RELAY v1.1.5 — LIVE SANDBOX
⚡ EARLY ACCESS — Q2 2026
SAFE CREATIVE — 2602184604821-4XTVN6
  EARLY ACCESS    SANDBOX OPEN FOR DEVELOPERS    Q2 2026
Demand-Initiated Commerce Protocol

Buyer certainty is
the true engine
of commerce.

O4DB™ inverts the marketplace model. Instead of sellers broadcasting to passive audiences, buyers emit cryptographically signed intent — and sellers compete on merit. No intermediaries. No sponsored rankings. No data harvesting.

O4DBOnly For Determined Buyers. The name is the protocol's thesis: this infrastructure exists for buyers who know what they want and are ready to commit.

Buyer emits
VCI — Validated Commitment Intent
↓   Ed25519 signed · HPKE encrypted · TTL-bound
Relay distributes to eligible sellers
Six-criteria eligibility filter
↓   Inventory affinity · BES score · Geography
Sellers compete
Signed offers · no floor visibility · no collusion
↓   ARA ranking runs locally on buyer side
Buyer selects · identity released JIT
Settlement fingerprint · immutable audit trail
Sandbox relay active — api.o4db.org
The Problem

Every marketplace built
in the last 30 years serves the seller.

Search results are auctions. Recommendations are advertisements. Pricing is dynamic against the buyer. The buyer's stated preference is a signal sold back to the highest bidder before it reaches a single genuine merchant.

This architecture — seller-listing, algorithmic discovery, platform intermediation — was designed for a world of information scarcity. In a world of deterministic digital identity and cryptographic commitment, it is an anachronism.

O4DB™ eliminates the discovery layer entirely. The buyer's intent is the signal. The protocol routes it directly to the relevant supply. No auction, no feed, no platform that charges rent on the transaction.

$0
cost of distributing a
signed buyer intent
0
intermediaries with access
to buyer's price ceiling
100%
of ranking logic executed
locally on buyer side
Core Architecture

Three pillars.
One invariant: the buyer is sovereign.

Pillar I
Cryptographic Integrity
Every protocol message is signed at origin and verified before any database write. The relay is a dumb router — it cannot forge, modify, or selectively suppress offers. Trust is mathematical, not institutional.
Signing: Ed25519 (RFC 8032)
Encryption: HPKE / X25519 (RFC 9180)
Fallback: P-256 / ECDSA (FIDO2 / HSM)
Audit: SHA-256 settlement fingerprint
Pillar II
Buyer-Side Intelligence
The Automated Ranking Algorithm (ARA) executes locally on the buyer node. No platform can manipulate ranking by adjusting server-side weights. The buyer defines the criteria; the protocol enforces them.
Ranking: local ARA — price, trust, delivery
Price ceiling: HPKE-encrypted, never exposed
Identity: JIT release post-settlement only
History: session-scoped, no persistent profile
Pillar III
Neutral Infrastructure
The relay is protocol infrastructure, not a marketplace operator. It applies eligibility filters deterministically, enforces TTL expiration, and maintains the Buyer Execution Score (BES) without any commercial interest in the outcome of any transaction.
Routing: six-criteria eligibility filter
Reputation: BES — four-state scoring system
Scalability: stateless relay, Docker-deployable
M2M: native agent-to-agent support
The Vision
"The next generation of commerce infrastructure will not be a marketplace. It will be a protocol — open, neutral, and indifferent to who wins."

O4DB™ is designed for the world in which autonomous agents transact on behalf of principals — where a procurement agent, a DeFi vault, or a supply chain oracle needs to acquire goods or services with cryptographic guarantees and no dependence on a trusted third party. The protocol is agnostic to the nature of the buyer: human, software agent, or institutional system. The VCI is the atomic unit of demand. The relay is the neutral backbone. The ARA is the sovereign intelligence of the buyer. Together, they constitute the first formal specification for demand-initiated, zero-trust commerce — operable today over HTTP, extensible tomorrow over any transport layer including blockchain settlement, decentralized identity, and multi-party computation.

Development Status

Where we are.
Where we're going.

Phase 0 — Completed Q1 2026
Protocol Specification & Prior Art
Full cryptographic specification authored and registered. Safe Creative IP registration filed (ID: 2602184604821-4XTVN6). USPTO Provisional Patent Application No. 63/993,946 filed March 1, 2026. Core architecture: VCI emission, ARA ranking, JIT identity release, BES scoring system.
Registered
Phase 1 — Active · v1.1.4
Reference Implementation & Live Sandbox
Production-grade relay server deployed at api.o4db.org. Browser-based buyer and seller interfaces operational. M2M agent reference implementation validated end-to-end. Full Ed25519/HPKE cryptographic stack verified. Community tier live: 50 settlements/month free.
Live — api.o4db.org
Phase 2 — Planned · v1.2
Natural Language Demand Resolution
AI-assisted pre-VCI phase: buyers describe intent in natural language, agent resolves to a precise, unambiguous specification before emission. Attribute Mode matching engine. Multi-variant demand (up to three equivalent products per VCI).
In Design
Phase 3 — Planned · v1.5
Smart Contract Settlement Layer
Level 2 and Level 3 commitments backed by on-chain escrow. Smart contract integration for SPS (Seller Performance Surety) enforcement. Multi-rail payment support. Zero-trust settlement without relay involvement.
Roadmap
Phase 4 — Long Horizon · v3.0
Decentralized Relay Network & Full M2M Ecosystem
Federated relay infrastructure. Decentralized identity layer. Full agent-to-agent agentic execution without human oversight. Ethereum as full infrastructure layer for relay consensus and identity anchoring.
Vision
Who This Is For

Built for those who
build infrastructure.

01 —
Protocol Engineers
A fully specified, cryptographically sound commerce protocol with open reference implementations in Python and JavaScript. Deploy a relay in two minutes with Docker. Integrate via REST or the M2M agent SDK. Community tier: free up to 50 settlements/month.
02 —
Institutional Buyers
Procurement systems that need deterministic, auditable acquisition flows without platform dependency. O4DB™ provides cryptographic proof of every offer, every ranking decision, and every settlement — independently verifiable, relay-agnostic.
03 —
Agent Architects
The protocol is natively M2M. An autonomous agent can register as a buyer or seller, sign and verify all messages, and complete a full settlement cycle with zero human intervention. The first open standard for agentic commerce infrastructure.
Industries & Use Cases

Every industry that buys
with precision is a natural fit.

O4DB™ is not a vertical application. It is horizontal infrastructure. Any domain where a buyer needs to acquire something specific, confidentially, with cryptographic proof of process — is a domain where O4DB™ applies natively.

Commerce
Retail & B2B Procurement
A buyer searching for a specific product — a VIN-identified vehicle, an EAN-coded component, a pharmaceutical by ATC code — emits a single signed intent. Every eligible supplier competes without knowing the ceiling price. No negotiation theater. No anchoring. Pure competitive response.
Standards: EAN, VIN, ISBN, ATC, CAS
Mode: anonymous demand, transparent settlement
Logistics
Transport & Mobility
Via UODI integration, a buyer can request transport anonymously — ground, maritime, air cargo, autonomous vehicle, drone delivery, or orbital logistics. The demand is expressed as a structured identifier. The protocol routes it to eligible carriers. The buyer ranks on price, ETA, and trust score.
Standard: UODI v1.2 — Pat. Pending 63/993,355
Modes: ground · air · maritime · autonomous · orbital
Industrial
Manufacturing & Supply Chain
NSN (NATO Stock Numbers), CAGE/MPN codes, CAS chemical identifiers — O4DB™ supports military and industrial procurement standards natively. A procurement agent can emit demand for a specific component and receive competing offers from qualified suppliers, with full traceability.
Standards: NSN, CAGE_MPN, CAS, UNS
Compliance: auditability by design
Healthcare
Pharmaceutical & Medical
Drug procurement by ATC code, medical device sourcing by reference — with cryptographic proof of the acquisition process. Hospital procurement systems can integrate O4DB™ as a demand router without exposing budget ceilings to any supplier or platform.
Standard: ATC (WHO Anatomical Therapeutic Chemical)
Privacy: price ceiling never transmitted in plaintext
Government
Public Procurement & Transparency
The Digital Sealed Bid mechanism enforces pre-award confidentiality and post-award transparency at the protocol level — not as a policy layer. Compatible with EU Directive 2014/24/EU and U.S. FAR Part 14. Government procurement that is corruption-resistant by architecture, not by regulation.
Framework: EU Dir. 2014/24/EU · U.S. FAR Part 14
Audit: Ed25519 signed settlement fingerprint
Defense
Military & High-Security
Military-grade encrypted demand channel. Buyer identity, price ceiling, and destination are cryptographically concealed until settlement confirmation. Suitable for procurement scenarios where operational security of the demand itself is a requirement — not just the response.
Encryption: HPKE / X25519 (RFC 9180)
Identity: JIT release — post-CONFIRMED only
Travel & Hospitality
Tourism & Services
OTA_GIATA code support enables standardized hotel and accommodation demand routing. A traveler's agent emits a precise property request — property class, location, dates — and competing properties respond with offers. No OTA commission layer. No algorithmic bias toward promoted listings.
Standard: OTA_GIATA property codes
Mode: anonymous demand · competitive offer
Finance
Financial Services & DeFi
A DeFi vault, treasury management system, or institutional buyer can emit cryptographic demand for financial instruments, custody services, or yield products. The protocol's Level 2 and Level 3 commitment modes support financial-grade obligation with SPS (Seller Performance Surety) enforcement.
Roadmap: smart contract settlement layer (v1.5)
Commitment: Level 0–3 financial obligation modes
AI & Agents
Autonomous Agents & M2M
The protocol is natively machine-readable and agent-executable. An AI agent can register, emit demand, receive offers, rank them by configured criteria, and settle — without human intervention. O4DB™ is the first open standard for agentic commerce at protocol level.
Transport: HTTP/REST · extensible to any layer
Autonomy: levels 0–3 (dPoA — delegated Proof of Action)
UODI Integration

Universal demand identification
built in from day one.

→ View UODI Standard specification

The UODI (Universal Omnimodal Demand Identifier) is a companion standard — also patent pending — that provides a universal, structured identifier for any transport or logistics demand. A 91-character string encodes origin, destination, cargo type, modality, timeline, and special requirements.

O4DB™ natively supports UODI as a demand_type — meaning any transport demand expressible in UODI can be routed, competed, ranked, and settled through the O4DB™ protocol without modification.

This creates an end-to-end encrypted, anonymous, competitive transport procurement layer — from a private individual booking a car service to an autonomous system acquiring orbital logistics capacity.

UODI
Universal Omnimodal
Demand Identifier — Pat. Pending
U.S. 63/993,355
10+
transport modalities supported
ground · air · maritime · drone · orbital
91
character structured identifier
machine-readable · M2M native
Progressive Location Disclosure

For high-value cargo, sensitive shipments, or security-critical operations, UODI supports progressive location disclosure: the demand is emitted with an approximate zone or region — enough for carriers to assess feasibility and price — but the exact pickup and delivery coordinates are only revealed at the moment the operation is confirmed.

This is not a privacy feature added on top. It is an architectural property of the UODI + O4DB™ stack: the buyer's JIT identity release mechanism extends naturally to location. A military logistics operation, a high-value art transport, or a cash-in-transit service can use the protocol without ever exposing the exact route to any carrier that does not win the contract.

Zone
approximate location emitted
with demand — enough to quote
Exact
precise coordinates released
only at CONFIRMED state
0
losing carriers ever see
the exact pickup or destination
Security Architecture

Military-grade encryption.
Zero trust by design.

O4DB™ does not add security as a feature. Security is the architecture. Every component is designed such that removing the cryptographic layer makes the protocol non-functional — not just insecure.

Buyer Privacy
Price Ceiling Never Leaves the Device
The buyer's maximum price is encrypted with HPKE (RFC 9180) before emission. The relay never sees it. Sellers never see it. Only the buyer's ARA, running locally, decrypts it for ranking. This is not a policy — it is a cryptographic impossibility to circumvent without the buyer's private key.
Identity Protection
JIT Identity Release
Buyer identity is withheld until the settlement reaches CONFIRMED state. Sellers compete without knowing who the buyer is. This eliminates price discrimination by identity, profiling, and targeted manipulation based on buyer history.
Relay Integrity
The Relay Cannot Manipulate Outcomes
All messages are signed at origin (Ed25519) and verified before any database write. The relay applies eligibility filters deterministically — it cannot selectively suppress an offer, promote a seller, or alter a ranking. Its role is routing, not adjudication.
Audit Trail
Immutable Settlement Fingerprint
Every confirmed transaction produces a SHA-256 settlement fingerprint signed with the relay's Ed25519 key. This fingerprint is verifiable by any party at any time using the relay's published public key. Proof of process is not a log — it is a cryptographic commitment.
Public Sector

Procurement transparency
enforced by protocol,
not by policy.

Traditional e-procurement systems claim transparency. O4DB™ enforces it mathematically. The Digital Sealed Bid mechanism makes pre-award disclosure technically impossible — and post-award disclosure automatic and verifiable.

A government entity using O4DB™ as its procurement backend cannot suppress offers, cannot favor suppliers, and cannot retroactively alter the award record. Corruption requires the ability to manipulate the process. O4DB™ removes that ability from the architecture itself.

Any procurement framework that requires sealed bids before award and public disclosure after award is structurally compatible with O4DB™ — by protocol design, not integration effort. This includes public tender systems in the EU, the US, and most jurisdictions worldwide.

0
ability to manipulate ranking
from relay or platform side
100%
of award decisions independently
verifiable post-settlement
Ed25519
signed settlement fingerprint
verifiable by any auditor
Early Access

The protocol is live.
The ecosystem is open.

The sandbox relay is operational at api.o4db.org. The specification is public. Commercial licensing is available for production deployments exceeding community tier limits. If you're building on top of O4DB™ or evaluating it for institutional deployment, we want to hear from you.

View on GitHub Contact for Licensing