back to atlas

ks · foundry

the foundry

Three protocols. One Foundry.

KashScript is no longer one library — it is a three-artifact ecosystem the Foundry forges and ships together. The Passport travels with the user across every app. The Trade suite carries commerce, settlement, and disputes across five sovereign paradigms — without trusting a single platform. The Brain dispatches intent through Lexicon-validated data so AI is never let off-leash. Pick one. Pick all three. They install side-by-side.

artifact 01 · the passport

The Passport.

Identity · did:ks · Passkeys · Social Recovery · ZK-Proofs

Identity that travels with the user, not the platform.

  • Sovereign DID
  • Passkey-bound signing
  • M-of-N social recovery
  • Selective disclosure + ZK proofs
artifact 02 · the trade

The Trade.

Trade · Deterministic CREATE2 deploys · EIP-712 multi-sig · ERC-4337 gasless

One Solidity factory, five blueprint paradigms, zero stranded funds — audit-passed sovereignty for on-chain commerce.

  • Five paradigms
  • Money-Lock invariant proved
  • EIP-712 signal verification
  • Two-tier governance
  • ERC-4337 sponsorship
  • Multi-L2 deploy ceremony
artifact 03 · the brain

The Brain.

Neuron · Recursive decomposer · Adversarial judge · Signed receipt ledger · MCP transport

AI execution that compiles intent into a typed DAG and signs every action.

  • Recursive Decomposer + Adversarial Judge
  • Signed Receipt Ledger
  • MCP transport + Privacy Filter
  • Swarm orchestration
  • Edge-ready headless mode

getting started · @kashscript/kstack

Three commands to the Foundry.

One CLI, three commands. kash login binds your machine to a did:ks. kash browse shows your licence tier on each product. kash add <product> drops the SDK into your existing project — framework-aware, idempotent, rollback-able.

one-shot · zero install

$ npx @kashscript/kstack add identity --apply

Zero install. npx fetches @kashscript/kstack on demand, runs it, and exits.

install globally (optional)

$ npm install -g @kashscript/kstack
  1. 1
    kash login

    Bind your machine to a did:ks.

    WebAuthn-driven device-flow auth. Your developer identity becomes a Passport entry that products can attribute commits, releases, and licences to.

  2. 2
    kash browse

    List the marketplace.

    An interactive picker over Passport, Trade, and Brain — with your per-DID licence tier shown next to each. Pick a product to scaffold.

  3. 3
    kash add <product>

    Inject into your project.

    Dry-run by default. Detects your framework (Next/Vite/CRA/Remix/Expo), patches package.json + tsconfig + turbo.json idempotently, scaffolds `lib/<product>.ts`, and runs verification. Re-runnable safely.

plans + subscription

Free where it must be. Paid where it should be.

The Passport stays free, forever — sovereign identity is not something the Foundry will ever charge for. The Trade suite and the Brain are commercial under SSLA Schedule B; a 14-day trial covers evaluation. All pricing in USD, billed via Stripe / LemonSqueezy. Cancel any time.

Permissive — Passport · Lexicons · CLICommercial — Trade · Brain · ZK Prover

  • Free

    Free

    Local dev. Evaluation. Identity-everywhere.

    • Unlimited production use of every Permissive package (Passport SDK, lexicons, CLI).
    • Local dev + evaluation use of Trade & Brain — your laptop, your tests.
    • Read-only marketplace browse via `kash browse`.
    • Production deploys of Trade or Brain — needs `trial` or `paid`.
    • Hosted Registry mirror / hosted PDS — paid services.
    • Auto-degrades from `trial` after 14 days.

    best for

    Solo devs evaluating; learners; one-off integrations.

  • Trial

    Free

    14 days. Every commercial feature. No card.

    • Everything in Free, plus production use of Trade + Brain for 14 days.
    • 1 DID seat. Stable release channel.
    • Auto-granted on first `kash login` — no card required.
    • After 14 days, auto-degrades to Free. Upgrade to keep production access.
    • Single seat — no team sharing.
    • Preview / canary release channels — `paid` and above only.

    best for

    Building the MVP. Demoing to your team / investors.

  • Paid

    $19 /mo · $190/yr

    One developer, one production environment.

    • Everything in Trial, indefinitely.
    • Up to 5 DIDs (developer + environments + agents).
    • Stable + preview release channels.
    • Standard Kash-Registry resolver SLA (99.5%).
    • Self-hosted Registry — `enterprise` only.
    • SSO into the Studio panel — `team` and above.
    • Custom Recovery quorums — `enterprise` only.

    best for

    Solo founders shipping production; agencies running one client.

  • Team

    $89 /mo · $890/yr

    Up to 50 seats. SSO. Bigger SLA.

    • Everything in Paid.
    • Up to 50 DIDs — collapses the per-environment math to a flat headcount.
    • SSO into the Studio panel.
    • Higher Registry resolver SLA (99.9%).
    • Priority email support.
    • Self-hosted Registry — `enterprise` only.
    • Custom Lexicons under your brand — Studio engagement.

    best for

    Startups shipping consumer products. Scaling teams.

  • Enterprise

    Custom billed annually

    Self-host. Bring your own everything.

    • Everything in Team, with custom DID seat counts.
    • Self-hosted Kash-Registry — your domain, your operators.
    • Custom Recovery quorums + guardian onboarding playbook.
    • Dedicated Studio support channel.
    • Custom MSA + data-processing addendum.

    best for

    Regulated industries. Banks. Governments. Anyone who must self-host.

hosted-service add-ons

The Plan tiers above gate package licences. The real recurring revenue lives in optional hosted services — they take the on-call off your team.

  • Hosted Registry mirror

    From $99/mo

    We run a DID + lexicon resolver on dedicated infra with 99.95% SLA and reach into private resolver pools.

    available on: paid · team · enterprise

  • Hosted PDS with backup quorum

    From $0.05/GB/mo

    Encrypted Personal Data Store with geographic replication + compliance reports (SOC 2 lite, GDPR).

    available on: paid · team · enterprise

  • Managed witness pool

    From $149/mo

    We run a 3-node witness pool on operationally-independent hosts. You inherit the uptime, we eat the on-call.

    available on: team · enterprise

  • Attestation issuer tier

    Quote per attestation type

    Credentialed KYC / age / accreditation attestations the kash-attested-range-proof-v1 circuit verifies in-circuit.

    available on: enterprise

Talk to billing →Read the SSLA

studio · for clients

Build your product on the Foundry. Keep your brand on the surface.

The Foundry is open infrastructure. The Studio is the workshop that runs it. When you bring a product idea that needs sovereign identity, signed commerce, or consent-gated AI, we build it on top of the same three protocols that power our reference apps — but the result lives under YOUR brand, on YOUR domain, with YOUR Lexicons.

Custom Lexicons

Your domain. Your record types.

We design and ship a private Lexicon extension scoped to your business — `acme.invoice@1`, `acme.consent@1`, whatever your records need to look like. Validated by the same engine that ships in `@kashscript/lexicons`, but versioned and governed by your team.

  • Typed records across every surface — web, mobile, partner API.
  • Forward-compatible semver gates upgrades; old clients keep reading old records.
  • JSON-Schema export for any non-TypeScript consumer.

White-labelled Foundry

Foundry-as-infrastructure.

We deploy a Foundry instance under your brand — your registry, your hosted PDS, your witness pool. The Studio operates it under SLA; your users see a single, branded experience. The protocols are open-source; the operations are paid.

  • Branded registry + hosted PDS — your customers never see `kashscript.com`.
  • Per-DID licence tiers your billing system controls.
  • Operations runbook + on-call escalation handled by the Studio.

Integration sprints

From `kash add` to launch in 6 weeks.

A fixed-scope engagement: we install the three artifacts into your existing codebase via the injection engine, wire the Bento UI primitives, train your team, and run a launch sprint. Walk in with a Next.js app; walk out with did:ks sign-in, signed transactions, and an AI surface that reads your real data.

  • Working `kash login` → `kash add identity` → `kash add trade` flow in week 1.
  • Custom Lexicon + onboarded engineers by week 3.
  • Production launch + post-launch verify suite (`kash add --verify`) by week 6.
Start a Studio engagement →studio@kashscript.dev
next

The Studio →

next

Meet Kashif →

next

The Journal →