASP, receive ADA). Flipping direction clears the previous amount so a member must review a fresh intent. ASP / ADA is the sole initial pair. XRP or ATOM may be added following the eligible vote and a completed, separately validated integration.

Preview opens a separate review screen showing the authenticated sending account, the member balance that would receive the proceeds, the exchange venue or counterparty when known, and the settlement destination. It itemizes input and output amounts, exchange rate, minimum received, platform and network fees, total debit, preview date and time, and quote expiry. Both ASP and ADA USD reference values must identify their source and timestamp. Preview time is not the time of an executed trade.

The Confirm exchange button sits below the review. Today, no live quote is issued: unavailable prices, fees, destinations and output amounts are labeled accordingly, and confirmation is disabled. Beta ASP has no monetary value and cannot be exchanged for ADA. The preview never reserves funds or submits an order. Later activation requires a verified quote bound to the member and exact intent, fresh confirmation after any price or direction change, and server-controlled settlement; a device flag cannot authorize a trade.

A future ASP / ADA quote must identify the exact network and asset, venue or liquidity source, price timestamp, expiry, input, fees, slippage limit and minimum output. The server validates the quote again at authorization, reserves inputs once, submits through approved settlement infrastructure and returns an auditable receipt. An expired quote requires a new confirmation; it must not silently execute at a worse price.

Internal send and receive use ASP registered numbers mapped to the intended member, a reviewed recipient identity and an idempotent transfer request. External Cardano deposits require supported address and asset validation plus the confirmation policy before credit. Withdrawals require available funds, eligible destination, step-up authentication, screening and a signed transaction. Failed or ambiguous network results are reconciled before balances are released or retried.

15. Security and operational resilience

Custody is a security-critical service. Mainnet activation requires an independently assessed architecture, documented key ceremony, separation of duties, tested recovery, resilient chain infrastructure, secure software delivery, and operational monitoring.

Risk
Private-key compromise
Primary controls
Hardware-backed keys/MPC, quorum approval, withdrawal limits, allowlists and emergency pause
Risk
Insider abuse
Primary controls
Least privilege, separation of duties, immutable logs, dual control and access reviews
Risk
Ledger mismatch
Primary controls
Daily reconciliation, exception queue, movement pause and independent review
Risk
Account takeover
Primary controls
MFA, device and behavioral risk, step-up checks, cooling periods and support verification
Risk
Smart-contract/policy flaw
Primary controls
Formal specification, test vectors, external review, staged limits and rollback planning
Risk
Chain outage or congestion
Primary controls
Multiple providers/nodes, fee controls, queued status, expiry rules and user notices
Risk
Data breach
Primary controls
Encryption, tokenization, retention limits, monitoring, containment and notification assessment

15.1 Production release evidence

• Threat model and architecture approval.

• Independent custody and minting-policy review.

• Penetration test and remediation evidence.

• Backup, restore, key-loss and compromise exercises.

• Normal and exception reconciliation tests.

• Transaction-monitoring and sanctions evasion test cases.

• Incident, complaint, liquidity, and vendor-outage tabletop exercises.

16. Compliance and market-conduct framework

Management supplied a FinCEN filing reference in the source draft. The underlying filing, registrant details and current status have not been independently verified for this revision. A filing receipt or registration does not authorize ASP or replace applicable state, territorial or foreign permissions. Public regulatory claims must be checked against the retained evidence before use.

• Written, risk-based AML/CFT program with designated day-to-day responsibility, training, and independent review.

• Customer identification, sanctions compliance, transaction monitoring, case management, SAR decision controls, confidentiality, and record retention.

• State money-transmission and digital-asset licensing or documented exemption/authorization for every enabled location.

• Token classification and offering analysis before any sale, reward, locking, liquidity, or promotional program.

• Consumer terms, privacy notice, fee and risk disclosures, complaints, refunds, error handling, marketing controls, and asset-segregation disclosures.

• Approved banking, payment, identity, blockchain analytics, custody, and infrastructure partners with audit rights and exit plans.

17. Governance and change control

During the controlled launch phase, Airsidian remains responsible for custody, security, compliance, treasury execution, and product safety. Public community signaling can inform decisions but does not replace accountable corporate governance or regulatory duties.

Decision
Final policy and 100M cap
Required authority before mainnet
Board/authorized governing body + Security + Compliance
Decision
Initial distribution and vesting
Required authority before mainnet
Board/authorized governing body + Finance + Compliance
Decision
Burn-rule activation or change
Required authority before mainnet
Published proposal + Finance + Security + Compliance approval
Decision
New jurisdiction or product
Required authority before mainnet
Jurisdiction activation record and control-owner approvals
Decision
Treasury release
Required authority before mainnet
Budget authority, purpose, transaction quorum and public reporting
Decision
Emergency pause
Required authority before mainnet
Authorized Security or Compliance officer with post-event review

17.1 Transparency reporting

• Maximum and circulating ASP supply.

• Treasury, rewards, liquidity, contributor and partnership balances.

• Vesting releases and material treasury movements.

• Fee-funded and voluntary burns, with Cardano transaction references.

• Governance proposals, participation, outcomes and implementation status.

• Material incidents and remediation summaries where disclosure does not create additional risk.

18. Development roadmap
Stage
1. Design freeze
Objective
Finalize public requirements, funds flow, token economics and threat model
Exit evidence
Approved specifications and risk register
Stage
2. Preview testnet
Objective
Mint valueless test ASP; integrate internal ledger, custody simulator and core transfers
Exit evidence
Functional tests, supply checks and receipts
Stage
3. Controlled beta
Objective
Test payments, marketplace, rewards, governance, burns and badges with no real value
Exit evidence
Abuse, reconciliation and user-acceptance evidence
Stage
4. Pre-production
Objective
Production-like keys, infrastructure, limits, monitoring and recovery rehearsal
Exit evidence
Independent reviews and closed critical findings
Stage
5. Mainnet readiness
Objective
Complete authorizations, partners, disclosures, policy ceremony and launch approvals
Exit evidence
Signed feature and jurisdiction activation records
Stage
6. Limited launch
Objective
One or more approved locations/products with low limits and enhanced monitoring
Exit evidence
Stable operations and review milestones
Stage
7. Expansion
Objective
Add jurisdictions and features individually; assess future Airsidian network
Exit evidence
Approved change records
19. Principal risks
Risk category
Regulatory
Description
ASP or Airsidian activities may be restricted, licensed, reclassified, delayed, or prohibited in one or more jurisdictions.
Risk category
Custody
Description
Loss, compromise, operational error, insolvency, or legal process could impair access to custodial assets.
Risk category
Market
Description
ASP may have no market, extreme volatility, limited liquidity, manipulation, or no sustainable value.
Risk category
Technology
Description
Software, policy, smart-contract, wallet, node, network, bridge, oracle, or integration failures may cause loss or interruption.
Risk category
Economic design
Description
Rewards, burns, voting, fees, or release schedules may create unintended incentives, concentration, hoarding, or abuse.
Risk category
Governance
Description
Large holders, coordinated actors, insiders, or low participation may distort decisions.
Risk category
Counterparty
Description
Banks, processors, vendors, exchanges, market makers, or infrastructure providers may fail or terminate service.
Risk category
Cybercrime/fraud
Description
Account takeover, scams, sanctions evasion, laundering, bot activity, and social engineering may target the ecosystem.
Risk category
Tax/accounting
Description
Transactions may create reporting, valuation, withholding, income, sales, or property-tax consequences.
Risk category
Execution
Description
Airsidian may lack the resources, approvals, adoption, personnel, or financing required to complete the project.

19.1 User responsibility

Users remain responsible for protecting credentials, reviewing transaction details, understanding irreversible actions, complying with applicable laws, and obtaining their own tax, financial, and legal advice. Airsidian's controls reduce but cannot eliminate risk.

20. Definitions
Term
ASP
Meaning in this paper
The specified AirShare Plus Token; not yet a mainnet asset.
Term
Airsidian
Meaning in this paper
Airsidian Inc, specified issuer ecosystem sponsor and custodial operator.
Term
AirShare+
Meaning in this paper
The real-world utility network connecting people, places, opportunities, work, commerce and payments.
Term
Burn
Meaning in this paper
Protocol-level destruction through negative minting, reducing outstanding supply.
Term
Custodial balance
Meaning in this paper
A customer's contractual entitlement recorded on Airsidian's subledger against controlled assets.
Term
Internal transfer
Meaning in this paper
A subledger movement that may not create an individual Cardano transaction.
Term
Off-chain private mode
Meaning in this paper
Airsidian-held on-chain assets with user-level activity recorded privately on the internal ledger.
Term
On-chain settlement mode
Meaning in this paper
A Cardano transaction executed from Airsidian-controlled custodial infrastructure and linked to internal accounting records.
Term
Mainnet
Meaning in this paper
Cardano's live production network.
Term
Preview
Meaning in this paper
Cardano's development-oriented test environment.
Term
Pre-production
Meaning in this paper
Cardano's mature production-like testing environment.
Term
Policy ID
Meaning in this paper
The hash of the Cardano minting policy that identifies the asset together with its asset name.
Term
Transaction reservations
Meaning in this paper
A temporary hold for an approved vote, payment or order, with disclosed release conditions.
Term
Test ASP
Meaning in this paper
Valueless testnet units that are separate from any future mainnet ASP.
Authoritative source notes

Sources should be checked again before production implementation because protocols, regulations, and agency guidance can change.

Source
Cardano Developer Portal - Native Tokens
URL
https://developers.cardano.org/docs/developers/curriculum/native-tokens/overview/
Source
Cardano Developer Portal - Minting Policies
URL
https://developers.cardano.org/docs/developers/curriculum/native-tokens/minting-policies/
Source
Cardano Developer Portal - Mint a Fungible Token
URL
https://developers.cardano.org/docs/developers/curriculum/native-tokens/mint-fungible/
Source
Cardano Docs - Testnet Environments
URL
https://docs.cardano.org/cardano-testnets/environments
Source
Cardano Developer Portal - Transactions
URL
https://developers.cardano.org/docs/developers/curriculum/fundamentals/core-concepts/transactions/
Source
FinCEN - MSB Registration
URL
https://www.fincen.gov/resources/money-services-business-msb-registration
Source
31 CFR 1022.210 - AML Programs for MSBs
URL
https://www.ecfr.gov/current/title-31/subtitle-B/chapter-X/part-1022/subpart-B/section-1022.210
Source
OFAC - Sanctions Compliance Guidance for Virtual Currency
URL
https://ofac.treasury.gov/media/913571/download?inline=
Source
Oregon DFR - Money Transmitter Licensing
URL
https://dfr.oregon.gov/business/licensing/financial/pages/money-transmitters.aspx

Final controlled-draft statement

Defined system rules require tested implementation before activation. Publish the verified asset identity, supply controls, program terms and authorized launch scope before real-value use.

Historical v0.4 PDF ↗

Questions? AirShare+ Help