🇰🇭 CSB Admin Console

License a field verifier

A licence is what makes a confirmation worth something — because it can be taken away. Issuing one here also registers KYC and enables the address to transact, because all three are required and they fail in ways that look nothing alike.

Verifier address Classes held Public label — the ROLE, never a person's name Licence reference (hashed on chain) KYC tier to register with, if not already known Issue licence

Withdraw or restore

Suspension keeps the registration row. The record of who was licensed when is what a dispute over a past attestation has to be settled against, so nothing is deleted for a routine withdrawal.

Verifier address Suspend licence Restore licence

Licensed verifiers

Issue a grove title

One share per verified living tree. You cannot choose the supply — it is read from the anchored record a licensed verifier confirmed, so a grove with nothing verified cannot be titled at all. The steward must be the address that actually opened the plot's chain.

Plot name (hashed — must match the grower's exactly) Check what would be issued Token name Symbol Location — commune level, never a coordinate Minimum KYC tier to hold shares Issue title Sync supply to the verified count

Allow lists (chain-level permission)

Address Check status

Grant

Enable transactions Enable contract deploy Gas to send (tRIEL) Fund gas Do all three

Revoke

Remove transaction access Remove deploy access

What this is

CSB is permissioned below the contract layer. An address that is not on the txAllowList is refused by the node itself — cannot issue transaction from non-allow listed address — however well KYC'd it is. This is the tab that fixes that error.

These are not KYC. The allow list answers "may you transact at all"; KYC answers "may you hold regulated money". A developer testing contracts needs only the list. Anyone holding or sending KHRt needs an attestation from the Identity Authority tab as well.

Gas is about 1 tRIEL per ordinary transaction and roughly 100 for a contract deployment, so the 1000 default covers real use. An enabled address with no tRIEL still cannot move.

Signed by the precompile admin — the key in Acting authority above. These lists are chain configuration, not a contract role, so no other institution can change them.

Freeze / unfreeze

Address Court / AML order reference (mandatory) Freeze Unfreeze

Confiscate (court order)

From To (custody) Amount (KHRt) Order reference (mandatory) Confiscate

Egress gateway

Pause (circuit breaker) Unpause

Token egress policy

Token Permittedyesno Minimum tier Daily cap (KHRt, 0 = none) Bridge adapter Set policy

Tier transfer caps

Tier Per-transfer cap (KHRt, 0 = none) Set cap

Vetted system contracts

Contract Allowedyesno Update

Public-good levy (KHRt)

A flat KHRt fee on each transfer sent to a fund (e.g. a hospital charity). 0 = off.

Levy per transfer (KHRt) Fund recipient Set levy

Issue KHRt

To Amount (KHRt) Issue

Redeem (burn own balance)

Amount (KHRt) Redeem

The issuer is a pluggable role: a central bank, a licensed bank consortium, or a treasury-backed entity (all placeholders) can hold it without changing the rails.

Access is self-service

Any KYC-active address activates its own scoped RPC URL at rpc-access.html by signing with its wallet — no per-user issuing, no admin step. Access is re-checked live on every request against on-chain KYC and the revoke list, so revoking KYC also cuts RPC. Use the tools here only to revoke an address, or to fetch a URL for someone who can't self-serve.

Look up a URL for an address

Address Get scoped URL

Revoke access

Address to revoke Revoke

Immediately blocks that address's scoped RPC URL, regardless of KYC.

Revoked addresses

Address