glossary
Custodian
An entity that stores Crypts during a trade — can hold the container and read its label, but can never open it.
An entity that stores Crypts during a trade. A Custodian can hold the container and read its Manifest, but can never open it.
Think of a bank's safe deposit service. The bank stores your sealed box and can verify it's there, but it can't open the box — only you have the key. In Onli, only the Title holder can authorize opening a Crypt.
This enforces a core principle of the Onli system: custody never implies authority. Holding something for someone doesn't give you the right to use it.
How it works
During a trade, a Custodian may temporarily store Crypts. The Custodian can:
- Store the Crypt securely
- Read the Manifest (public metadata)
- Compute derived values from the Manifest
- Release custody when authorized
The Custodian cannot open the Crypt. That right belongs exclusively to the Title holder.