Exhibit 1 · Overview

The largest bank in France and in the euro area: its defence against fraud, its tokenised money and atomic-settlement ambition, its 4.94 million Nickel accounts and its 1.6 million beneficiaries in France's priority neighbourhoods. What this study is, and what it is not. Two minutes' reading to place the whole before the detail.

Mathematically verified participation — why it is an essential foundation for a bank's biggest promises

Two futures for
BNP Paribas
— prove the four theorems, so that the bank's promises succeed on their own terms

We examine BNP Paribas twice, as we examined Lloyds Banking Group in the United Kingdom and BBVA in Spain: its defence against fraud, its tokenised money and atomic-settlement ambition, and its promise to people and neighbourhoods — 5.5 million financial-inclusion beneficiaries, 1.35 million hours of employee volunteering, 1.6 million people reached in France's priority neighbourhoods — delivered as they stand, and then delivered on an infrastructure whose guarantees are formally proven. Tap any pillar to open its register.

Everything BNP Paribas does against fraud happens at the payment — the last moment, when the scam is mature and a victim is already at the keyboard. Everything it is building in digital assets tokenises the money — the settlement leg of a transaction. What remains untouched is the entitlement: the ticket, the place, the verified fact of a real person holding a real right and walking through a real door. That is the half the ROCKR research proves. The two halves are not competitors; they are the two legs of the same transaction — and the bank's own custody business has already named the ambition: atomic settlement, the security and the money exchanged as one indivisible unit. The entitlement is the other half of the atom.

Exemplar use-case study · Asso ROCKR Preuves · ROCKR Proof Labs Ltd · August 2026 Sources: BNP Paribas · Fondation BNP Paribas · Banque de France · Cour de cassation · European Central Bank · ROCKRCOIN Whitepaper v8.2

What we mean by an "exemplar use-case study"

A working document addressed to the people responsible for this institution, and to those who follow its progress. It rests on the public record — every date, figure and quotation is sourced — and on ROCKR's published architecture, with the two kinds of claim kept visually distinct throughout. Its core is a set of interactive comparisons: for each pillar of the bank's promise, the future without verified participation beside the future with it, on concrete metrics. It is not a sales document: it is written to be corrected and improved by the people who know the institution best, in the open, with anyone invited to follow. ROCKR is independent of BNP Paribas and has no connection with the bank, its foundation or its subsidiaries; the "With ROCKR" scenarios are our proposal, built on ROCKR's published architecture, and nothing here should be read as a commitment or endorsement by the bank. This is the seventh study in the series and the first on a French bank; with our study of the Paris Saint-Germain stadium it forms the French pair of the series — an institution and a place, examined the same way — with no connection, to our knowledge, between the bank and that project.

Exhibit 2 · Story

From a discount house founded in 1848 to a money-market fund recorded on a public blockchain in 2026, by way of a Cour de cassation ruling handed down against the bank itself: every step dated and sourced, so the reader can check the sequence rather than take our word for it.

The story so far

From a discount house to money on a chain

Every date below comes from the public record. The window that matters is open right now: the bank is writing its 2027–2030 plan, Europe is publishing its new payments law, and the first settlements in tokenised central-bank money are announced for this quarter.

1848 – 2000

A discount house, two mergers, one bank

The Comptoir national d'escompte de Paris (CNEP, the National Discount House of Paris) was founded in 1848, in the weeks after the February revolution, to restore credit to Parisian traders. In 1966 its merger with the Banque nationale pour le commerce et l'industrie created the Banque nationale de Paris (BNP); in 2000 the merger of BNP and Paribas created BNP Paribas. It is from that 1848 discount house that the bank dates its own history.¹

2006 – 2019

The promise to the neighbourhoods, then the promise in hours

In 2006 the BNP Paribas Foundation and the bank's French commercial network launched Projet Banlieues ("the Suburbs Project"): three years of financial and hands-on support for grassroots associations working on education, employment and social ties in the quartiers prioritaires de la politique de la ville (QPV, "priority neighbourhoods of urban policy") — the roughly 1,500 neighbourhoods the French state designates as most in difficulty. On 5 December 2019 the group launched #1MillionHours2Help: every employee may spend working time on volunteering, towards a collective target of one million hours a year, under the social agreement signed with the international trade-union federation UNI Global Union in 2018.^4,5

2022 – 2024

The bank experiments with the chain — and the Cour de cassation answers it on fraud

In 2022 the group's corporate and institutional bank (CIB) issued its first tokenised bond — a bond recorded as a digital token on a blockchain, a shared and tamper-proof ledger — through its AssetFoundry platform. In 2024 BNP Paribas was the only bank to test all three of the Eurosystem's solutions for settlement in central-bank money, across ten use cases, including the Republic of Slovenia's €30 million digital bond — the first by a euro-area state. The same year, on 23 October, the Cour de cassation (France's highest civil court) rejected BNP Paribas's appeal and confirmed that it must reimburse €54,500 to a client deceived by a false adviser whose call displayed the number of his real adviser: it is for the bank to prove the client's "gross negligence", and a spoofed number lowers the vigilance that can be expected of him.^9,16,17

2025

A year of milestones: tokenised fund, Canton, stablecoin, 112 associations

In May, BNP Paribas Asset Management (the group's fund manager) issued its first tokenised money-market-fund shares in Luxembourg, on a private blockchain. On 9 September the bank joined, with HSBC, the Canton Foundation — the governance body of the Canton Network, a permissioned blockchain designed for financial institutions. On 6 November a French law created a national register of IBANs flagged for fraud risk. On 20 November the Foundation announced 112 new Projet Banlieues laureates, bringing the total to 1,500 associations supported since 2006, for 1.6 million beneficiaries. On 1 December BNP Paribas joined the consortium of European banks creating Qivalis, issuer of a euro stablecoin — a digital currency on a chain backed one-for-one by the euro — compliant with MiCA, the European Union's Markets in Crypto-Assets regulation.^4,18,20,21,8

JAN – JUL 2026

Manipulation fraud crosses a threshold, the bank puts a fund on Ethereum, and beats its capital target

On 27 January the Banque de France's Observatoire de la sécurité des moyens de paiement (OSMP, the Payment Security Observatory) published its figures for the first half of 2025: €618 million of payment fraud, and "manipulation" fraud — the false adviser, the false text message, social engineering — reaching some €245 million, up 37 %, nearly 40 % of the total. On 20 February BNP Paribas Asset Management issued a tokenised share class of a French-domiciled money-market fund on the public Ethereum blockchain, under permissioned access — a one-off intra-group experiment, but on a chain anyone can read. On 23 April the final texts of the European Union's Payment Services Regulation (PSR) were published: the bank of a client deceived by an impersonator will have to reimburse in full. On 7 May the Banque de France activated the flagged-IBAN register. On 23 July the bank reported a Common Equity Tier 1 (CET1) capital ratio — the core measure of a bank's own funds — of 13.0 %, its 2027 target met a year early, and quarterly net income of €4.3 billion.^2,7,8,13,19

AUG – DEC 2026 Open now

Three clocks running at once

The European Central Bank (ECB) has announced for this third quarter the pilot launch of Pontes, the bridge between banks' blockchain platforms and TARGET, the system for settlement in central-bank money — BNP Paribas is among the participants in its contact group. Qivalis is awaiting its electronic-money-institution licence from the Dutch central bank to launch its stablecoin in the second half of the year. The Payment Services Regulation is due in the Official Journal of the European Union in the coming months, which starts a countdown of about twenty-one months to its application, around 2028. And the bank is writing its 2027–2030 strategic plan now, to be announced in early 2027: the promise this study can hold it to is the one it is drafting.^2,3,13,21,22

Exhibit 3 · Trust

The underlying problem: a bank whose two proudest promises — "5.5 million people included" and "your money is safe from fraud" — both rest on registers only the bank itself can audit, at the very moment the courts and European law are making it the payer of last resort for every impersonation. What is missing is the proof, not the ambition.

Why this is a story about now

A trust deficit meets a liability cliff

PROBLEM 1

"5.5 million beneficiaries" is the bank's own count

BNP Paribas's 2025 corporate-social-responsibility dashboard shows 5.5 million beneficiaries of financial-inclusion products and services — target 6.2 million in 2026 — and 1,353,529 hours of employee volunteering over two years. The Foundation counts 1,500 associations and 1.6 million Projet Banlieues beneficiaries since 2006. These figures are sincere, generous and self-declared. The first adds Nickel accounts opened since the service was created to microloan beneficiaries calculated pro rata to the group's funding; they are cumulative openings, not people served today. The second is the sum of the tallies the associations report. None of this is irregular — it is the industry's practice, Lloyds and BBVA included. But a bank that asks society to trust its social arithmetic, at the moment it is drafting the commitments of its 2027–2030 plan, has no way of proving, in 2035, that they were kept — and nor has anyone else.^3,4

PROBLEM 2

The judges, then the law, make the bank the payer of last resort

In France, manipulation fraud — the false adviser calling from the number printed on the back of your card — cost some €245 million in the first half of 2025, up 37 %; credit-transfer fraud €230 million, up 44 %, with 76 % of it passing through online banking. The landmark ruling on this method was handed down against BNP Paribas itself: on 23 October 2024 the Cour de cassation held that the bank had not proved its client's gross negligence, and ordered it to reimburse €54,500. The 2026 decisions cut both ways — a Paris court found the bank not liable in March; another ordered it to reimburse €25,360 in April, for failing to prove that its notifications had been sent. From about 2028 the European Payment Services Regulation will settle the matter for everyone: full reimbursement of the victim of a bank impersonation, with the burden of proof on the bank. BNP Paribas's response — the Clé Digitale (its "digital key"), a strong-authentication device tied to a single phone; biometrics; real-time notifications; customer education — defends the perimeter of an identity system in which a payment still cannot prove that there is a real, unique human at each end. The bank pays for every breach.^{7,8,9,10,13,14}

THIS STUDY'S ANSWER

What "with ROCKR" means: the bank is building the settlement leg; what is missing is the entitlement leg

The hardest question is a fair one: how could anyone — a regulator, a shareholder, a resident of a priority neighbourhood — ever know independently? The "with" answer is a chain. First, credibility: the four theorems — machine-verified mathematical guarantees, an asset never sold to the public, no speculative path, a single issuance tap — are what distinguish ROCKRCOIN, the digital utility asset the model settles, from a crypto landscape that has earned nobody's trust, least of all a bank's; and a bank that puts a money-market fund on Ethereum and sits on the Canton Foundation is precisely the audience able to check them. Then, liquidity: equal weekly auction credits for every verified participant, and grants issued only against authenticated presence, would let the bank's social programmes — a Projet Banlieues association's workshops, the volunteering hours, a financial-education session — fund verified attendance rather than declared reach. Finally, proof: the same verification makes every outcome auditable, year after year, by regulator, shareholder and neighbourhood alike — beneficiaries counted at the door, hours counted at presence, and fraud made useless and detectable rather than refunded after the fact. In the vocabulary of our studies: everything BNP Paribas is building — AssetFoundry, Canton, Qivalis, Pontes — is the settlement leg of a transaction, the leg where the money moves. What none of these building blocks supplies is the entitlement leg — the proof that the ticket, the place, the right itself belongs to a real, unique human, and can be neither forged nor sold twice. The four theorems are about that second leg, and settle it atomically with the first. Deliver the promise, and prove it was delivered. (WP 8.2 — the ROCKR-ROCKRCOIN Whitepaper, §1, §6.5, §7.1.2 · The £150 Ticket Storyboard — TBTL · annex "Why a Coin at All?")

Exhibit 4 · Pillars

The heart of the study. Four pillars — Fraud & Scams, Tokenised Money & Atomic Settlement, Inclusion (Nickel), Community (Projet Banlieues) — and for each a register comparing, metric by metric, the future without verified participation and the future with it. Tap a card to open its register; highlighted terms explain themselves at a tap.

The two legs

Four pillars, two futures

RED · FRAUD & SCAMS

Fraud — the bank the Cour de cassation named payer of last resort

Strong authentication on a single phone, real-time notifications, a landmark ruling handed down against the bank itself, and a European law that will oblige it to refund every impersonation it fails to stop.

BLUE · TOKENISED MONEY & ATOMIC SETTLEMENT

Settlement — Europe's most advanced settlement leg, with no entitlement leg

AssetFoundry, Canton, Qivalis, Pontes: the bank is building money on a chain. What it is not yet building is the proof that the right purchased belongs to a real, unique human.

GREEN · INCLUSION (NICKEL)

Inclusion — 4.94 million accounts, 13,370 tobacconists and post offices

An account opened in five minutes at the tobacconist's, for those the banks turn away — counted, so far, in cumulative openings that only the bank can read.

ORANGE · COMMUNITY (PROJET BANLIEUES)

Community — 1,500 associations, 1.6 million beneficiaries, 1.35 million hours

Twenty years of support for priority neighbourhoods and a million hours of volunteering promised every year — declared reach, unproven participation.

Exhibit 5 · People

Who decides, and when: the people responsible, in the order of the file each holds, the window open now, and what we ask. Nothing that involves technology risk.

Who holds the promises, the chain, the foundation and the network

The people responsible

Note: the roles below are those published by the bank as at 12 May 2026 (board of directors) and in its 2025–2026 press releases. Operational leads whose names the bank does not publish are described by function; names will be verified before any contact.²⁴

Name	Role	Relevant statements and actions
Jean-Laurent Bonnafé	Director and Chief Executive Officer, BNP Paribas; Chairman of the Association française des banques	All three strands converge on his desk: he created in 2017 the Company Engagement department that carries Projet Banlieues and #1MillionHours2Help, he signs the results that met the capital target a year early, and he chairs the trade association whose federation called on digital platforms, on 26 January 2026, to shoulder their share of fraud. Term to the 2028 annual general meeting.^2,11,24
Jean Lemierre	Chairman of the Board of Directors, BNP Paribas	Renewed on 12 May 2026 to the 2029 annual general meeting; the board he chairs will approve the 2027–2030 plan and its sustainable-finance and inclusion targets, announced for early 2027.^3,24
Anne Pointet	Head of Company Engagement, member of the Executive Committee	Since 1 July 2024, responsible for the group's positioning on the environment and social inclusion — that is, for the figures on the corporate-social-responsibility dashboard (volunteering hours, inclusion beneficiaries) and for the Foundation that runs Projet Banlieues. The keeper of the register this study proposes to make auditable.^3,24
Julien Clausse	Head of AssetFoundry (Digital Assets & Tokenisation), BNP Paribas CIB	Led the 20 February 2026 issuance on Ethereum and describes AssetFoundry as the group's tokenisation, connectivity and wallet layer "within a controlled setup". The natural counterpart for the settlement leg.¹⁹
Edouard Legrand	Chief Digital and Data Officer, BNP Paribas Asset Management	Issuer of both tokenised money-market funds (Luxembourg, 2025; Ethereum, 2026); presented the second issuance as exploring "operational efficiency and security within a regulated framework".^18,19
Paul Daly	Head of Distribution Product Solutions, BNP Paribas Securities Services	The transfer agent and wallet operator of the Ethereum experiment: his business held the pilot's private key, and carries the group's stated atomic-settlement ambition.^16,19
Hubert de Lambilly	Head of Global Markets Continental Europe, Middle East and Africa, BNP Paribas	Signed the bank's membership of the Canton Foundation on 9 September 2025, "to advance the long-term role of blockchain technologies in regulated finance".²⁰
Function — name to verify	Leadership of Nickel	Holds the 13,370-outlet network and the 4.94 million accounts opened that make up most of the group's inclusion indicator; launched Nickel's first savings product and the bpost alliance in Belgium in 2025.³
Function — name to verify	Head of security and fraud prevention, French commercial banking	Holds the Clé Digitale, real-time notifications and Verification of Payee (VoP); this is the file the European Payment Services Regulation will reopen under the full-refund regime.^8,13,14

The door that is open right now

Three clocks are running at once. The 2027–2030 strategic plan is being written now and will be announced in early 2027, with renewed sustainable-finance and inclusion targets: this is when the shape of the promises the bank will keep for the rest of the decade is fixed. The application countdown of the European Payment Services Regulation starts on its publication in the Official Journal of the European Union, so the bank's fraud defence will be specified under the new full-refund regime, not the old one. And the settlement leg reaches maturity this half-year — the European Central Bank's Pontes pilot, Qivalis's licence — before the entitlement leg has an owner. Anyone who wishes to place verified participation on the file of any of the three strands — ROCKR Preuves included — can do so through the bank's innovation, company-engagement or digital-assets channels before those terms are set.^2,3,13,21,22

The timetable — and the ask

Nothing in this study asks BNP Paribas to take a technology risk. The Payment Services Regulation applies from about 2028; the 2027–2030 plan runs to the end of the decade; ROCKR's grant-funded TestNet and MainNet programme will be complete, launched and publicly proven years before any of those dates — and no partner will ever be invited to adopt anything that has not already been shown to work, RUIPA (the weekly participation credit, explained in the glossary) included. The dependency runs the other way: the gold column of the registers exists in 2030 only if the four theorems are proven now, inside the current research window. That is the one thing the people in the table can influence today, and it costs no money, no tender and no commitment to adopt. We offer three observation seats, all free: Follow & Absorb (follow the proofs as they land), Follow & Destroy (try to break them — hard questions improve the work) and Research Membership of the Proof of Authority platform (help decide what is proven next). Expressions of interest to david@rockrpreuves.fr. Nothing has been awarded; nothing is payable by anyone unless it is.

Exhibit 6 · Sources

Provenance: every date, figure and quotation in the study, referenced one by one. Figures marked "bank's own figure" are the bank's and have not been independently verified. Hard questions improve the work.

Provenance

Sources

Comptoir national d'escompte de Paris (1848–1966), BNP–Paribas merger (2000) — BNP Paribas, "Discover our archives", histoire.bnpparibas; Wikipedia, "Banque Nationale de Paris".
Results as at 30 June 2026: net banking income €14,091m (+12.0 %), net income group share €4,345m (+33.4 %, including an €858m gain on the AGI/Ageas transaction), CET1 ratio 13.0 % (2027 target met), 64 countries, more than 180,000 employees — BNP Paribas, press release of 23 July 2026, invest.bnpparibas. Bank's own figures.
2025 CSR dashboard: 1,353,529 solidarity hours (2024–2025, one-million target over two years); 5.5 million financial-inclusion beneficiaries (target 6.2 million in 2026), defined as Nickel accounts opened since creation plus pro-rata microloan beneficiaries; Nickel: 4.94 million accounts opened, 13,370 points of sale, integration of 656 bpost offices, first savings product (2025); 2027–2030 plan to be announced early 2027 — BNP Paribas, 2025 CSR Achievements (2026), drawn from the 2025 Universal Registration Document. Bank's own figures.
Projet Banlieues: launched 2006; 1,500 associations and 1.6 million beneficiaries in 19 years; 112 new associations in 2025; support of up to €5,000 a year for three years; coverage of 80 % of the QPV population — BNP Paribas, press release of 20 November 2025; Fondation BNP Paribas, programme pages (October 2025, January and March 2026). Foundation's own figures.
#1MillionHours2Help: launched 5 December 2019, one million hours a year target, under the agreement with UNI Global Union (September 2018) — group.bnpparibas (December 2021).
Hello bank!: more than one million clients in France (press release of 23 September 2024, including 105,000 clients from Orange Bank); 3.9 million clients group-wide at end-2025 — mind Fintech (23 March 2026, reported).
Observatoire de la sécurité des moyens de paiement (OSMP), first half of 2025: total fraud €618m (+7 %) on €18,087bn of payments; manipulation fraud ≈€245m (+37 %, ≈40 % of the total); card fraud rate below 0.05 % for the first time — Banque de France, press release and statistical note of 27 January 2026; Boursorama (11 February 2026); DAF Magazine (29 January 2026).
Credit-transfer fraud €230m in the first half of 2025 (+44 %), 76 % via online banking; national register of accounts flagged for fraud risk (FNC-RF) created by the law of 6 November 2025 and activated on 7 May 2026; Verification of Payee (VoP) — BNP Paribas Entreprises, "VoP: securing your SEPA transfers" (August 2026).
Cour de cassation, commercial chamber, 23 October 2024, no. 23-16.267: BNP Paribas's appeal against the Versailles Court of Appeal (28 March 2023) rejected; €54,500 reimbursement; burden of proving gross negligence on the bank (art. L. 133-19 of the Monetary and Financial Code) — French Ministry of the Economy, DAJ letter (5 November 2024); Village de la Justice (27 February 2025); Actu-Juridique (7 February 2025).
2026 decisions: Paris judicial court, 11 March 2026 (bank not liable) — Clubic (20 March 2026); Paris Court of Appeal, 2 April 2026 (€8,000) — Clubic (15 April 2026); Paris judicial court, 14 April 2026 (€25,360 plus penalties) — MoneyVox (20 May 2026), Meilleurtaux (28 May 2026). Cour de cassation, 12 June 2025, extension to business clients — reported (Elliot avocats). All reported by the press; the decisions themselves have not been consulted.
Fédération bancaire française, press release of 27 January 2026: the 26 January call on platforms and e-mail hosts; "Never give out this data" campaign (2023–2026).
Number-authentication mechanism (MAN) and Arcep rules applicable from 1 January 2026 — Clubic (20 March 2026); Centaure Investissements (August 2026). Reported.
Payment Services Regulation (PSR) and third Payment Services Directive (PSD3): provisional agreement of 27 November 2025; final texts published 23–24 April 2026 (Council documents 8221/26 and 8222/26); Article 59, full reimbursement of impersonation fraud, burden of proof on the provider, refund within fifteen business days; application about 18 to 21 months after entry into force — Freshfields (4 May 2026); Norton Rose Fulbright (March 2026); Herbert Smith Freehills Kramer (29 May 2026); PwC (April 2026).
Clé Digitale (one phone per profile, replaces SMS codes, summary before validation), biometrics, real-time notifications, card controls, "Test your reflexes" quiz, personal-data monitoring — mabanque.bnpparibas, "Clé Digitale" and "Conseils sécurité" pages; Selectra (23 June 2026).
Artificial intelligence: target of €750m of value generated by 2026, about 780 use cases — Wayden (April 2026, reported); FinAI-LAB joint laboratory with Télécom Paris (fraud detection among four axes), Fraud Analytics chair at KU Leuven — group.bnpparibas (27 April 2026); Revue Banque (25 March 2025).
2022 tokenised bond via AssetFoundry; atomic-settlement ambition; the cash leg "currently remains off-chain" — BNP Paribas Securities Services, cross-interview "Tokenisation of MMFs" (4 February 2026); digital-asset custody with Fireblocks and Metaco (2022; page updated May 2026).
Eurosystem trials 2024: three solutions tested (Banque de France, Bundesbank, Banca d'Italia), ten use cases, Neobonds and AssetFoundry — BNP Paribas, press release; Slovenia's €30m digital bond, BNP Paribas as DLT market operator — BNP Paribas CIB (18 September 2025); Banque de France, DL3S press release.
Tokenised money-market-fund shares in Luxembourg with Allfunds Blockchain (May 2025) — BNP Paribas Asset Management, press release.
Tokenised share class of a French-domiciled money-market fund on public Ethereum, permissioned access, one-off intra-group experiment; roles (issuer, transfer agent, AssetFoundry); quotations from Julien Clausse, Edouard Legrand and Paul Daly — BNP Paribas, press release of 20 February 2026; ERC-3643 standard — CryptoDnes (21 February 2026, reported).
BNP Paribas and HSBC join the Canton Foundation, quotation from Hubert de Lambilly — Canton Foundation, press release of 9 September 2025; Ledger Insights (9 September 2025); Finextra.
Qivalis: BNP Paribas joined on 1 December 2025; twelve banks as at 4 February 2026; electronic-money-institution licence applied for at De Nederlandsche Bank; launch targeted for the second half of 2026 — BNP Paribas, press release of 2 December 2025; qivalis.eu; Ledger Insights (2 December 2025).
Pontes and Appia: ECB decision of 1 July 2025, pilot in the third quarter of 2026; business description document (February 2026); BNP Paribas among the contact-group participants — Ledger Insights (13 March 2026, reported); Banque de France–Euroclear Pythagore project — The DESK (13 October 2025). The pilot's actual launch was not confirmed at the date of this study.
Reservation. No data published by BNP Paribas on its fraud losses, reimbursement rate or any refund guarantee; no BBVA-style verified-call feature; no tokenised-deposit programme; no MiCA crypto-asset-service-provider authorisation for a group entity: not found on the public record, and not asserted.
Governance: Jean Lemierre, Chairman of the Board (term from 12 May 2026 to the 2029 AGM); Jean-Laurent Bonnafé, Director and Chief Executive Officer (term from 13 May 2025 to the 2028 AGM), Chairman of the Association française des banques — group.bnpparibas, "Members of the Board of Directors" (as at 12 May 2026); Anne Pointet, Head of Company Engagement since 1 July 2024 — BNP Paribas, press release of 28 May 2024.
All specifications marked in gold — ROCKR-ROCKRCOIN Whitepaper v8.2 (August 2026): §1 the two legs and the European settlement landscape, §4.2 transaction modes, §4.2.1 anti-theft, §4.3 idle capacity, §5 identity architecture, §5.6 holder binding, §6.5 auditability and Model Zero, §7.1 monetary policy, RUIPA and "No Value Maintenance, No Investment Claim", §7.1.2 event classes, §8 electoral-college governance, §9 the study series.
ROCKR / ROCKRCOIN, "The £150 Ticket Storyboard — TBTL" and the annex "Why a Coin at All?" (working documents, 5 August 2026) — the no-commission model, the forfeitable gate bond and the monetary mechanism (RUIPA; seed / circulate / grow; a single issuance tap) are detailed there. Unpublished; available on request.

Exhibit 7 · Philosophy

Optional altitude: the philosophical case for proofs — a story in five movements, from a black hole to a turnstile, honest about what is physics and what is hypothesis.

The foundation

From black holes to ROCKR

It begins at a black holePenrose, 1965 — the point where physics stops

In 1965 Roger Penrose proved that when a massive star collapses, it must form a singularity — a point where gravity becomes infinite and the laws of physics simply stop working. The work earned him the 2020 Nobel Prize in Physics, and it left a question that shaped the rest of his career: what kind of theory could describe reality where our best equations fail? His answer, pursued over decades, was geometric — beneath space and time there is structure, and understanding it would take more than computation.

The mind that steps outside the rulesGödel's theorem — and a proposal Penrose himself marks as speculative

Kurt Gödel proved that any sufficiently rich mathematical system contains truths that cannot be proven by following that system's own rules. Yet human mathematicians can step outside the rules and simply see that those statements are true. Penrose drew a bold conclusion: human understanding is not, at bottom, rule-following — not a computation.

His proposed physical mechanism for this sits at the speculative edge of physics, is contested, and he says so. What matters for this story is the door it opens: if minds can grasp truths no algorithm reaches, where do those truths live?

Platonic truths — the incorruptible kindWhat cannot be propagandised

Euler's identity — e^iπ + 1 = 0 — cannot be reinterpreted by a demagogue or twisted to justify a war. Its meaning is contained entirely within itself: sealed against misinterpretation. Plato held that such truths — and perhaps beauty, perhaps goodness — exist independently of us: the mind does not invent them, it discovers them.

Penrose takes that view seriously all the way down into the geometry of the universe. The moral extension is a hypothesis, not a result — but the mathematical core is plain fact: some truths cannot be hijacked.

Why every -ism can be hijackedThe translation problem

Democracy, capitalism, socialism, religion, science: none is intrinsically good or bad. They are built from language, and language is porous — a regime can imprison dissidents in the name of "protecting democracy", and no fundamental constant of the universe exists to expose the misuse. When we try to carry an absolute — justice, equity, meaning — into institutions, something is lost in translation: the ideal arrives as an "-ism", a vessel that saints and tyrants can pick up alike.

No system will save us by existing. Every system needs vigilant, ethical operators — and citizens with the disposition to look for what is true. As Plato taught, all anyone can do is inculcate the disposition to discover truth.

Where ROCKR stands in this storyMove the load-bearing parts out of language

ROCKR exists to create an environment where inculcating that disposition — the disposition to discover what is true — is independently possible, for every individual and every community. We cannot make an ideology intrinsically good; nobody can. What we can do is make two moves at once: move a system's load-bearing promises out of hijackable language and into mathematics, the one medium where truth survives translation — and move the system itself out of distant institutions and into the living spaces of the local community. The four theorems are the first move made real: the guarantees people must rely on — real people, real presence, erasure without expropriation, a supply that cannot lie — stated as machine-checkable mathematics rather than terms of service (WP 8.1, Background).

And the philosophy sets the purpose as well as the method: a community that curates its own live experiences — every kind, every genre, chosen bottom up — is an environment where the disposition to discover what is true can grow. RUIPA grants make that environment open to everyone; the theorems make the liquidity behind it incorruptible.

We do not claim ROCKR is intrinsically good; nothing built by people is. We claim its guarantees are written in the one language that cannot be hijacked — and that everything else stays, as it must, in the hands of the individual and the community.

	Without ROCKR	With ROCKR
The false adviser (spoofing)	The displayed number is the bank'sThe fraudster calls from the real adviser's number, or the one printed on the back of the card; the victim validates the transfers herself with her Clé Digitale, believing she is securing her account. This is the scenario of the ruling of 23 October 2024 (€54,500) and the judgment of 14 April 2026 (€25,360).	Both ends are certifiedCaller and called are each a verified ; an unverified party does not arrive without a badge — it has no channel to arrive by, and no anonymous recipient to have money sent to (WP 8.2, §5, §5.6).
The burden of proof	On the bank, since 2024The Cour de cassation requires the bank to prove the client's "gross negligence"; a spoofed number lowers the expected vigilance. In 2026 a court found against BNP Paribas for lack of technical proof that its notifications were sent — the bank must now prove what it sent, to whom, and when.	Every contact leaves a non-personal proofA notification, a validation, a transfer are attested records between two verified identities — a log the bank publishes but cannot edit, admissible before a judge without revealing the client's name (WP 8.2, §5, §6.5).
Refund exposure (PSR)	Full refund, no ceilingWhen the PSR applies (~2028) the bank refunds every successful impersonation within fifteen business days; with €245m of manipulation fraud in the first half of 2025 alone in France, perimeter defence is also the profit-and-loss account.	No anonymous beneficiary to impersonateEvery beneficiary is a verified human or a verified organisation; the "safe account" scam has no destination that is not permanently bound to a verified identity (WP 8.2, §4.2, §4.2.1).
Mule accounts and flagged IBANs	Detected by behaviour, after openingKYC checks (Know Your Customer) verify a document at opening; a rented or coerced account passes, and the national flagged-IBAN register (7 May 2026) catches it only once another institution has already flagged it.	Structurally impossibleAn account is a wallet bound to the living identity attestation of a unique human; there is no second account to rent and no anonymous wallet to launder into (WP 8.2, §5, §5.6).
The defence's track record	No figure publishedBNP Paribas publishes neither its fraud losses, nor its reimbursement rate, nor any guarantee; the only public record is the courts', decision by decision.	Public, aggregated, continuousRefused transfers and verified-identity coverage are non-personal aggregates on a public ledger — a defence record anyone can audit, including the regulator drafting the PSR (WP 8.2, §6.5, §8).

	Without ROCKR	With ROCKR
What settles	The settlement leg aloneA money-market fund, a bond, one day a stablecoin: the security and the money are on a chain, but the entitlement to a live experience — the ticket, the seat — remains a file in a ticketing system, resaleable, forgeable.	Both legs, togetherSettlement binds the transfer of value to the transfer of the right between two verified identities, or does not happen — extended to the entitlement leg (WP 8.2, §1, §4.2; Theorem 1).
Where the money comes from	From a reserveA stablecoin is backed by deposits and government paper; its value is a promise of convertibility, its quantity a decision of the issuer.	From an authenticated event, or from nowhereROCKRCOIN, the digital utility asset the model settles, is issued only against authenticated live activity; it promises neither value maintenance nor return — it may fall as well as rise, including to zero — and its quantity is a machine-checked invariant (WP 8.2, §7.1; Theorem 2).
Who may hold	Authorised participantsThe February 2026 Ethereum issuance is "permissioned": only eligible, authorised participants may hold or transfer the shares — a list kept by the bank.	Verified humans, onlyEvery wallet is bound to a ; the restriction is not a list but a property of the system, valid for a fund as for a concert ticket (WP 8.2, §5, §5.6).
What the regulator can read	What the bank sends itThe Eurosystem trials and the Pontes pilot produce reports; the permissioned ledger of a private chain is readable only by its members.	A public, non-personal market stateSupply, committed demand and issued quantity are public aggregates; no personal data on-chain, erasure guaranteed by Theorem 3 (WP 8.2, §6.5, §8).
What "proven" means	Tested, in a controlled setup"One-off intra-group experiment", "controlled setup", "pilot": the method is the trial, and the trial succeeds when nothing broke.	Machine-verified, once for allThe four theorems are written in Lean 4 (Model Zero, v0.2) and checked by a proof assistant; "machine-verified" describes the method, and then holds for every transaction (WP 8.2, §6.5).

	Without ROCKR	With ROCKR
Identity at opening	A document, at the tobacconist'sAn identity document verified once, a customer file kept by the bank, and a fresh verification at every other service, lender or employer.	One identity, every doorA person verified once carries their (decentralised identifier) into every programme, every lender, every venue — inclusion that accumulates instead of starting over (WP 8.2, §5).
How beneficiaries are counted	Cumulative openings"5.5 million" adds accounts opened since 2014 and pro-rata microloan beneficiaries; a closed, dormant or twice-opened account counts as much as a living one.	Unique humans, at useEach is one verified person, once — a count of people served that the group publishes but cannot inflate (WP 8.2, §4.2, §6.5).
The right to be forgotten	To erase is to closeThe General Data Protection Regulation (GDPR) gives the right to be erased; for a bank account, exercising it means closing, with the retention obligations that attach.	Erasure with asset preservationA person can leave the platform, be forgotten, and keep everything they earned — by theorem, not by policy: no personal data is on-chain, and the wallet answers to their key alone (WP 8.2, §5.6; Theorem 3).
The incentive to come back	The service itselfA useful account retains; nothing rewards its holder's participation in the life of their neighbourhood.	credits, expiring weeklyA small weekly credit every verified participant receives, spendable only on taking part, expiring if unused — a participation income that cannot be hoarded (WP 8.2, §7.1, §7.1.2).
The physical network	13,370 outletsThe tobacconist and the post office are Nickel's front door — a network the group took ten years to build.	The same network, as a place of participationEvery outlet is a place where a presence can be authenticated; the network that opens accounts can become the one that attests participations (WP 8.2, §4.3, §7.1.2).

	Without ROCKR	With ROCKR
1.6 million beneficiaries	The associations' talliesEach association reports its number of beneficiaries; the Foundation adds them up. A workshop attended ten times by the same person and a leaflet handed to a thousand count according to each one's practice.	Counted at the doorEvery workshop, session and outing generates a per verified participant — a register the Foundation publishes but cannot edit (WP 8.2, §4.2, §6.5).
1.35 million volunteering hours	Declared in an internal toolHours are entered by employees and consolidated over a rolling two years; the one-million target has been exceeded since 2021–2022, on the strength of the entries.	Attested at presenceA volunteering hour is an authenticated presence between a verified employee and a verified association; the total is a public, non-personal aggregate, auditable by the shareholder and by the union that signed the 2018 agreement alike (WP 8.2, §5.6, §6.5).
€5,000 a year, for three years	A grant to the associationThe money funds the organisation; the association decides, reports, and the link between the euro paid and the person helped stays narrative.	A grant to presenceThe same budget can top up credits and grants issued only against authenticated presence — the euro follows the person to the door, and the association stays in charge of what it organises (WP 8.2, §7.1, §7.1.2).
The place	An administrative categoryThe QPV is defined by the state; the bank acts there through its laureate associations, with no instrument to measure the life of the neighbourhood itself.	A territory that organises its own experiences confirms an experience only when the neighbourhood's committed demand meets supply — everything that happens is already funded and already counted (WP 8.2, §4.3, §7.1.2).
Reporting in 2030	A new dashboardThe 2027–2030 plan will set new targets, measured like the last ones: by the bank, for the bank.	A continuous registerThe plan's inclusion and community targets are readable year after year by regulator, shareholder and neighbourhood, without depending on the annual report — and the bank keeps the initiative on what it promises (WP 8.2, §6.5, §8).