Oreka · Application Specification

The Responsible Minerals Credits Initiative, in operation.

Oreka is the digital platform that operationalises and scales the RMC scheme. The consortium defines the rules. Oreka enforces them digitally, end to end: mine site identification and eligibility, production recording, certificate issuance, transactions, fund allocation, and Partner disclosure.

Audience

EPRM Consortium

Status

MVP defaults locked. Pending stakeholder consultation.

Inherits

Datastake Application Framework

Classification

Consortium members' discretion

§ 1

Context: the Responsible Minerals Credits Initiative

Artisanal and small-scale mining accounts for around 20% of global mineral production by volume, yet ASM communities remain marginalised from formal supply chains and the economic benefits of the minerals they extract.

True physical traceability of ASM minerals through complex global supply chains is often impractical or impossibly expensive. Binary approaches, either investing heavily in full traceability or disengaging entirely, fail to serve the goal of improving conditions at mine sites whilst maintaining supply chain integrity. The industry needed a scalable model that enables financial engagement without claiming false certainty about physical flows.

The book-and-claim model

The RMC initiative addresses this paradox through a book-and-claim approach. Rather than tracking physical flow, the scheme decouples sustainability attributes from the commodity itself. Downstream companies purchase certificates, fixed-price volume-based instruments proportional to their estimated ASM mineral footprint. Proceeds fund community-governed improvement projects at participating mine sites.

  • Scalable financial participation without false claims of traceability. Companies can engage at the scale of their footprint, not at the scale of their traceability budget.
  • Product simplicity. Buying a certificate is a single transaction against a standard instrument.
  • Fixed pricing ensures predictable fund flows and equal engagement incentives across all buyers.
  • Fungibility simplifies allocation logistics and prevents artificial scarcity tied to named sites.
  • Community governance. Decisions on how proceeds are spent sit with Fund Allocation Committees at each mine site, not with distant buyers.

The RMC scheme is designed to complement, not replace, supply chain due diligence under the OECD Due Diligence Guidance. Certificates represent financial commitment and engagement. They are not a claim of mineral purity or traceability.

DASME: the formal certificate designation

Certificates issued under RMC are formally designated DASME Certificates (Deliberate ASM Engagement). DASME is the instrument-level name; RMC refers to the scheme. The pattern mirrors precedent in other environmental markets: the Verified Carbon Standard (VCS) is the scheme, the Verified Carbon Unit (VCU) is the instrument; Gold Standard is the scheme, Gold Standard VERs are the instruments.

The consortium

OrganisationRole
EPRMEuropean Partnership for Responsible Minerals. Project sponsor and governance partner. Funded the initiative to develop a scalable, verifiable model for downstream engagement with ASM communities.
TIFThe Impact Facility. Project lead and system Coordinator. Operates the certificate lifecycle, manages mine site registration, oversees fund allocation, and serves as primary liaison with mine communities and FACs.
ARMAlliance for Responsible Mining. Authored the mineral-agnostic book-and-claim framework and eligibility criteria. Brings technical expertise in ASM assessment and responsible mining standards (co-author of the CRAFT Code).
FairphoneFounding Partner and pilot buyer. Pioneered the initial RMC certificate purchase with TIF. Provides market demand signal and use case validation for the certificate system.
DatastakeSystem designer and developer. Builds Oreka on the Datastake Application Framework (DAF). Responsible for technical architecture, security, and operational delivery.
§ 2

Platform overview

Oreka is the digital platform built by Datastake to operationalise and scale the RMC scheme. It does not define the rules. The consortium does. Oreka enforces them digitally and provides operational infrastructure for the entire certificate lifecycle.

What Oreka inherits from DAF

Oreka is configured on the Datastake Application Framework. The inheritance operates at two levels: architectural benefits that shape how the scheme can scale, and built-in capabilities that Oreka consumes as configuration rather than code.

Architectural benefits

  • Distributed custody. Each consortium organisation holds its own data in its own account and grants scoped access to counterparties. There is no central ledger owned by one party.
  • Modular infrastructure. DAF is composed of independent modules. Oreka enables the modules the RMC scheme needs at MVP and leaves the rest inert.
  • Interoperability. Records created in Oreka are structured against the generic DAF data model. Cross-app data exchange over the Datastake network is a configuration step, not a rewrite.
  • Principled reuse. Every primitive (subjects, role hierarchy, sharing, audit, notifications) is governed by DAF specifications validated across other apps.

Built-in capabilities

CapabilityWhat Oreka uses it for
Subjects modelMine Site as Location. FAC as Stakeholder. Production Record as Event. Retirement Statement as Document.
Forms & subject profilingMine site identification, operator profiling, Partner onboarding. Configured per interface.
Event captureProduction records, assessment outcomes, transactions. Structured fields and supporting documents handled generically.
Dashboards & analyticsCoordinator and Partner home screens, KPI tiles, drill-downs. DAF provides widget library and query engine.
Role hierarchyAdministrator, Custodian, Editor, Viewer, applied per account type.
Information sharingExchange Partnerships with per-form scoping, submit-on-share, revocation.
Audit trailImmutable creation, modification, and state-transition history on every record.
NotificationsIn-app and email notifications for issuance, reassessment reminders, approval requests.
Data store & queryDATA sidebar (Store, Query, Channels) present in both interfaces from day one.

Beyond these primitives, Oreka adds scheme-specific logic: the Certificate entity with its three-state lifecycle, issuance constraints tied to eligible production, conversion ratios per mineral, and the Retirement Statement generator. Everything else is DAF configuration.

Architecture principles

Oreka's design follows four principles that flow from the RMC governance model, not from generic software preferences.

  • Coordinator-driven at MVP. TIF, as Coordinator, performs most operational functions directly. Mine operators and FAC members do not have direct system access at MVP. The Coordinator acts as their proxy.
  • Separation of production from issuance. Recording production and issuing certificates are deliberately distinct actions, on different screens, with potentially different authorisations.
  • Offline-first governance. Critical governance processes (FAC voting, fund allocation decisions, payment confirmation) occur outside the system. Oreka documents and enforces the outcomes but does not mediate the decisions themselves.
  • Irreversible state transitions. Once a certificate is issued, assigned, or retired, that transition cannot be undone. The system enforces this at database level.

User interfaces at MVP

InterfaceAudienceScope
CoordinatorTIFOperational hub. Mine site management, production recording, certificate issuance, transaction logging, project creation, Partner onboarding, reporting.
PartnerFairphone and future buyersFootprint calculation, certificate purchase requests, portfolio view, impact reporting.
Admin PanelSystem administratorsAccount creation, user management, role assignment, organisation settings. No business logic.

Account model

Two operational account types exist at MVP. Accounts transition through three statuses: Active (operational), Pending (invited, awaiting confirmation or payment), and Suspended (access revoked).

Account typeExampleCapabilities at MVP
CoordinatorThe Impact Facility (TIF)Full operational access: mine management, production recording, certificate issuance, transaction logging, project creation, Partner management.
PartnerFairphone and future buyersFootprint calculation, certificate purchase requests, portfolio view, impact reporting. Read-only access to mine and project information.

User roles

Oreka uses the standard DAF role hierarchy, configured per interface. Each role inherits the capabilities of the one below it: Administrator (full access, including user management), Custodian (operational role), Editor (create and edit only, no sharing), Viewer (read-only).

Information sharing model

When a Partner is approved, the system creates an Exchange Partnership between the Partner Account and the Coordinator Account. Partner-to-Coordinator: all submitted data is shared upon form submission. Coordinator-to-Partner: scoped sharing only. Partners see mine, FAC, and project data only to the extent that it relates to certificates they hold. Production records are not shared.

Registry design references

Oreka's registry mechanics draw explicitly on established environmental and mineral-sector registries.

RegistryDomainPatterns referenced
Verra VCSVoluntary carbon creditsInteger units (VCU = 1 tCO₂e), vintage year tagging, irreversible retirement, no auto-expiry.
Gold StandardCertified carbon and energy creditsIssued–Transferred–Retired lifecycle, manual retirement by account holder, batch operations, scheme/instrument naming.
I-RECRenewable energy certificates1 MWh = 1 certificate, legal title transfer at delivery, light KYC, CSV and PDF exports.
RMI RMAPMineral supply chain assuranceFramework-tagged assessments, multi-standard alignment, conformance levels.
Explicitly excluded. ITSCI is a physical traceability system for tin and tantalum, not a book-and-claim registry. Its lot tracking model does not apply to Oreka and is not a reference.
§ 3

From eligibility to disclosure

From mine site registration through final disclosure and retirement. Each subsection describes what the process is for, the key challenges and decisions that informed its design, the step-by-step mechanics, and the locked MVP defaults. The certificate is the connecting record across these workflows, not the protagonist of any single one.

§ 3.1

Mine site identification & eligibility evaluation

To identify ASM mine sites in Oreka and evaluate their eligibility for the RMC scheme. Identification covers subject creation plus full population of identity, Operator linkage, mineral types, and basic governance data. A fully identified mine is the precondition for evaluation. Only production from a mine that was Eligible at the production date can back certificate issuance.

Mine Site Navigation Page

The per-mine landing surface from which all mine-scoped operations are accessed. A worked example of the DAF Subject Detail archetype applied to a Location subject. Layout slots, top to bottom: General Information panel (identity, GPS, Operator, mineral types), Mine Summary header button, Production Tracking module, Mining Operation Assessment cards, Linked Subjects.

Framework cards: anatomy

Each configured framework renders as a card with Status, State, Vintage, Date, and a Details button. Status answers "is this mine eligible under this framework?" Stateanswers "where is this evaluation in its lifecycle?" The two dimensions coexist on the card.

Minimum Viability Framework
CRAFT modules 1–3 · OECD Annex II
EligibleCompleted
Vintage

2026

Date

04 Mar 2026

Details

Two dimensions, surfaced separately.

Status
Eligible or Ineligible. The outcome of the most recent valid evaluation. Answers: is this mine eligible under this framework?
State
Available · In progress · Completed · Unavailable · Expired · Withdrawn. The position of the evaluation in its lifecycle. Answers: where is this evaluation?
Vintage
Calendar-year stamp recording when the evaluation was conducted. Travels with the resulting certificates.
Date
The last evaluation date. Drives the expiry calculation alongside the framework's reassessment cadence.
Details
Opens the framework's evaluation detail view. Greyed when the State is Unavailable.

A mine may be Eligible (Status) and Expired (State) at the same time: the last evaluation produced an Eligible outcome, but its validity window has lapsed and re-evaluation is due.

Expert Evaluation

A mine site's eligibility under a given framework is established by an Expert Evaluation: a human-led assessment against framework criteria. The Coordinator (or an appointed auditor) opens the framework's form, works through the questionnaire, attaches evidence, and attests to compliance. The system captures the evaluator's identity, date, evidence references, and the resulting Status, derived deterministically from the form fields per the framework's eligibility rule. Algorithmic scoring is out of scope for Oreka.

Workflow

WF · Mine site identification & eligibility evaluation6 steps
  1. 01
    Coordinator
    Initiates mine site identification from the Mine Sites module. Captures identity (site name, GPS, country, admin hierarchy), Operator linkage, mineral types, and basic governance data. A mine site cannot be evaluated until identification is complete.
  2. 02
    Coordinator
    Launches an eligibility evaluation. The system displays available frameworks (Minimum Viability, CRAFT, FCA, RMAP, TIF IMP). Coordinator selects the applicable framework.
  3. 03
    Evaluator
    Works through the framework's form, records evidence, and attests to each criterion.
  4. 04
    System
    On completion, records framework name, Status (Eligible / Ineligible), Vintage, Date, and validity period (default 12 months from completion). The framework card transitions State from In Progress to Completed.
  5. 05
    Coordinator
    Reviews Mine Site Summary: general overview, compliance status per framework, production history, and linked certificates.
  6. 06
    Coordinator
    May suspend or withdraw eligibility at any time with a recorded reason. Suspension halts new issuance from that site. It does not affect certificates already issued.

Minimum Viability Framework

The MVP baseline. An Expert Evaluation framework aligned with CRAFT Code Modules 1–3 and OECD Due Diligence Guidance Annex II. It encodes the immediate-disengagement criteria: the conditions under which downstream engagement would not be permissible.

  1. Legitimacy of the mining operation per CRAFT Code modules 1 and 2 (legal registration, standard mining practices).
  2. Absence of worst forms of child labour and forced labour per CRAFT Code module 3, and absence of conflict financing or serious abuses per OECD Annex II.
  3. Basic organisational governance: production register, sales and financial record-keeping, documented chain of custody.
  4. Operational prerequisites: legal status, royalty / tax compliance, land use permissions, bank account, minimum age compliance, fair wage / share, mercury management.

Verification options. Each evaluation records an Assessment basis: First-party (self-assessment, with Coordinator entering on behalf of the operator), Second-party (Coordinator or scheme operator verifies directly), or Third-party (independent auditor). At MVP, first-party is acceptable.

Eligibility withdrawal & existing certificates

A critical governance question. The system must balance integrity against legitimate Partner expectations. Rule at MVP: withdrawal halts new issuance from that site immediately. Certificates already issued and assigned to Partners remain valid; they are not revoked. The system applies a Flagged Originannotation visible in the Partner's portfolio, in the Certificates Registry, and in any disclosure or retirement workflow.

Rationale. Revoking already-assigned certificates would undermine Partner confidence and create legal ambiguity about ownership. Flagging preserves the audit trail whilst ensuring transparency. If a mine site later regains eligibility, the Coordinator may remove the flag. This is the only case where a flag is reversible.
LockedMine site & eligibility

Minimum registration fields. Site name, GPS coordinates, operator name and contact, mineral type(s), and basic organisational data. Operator is a linked subject on the Mine Site, not a first-class subject. Additional fields per framework are collected during evaluation, not registration.

Eligibility reassessment. Default cadence 12 months, customisable per framework via back-end configuration. The system flags mines approaching reassessment 60 days before expiry. If reassessment is not completed before expiry, the framework's State moves to Expired and no new certificates may be issued until reassessment is complete.

Vintage on evaluations. Every evaluation carries a calendar-year stamp ("vintage"), the year in which the evaluation was conducted.

Eligibility inheritance on production. A production record's eligibility is inherited from the version of the mine's eligibility active on the production date. If no valid version was active, the production is recorded but is Ineligible.

Eligibility withdrawal. Flagged Origin annotation; certificates not revoked or auto-retired. Aligns with Verra and Gold Standard registry practice.

Partial eligibility. Supported. A mine may be eligible under Minimum Viability but not under CRAFT. Certificates are tagged with the framework(s) under which the site was eligible at the time of production.

Eligibility evaluation. Expert Evaluation per framework. Each framework has its own form and deterministic eligibility rule. Algorithmic scoring is out of scope.

§ 3.2

Production recording

To record the quantity of minerals produced at any registered mine site, regardless of its current eligibility status. Production recording is a general operational log. Eligibility gates issuance, not recording.

Production is recorded at every registered mine

A mine site may be registered and actively producing before it achieves eligibility under any framework, or it may lose eligibility mid-period. Oreka captures the full production history. Whether a given batch backs certificate issuance depends on whether the mine site was eligible at the time of production, not on its status today.

  • Historical integrity. A mine's production record is a continuous log. Censoring based on current status would break the audit trail.
  • Retrospective issuance. If a mine achieves eligibility today, production recorded earlier cannot be retroactively claimed. The system enforces the date-window rule.
  • Reassessment analytics. Long-term production trends are a primary input to reassessment and framework layering decisions.

Granularity & cadence

Every Production Record anchors on a specific Pit or Shaft (a sub-Location of the Mine Site). Mine-only granularity is not supported. Cadence accepts daily, weekly, or monthly granularity. The recording form does not constrain it to a fixed interval. Decimal quantities are accepted up to 3 decimals.

Workflow

WF · Production recording4 steps
  1. 01
    Coordinator
    Records production data: Pit or Shaft (required), mineral type, volume in decimals up to 3 places, period (daily, weekly, or monthly date or date-range).
  2. 02
    System
    Maintains cumulative production totals per site per period. Computes the eligible-production subset by cross-checking each record's production-period against the mine site's eligibility windows.
  3. 03
    System
    Displays both total and eligible production for each mine site, with the delta visible.
  4. 04
    Coordinator
    Once production data is verified, moves to the separate Eligibility & Issuance module to issue certificates from the eligible-production balance.
LockedProduction recording

Production validation. No automated volume caps or validation rules at MVP. The Coordinator exercises judgement. The deliberate separation of production recording from certificate issuance is the primary control: the Coordinator reviews production data before authorising issuance, and may issue fewer certificates than the eligible volume warrants.

Supporting documentation. Optional file attachments accepted (photos, weighbridge tickets, third-party verification reports). Not required at MVP. Post-MVP, documentation requirements may be formalised per framework.

§ 3.3

Certificate issuance

To create certificates from eligible production. Certificates are integer-based (confirmed for MVP, April 2026). They are the fungible, tradeable instruments that Partners purchase.

Manual, deliberate issuance

Issuance is manually triggered, not automated. The Coordinator reviews eligible production, decides how many certificates to issue, and confirms issuance as a deliberate action. This preserves human oversight and allows partial / staged issuance: issue 30 of 47 certificates from a mine, reserving the remainder for later.

Workflow

WF · Certificate issuance5 steps
  1. 01
    Coordinator
    Navigates to Eligibility & Issuance. Views list of mine sites with eligible production (filtered by active eligibility windows and remaining issuable volume).
  2. 02
    System
    For each mine site, displays: total production to date, certificates already issued, remaining eligible volume, and applicable frameworks.
  3. 03
    Coordinator
    Selects a mine site and reviews issuance details: eligible production, framework tags, validity period, outstanding balance.
  4. 04
    Coordinator
    Confirms issuance of a specific number of certificates (e.g. issue 30 from 47.3 t eligible).
  5. 05
    System
    Creates integer certificates with status Unassigned. Each certificate is tagged with mine site, mineral type, framework(s), vintage year, and issue date. Records remaining eligible volume (47.3 − 30 = 17.3 t).

Production-to-certificate conversion ratios

Mineral1 certificate =UnitExample
Cobalt1 tonneMetric tonne (t)47.3 t → 47 certs
Copper1 tonneMetric tonne (t)120.8 t → 120 certs
Gold1 kilogramKilogram (kg)8.6 kg → 8 certs

Rounding rule. Conversion rounds down to the nearest integer. Fractional production below one unit remains as eligible balance and may contribute to future issuance. Conversion ratios are stored as system parameters, configurable per mineral by the App Administrator. Changes apply prospectively; certificates already issued under a prior ratio are unaffected.

No over-issuance. Cumulative certificates issued from a mine site and production period cannot exceed total eligible production for that period, converted using the applicable ratio. The system enforces this at database level. If 47.3 t of eligible cobalt exists and 47 certificates have been issued, the system will not permit issuance of a 48th.

Vintage year tagging

Every certificate carries a vintage_year attribute recording the calendar year of the underlying production. Vintage year is set at issuance and is immutable. Follows established practice in carbon credit and renewable energy certificate registries. At MVP no auto-expiry is applied; instead, the system flags certificates with a vintage older than 24 months for Coordinator review before assignment.

Ownership at issuance

Certificates become official registry instruments at issuance. Unassigned certificates are held in the Coordinator's registry account on behalf of the originating mine community. The Coordinator acts as custodian, not owner. Upon assignment, legal ownership transfers to the Partner.

LockedCertificate issuance

Certificate expiry. No auto-expiry at MVP. Vintage year tagging plus 24-month review flag.

Official status. At issuance. Assignment is an ownership transfer event, not a creation event.

Unit basis. Integer certificates. One certificate equals one production unit (1 t for cobalt and copper, 1 kg for gold). Conversion ratios are configurable per mineral.

Custody pre-assignment. Coordinator holds unassigned certificates on behalf of the mine community.

§ 3.4

Certificate assignment & transactions

To assign issued but unassigned certificates to a Partner after their purchase request has been approved and payment received.

Two logical steps

Payment happens outside the system. Certificate assignment is therefore separated from transaction logging: a Coordinator may approve a request and log the offline payment in Transactions, and another Coordinator may later assign the specific certificates from the registry. Certificates are fungible at MVP; the Partner cannot request specific mine sites or frameworks.

Workflow

WF · Certificate assignment6 steps
  1. 01
    Partner
    Submits a certificate purchase request (e.g. 153 certificates to cover annual footprint). Request enters Pending.
  2. 02
    Coordinator
    Receives notification. Reviews in Partners Management. Approves or rejects with reason.
  3. 03
    Partner
    Makes payment offline (bank transfer, invoice settlement).
  4. 04
    Coordinator
    Logs the financial transaction: payer, quantity, amount (USD 5,000 / cert), payment date, reference. Links to the approved request.
  5. 05
    Coordinator
    Navigates to Certificate Registry. Filters Unassigned certificates. Selects matching quantity and assigns to the Partner. Certificates transition Unassigned → Assigned (irreversible).
  6. 06
    System
    Updates Partner portfolio: newly assigned certificates, framework composition, mine sites represented, project impact.

Batch assignment

Coordinators assign in batches. When fulfilling a 153-certificate request, the Coordinator selects from the unassigned pool and assigns the batch in a single operation. The system records transaction reference, assignment date, and Partner account as a single audit event.

LockedAssignment & transactions

Time limit between transaction and assignment. No hard limit. Both timestamps recorded for audit. The Coordinator manages Partner expectations.

Legal ownership transfer. Occurs at assignment, not at transaction confirmation. Aligns with I-REC and REC market practice: all rights, title and interest pass to buyer upon delivery. Transaction is evidence of payment; assignment is the delivery event.

§ 3.5

Partner management & engagement

To manage Partner queries, onboard new buyers, and track engagement. The Partners Management module is the hub for Partner lifecycle: account creation, KYC capture, status transitions, and purchase history.

LockedPartner management

KYC at MVP. A simplified version of the DAF KYC Forms component, adapted for downstream corporate buyers. Required: legal name, registration country, entity type, primary contact, registration number, brief description of supply chain relevance. Optional: tax ID, industry sector, annual mineral usage estimate. Lighter than the full DAF KYC framework because Partners are buyers, not supply chain operators.

Purchase capacity. Unlimited. Partners are not subject to coverage limits. The footprint calculation is advisory; Partners may purchase any number of certificates.

Account suspension & termination. Standard DAF lifecycle. Suspension revokes access immediately; assigned certificates remain assigned and are not revoked. Termination requires the Coordinator to determine disposition of any unretired certificates.

§ 3.6

Partner footprint & coverage

To help Partners understand their ASM mineral exposure, calculate a recommended certificate purchase quantity, and track engagement over time. The ASM share percentage is a notional estimate of ASM's share in global mineral production. Exact traceability is virtually impossible, so precise shares cannot be determined with certainty.

Footprint as a guide, not a ceiling

The footprint calculator provides a recommendation but does not enforce a requirement. Partners may cover 0%, 50%, 100%, or exceed their calculated footprint. The system displays the recommendation and tracks coverage as a reference metric but does not gate purchasing.

Worked example · Fairphone, 500,000 smartphones, FY 2026
1
Calculate total cobalt usage
500,000 units×0.85 kg=425 t

Annual cobalt mass across the product line, drawn from the bill of materials.

2
Apply RMC Governance Board ASM share
425 t×18%=76.5 t ASM exposure

The 18% baseline is a notional estimate. Partners may override based on their own supply-chain analysis; both values are retained for audit.

3
Convert to recommended certificates
⌈76.5 t⌉=77 certificates

One certificate equals one tonne of cobalt. Conversion rounds up to the next integer for the recommendation.

4
Coverage decision
Cover 0% · 25% · 50% · 100% · >Partner choice

The footprint is advisory, not a ceiling. Partners may purchase fewer certificates if budget is constrained, or more if they wish to over-contribute.

Workflow

WF · Footprint calculation & coverage7 steps
  1. 01
    Partner
    Logs into the Partner Interface. Navigates to My Footprint.
  2. 02
    Partner
    For each mineral (Cobalt, Copper, Gold), enters annual mineral content or product usage (e.g. 850 g cobalt × 500,000 units = 425 t).
  3. 03
    System
    Proposes an ASM share percentage based on the RMC Governance Board baseline (e.g. 18% for cobalt). The Partner may override.
  4. 04
    System
    Calculates footprint: Annual usage × ASM share = ASM exposure. 425 t × 18% = 76.5 t.
  5. 05
    System
    Recommends certificate quantity: ⌈76.5 t⌉ = 77 certificates. 1 certificate = 1 tonne of ASM mineral.
  6. 06
    Partner
    Reviews calculator: estimated ASM content, recommended quantity, current coverage. Optionally consults the trend view across reporting years.
  7. 07
    Partner
    Decides whether to purchase the recommended quantity, more, or fewer. Submits a purchase request.

Reporting year model

Certificates are not stamped with a reporting year at purchase. They are assigned to the Partner's account as a pool. The reporting year is specified at retirement, when the Partner retires a batch against a specific period (e.g. FY2025). A Partner may purchase 50 certificates in 2026, retire 30 against FY2025 (retroactive coverage), and hold 20 for FY2026.

LockedFootprint & coverage

ASM share percentages. RMC Governance Board baselines per mineral, stored as system parameters and shown as defaults. Partners may override with their own determination; both values are retained for audit. Board reviews baselines annually.

Footprint update frequency. Any time. No annual lock. Accommodates Partners whose mineral usage changes mid-year.

Historical tracking. All footprint calculations stored with timestamps. The dashboard surfaces year-over-year trends in mineral usage, ASM exposure, and coverage.

Coverage thresholds. Purely advisory. No minimum or maximum at MVP.

§ 3.7

Project creation & fund allocation

To create improvement projects at eligible mine sites and allocate certificate proceeds to fund them. Projects translate capital into tangible outcomes.

FAC governance, offline at MVP

FAC governance is complex. The MVP does not implement direct FAC voting or proposal submission inside Oreka. The Coordinator acts as the proxy: the FAC decides offline, and the Coordinator records the decision in Oreka as the justification for project creation and funding allocation. The FAC is a first-class Stakeholder subject (one FAC per Mine Site), with FAC Members as linked subjects, supporting future direct FAC access without restructuring the data model.

Workflow

WF · Project creation & fund allocation6 steps
  1. 01
    FAC (offline)
    Convenes and decides on improvement projects: mine site, impact categories, budget, timeline, success metrics.
  2. 02
    Coordinator
    Creates a new project: name, description, associated mine site, impact category(ies), budget, timeline, key metrics.
  3. 03
    Coordinator
    Reviews available funds per impact category in the Funding Allocation dashboard. Funds accumulate from certificate sales; allocation is governed offline by the FAC.
  4. 04
    Coordinator
    Logs a funding transaction: allocates capital from the impact category to the project. Project status moves to Funded.
  5. 05
    Coordinator
    Monitors project implementation: updates status (Approved → Funded → Ongoing → Completed), records progress and impact metrics.
  6. 06
    System
    Calculates each Partner's contribution: (Partner's certificates in the impact category ÷ total certificates in that category) × total project budget.

Pooled impact claims model

Certificate proceeds are pooled. There is no direct mapping between an individual Partner's certificates and specific projects at the point of purchase or assignment. The FAC allocates pooled proceeds. Partners are informed ex-post which projects their contribution has supported, proportionally.

Why pooled, not direct. Direct cert-to-project mapping would undermine the FAC's governance role, create inequities between Partners (early buyers get "better" projects), and risk perception of the scheme as a greenwashing mechanism. The pooled model reflects the scheme's core principle: engagement is collective, not transactional.
LockedProjects & fund allocation

Impact category taxonomy. Configurable, inherited from DAF reference implementations. Default categories at MVP: Education, Health, Livelihood, Water and Sanitation, Environmental Remediation, Governance. Aligns with OECD Annex II assessment domains.

Gender budgeting. Tracked as a tag on projects, not enforced as a hard budget gate. Supports EPRM indicator reporting without blocking project creation.

Project-to-certificate linkage. Pooled model. Partners see proportional contribution, not per-certificate mapping.

Project completion triggers. No automatic triggers. Recorded manually. Does not auto-retire certificates or trigger eligibility reassessment.

FAC governance. Coordinator acts as proxy. FAC decisions are made offline and documented in Oreka as the justification for project creation.

§ 3.8

Certificate retirement & disclosure

To allow Partners to use certificate holdings in their sustainability reporting, materialise the impact claim as a tangible deliverable, and prevent double-counting. Partners must not misrepresent certificates as physical traceability claims. The RMC model provides evidence of engagement, not proof of supply chain integrity.

Workflow

WF · Retirement & disclosure6 steps
  1. 01
    Partner
    Decides to use certificates for reporting. Navigates to the retirement workflow.
  2. 02
    Partner
    Initiates a Retirement Request: number of certificates, reporting period (e.g. FY2025), and rationale (e.g. CSRD non-financial statement, voluntary sustainability report, OECD Step 3 documentation).
  3. 03
    System
    Generates a draft Retirement Statement: certificate IDs and vintage years, mineral types and framework tags, originating mine sites (aggregated), projects funded from proceeds during the period with Partner's proportional contribution, and standard claim boundary language.
  4. 04
    Coordinator
    Reviews request and draft Statement. Verifies that the rationale is consistent with claim boundaries. Approves or returns with guidance.
  5. 05
    System
    On Coordinator confirmation, certificates transition Assigned → Retired (irreversible). Generates finalised Retirement Statement (PDF + CSV).
  6. 06
    Partner
    Receives the Retirement Statement. References it in sustainability disclosures, OECD due diligence documentation, or voluntary reporting.

The Retirement Statement

The tangible deliverable: the "proof of burn" that gives certificates their reporting utility. Without it, the Partner has a dashboard entry; with it, they have an auditable document. Contents: Partner name and reporting period; certificate count, ID range, and vintage year(s); mineral type(s) and framework tag(s); originating mine sites (aggregated, not per-certificate, to avoid supply chain discovery); projects funded from pooled proceeds with Partner's proportional contribution; standard claim boundary language; retirement date and Coordinator confirmation reference.

Claim boundaries

Partners may claim

Financial engagement with ASM communities through certificate purchases. Contribution to improvement projects funded from pooled proceeds. Alignment with responsible mining standards and reference frameworks.

Partners may not claim

Physical traceability between their products and the certified material. Offset or neutralisation of other supply chain risks. Exclusive attribution of project outcomes. Substitution for supply chain due diligence obligations.

LockedRetirement & disclosure

Retirement trigger. Partner-initiated, Coordinator-confirmed. The Partner controls timing; the Coordinator is a quality gate ensuring claim boundaries are respected.

Export formats. PDF and CSV at MVP. GRI/CSRD structuring is the buyer's responsibility.

Withdrawal before retirement. Not permitted after Coordinator confirmation. Retirement is final and irreversible.

Framework filtering at retirement. The Statement shows framework tags. Selective retirement by framework is not supported at MVP (all certificates fungible).

§ 3.9

Certificate status lifecycle

Certificates progress through three states. Each transition is irreversible, creating a one-way chain from creation to permanent retirement. The system enforces these transitions at the database level. No administrative override can reverse a state change.

StatusMeaningTransition rules
UnassignedIssued and held by Coordinator on behalf of the originating mine community. Available for assignment.Initial state. Created at issuance from eligible production. Cannot revert once assigned.
AssignedHeld by a specific Partner. Partner has full ownership and may reference it in reporting.Transitions to Retired on Partner-initiated retirement and Coordinator confirmation. Cannot revert to Unassigned.
RetiredIncluded in a Partner's disclosure and permanently removed from circulation.Final state. No further transitions. Full audit trail is immutable. Prevents double-counting across reporting periods.
Why three states, not four. Earlier drafts distinguished 'Issued' and 'Unassigned' as separate states. In practice, every newly issued certificate is immediately available for assignment: there is no review gate or hold period. Collapsing these into a single 'Unassigned' state eliminates ambiguity and simplifies reporting. If the consortium later requires a hold period after issuance, a fourth state can be reintroduced.
§ 4

Business rules

The integrity, pricing, and governance rules enforced by Oreka.

Issuance

  • No over-issuance. Total certificates issued from a mine site over a period cannot exceed eligible production for that period.
  • Eligible only. Only production recorded during active eligibility windows qualifies for issuance.
  • Manual issuance. Certificate issuance is a manual action, not automated. Preserves human oversight.
  • Framework tagging. Certificates are tagged with applicable framework(s) at issuance. Tags are immutable and travel with the certificate through assignment and retirement.

Integrity

  • State transitions are irreversible. Unassigned → Assigned → Retired cannot be undone.
  • Single Partner ownership. Each assigned certificate is owned by exactly one Partner. Fractional ownership is not supported.
  • No duplication. Each certificate has a unique system ID. Duplicate issuance or assignment is impossible.

Pricing & coverage

  • Fixed pricing. All certificates priced at USD 5,000 per unit at MVP. Price changes require consortium governance approval.
  • Coverage autonomy. Partners are not required to cover any percentage of their footprint. Footprint calculation is advisory.

Fund allocation

  • FAC governance. Allocation decisions made offline by FACs in consultation with mine communities. The Coordinator documents and enforces outcomes in Oreka.
  • Allocation tracking. Funds tracked per impact category. Projects assigned to categories; Partner contributions calculated per category.
§ 5

System access & administration

Operational workflows describe what Coordinators and Partners do with the scheme. This section describes the administrative surface beneath them.

The Admin Panel

A cross-cutting surface used by system administrators to manage accounts, users, and access. It operates independently of the business logic of either operational interface. No certificate is ever issued, assigned, or retired from the Admin Panel. Scope: create and manage Coordinator and Partner accounts; invite, activate, suspend, or deactivate users; assign roles; manage organisation settings; trigger password resets. Standard DAF account administration primitives, no bespoke administration model.

Account lifecycle

StatusMeaningTransitions
PendingAccount created and invited, awaiting confirmation or payment. No operational access.Moves to Active on confirmation. May be deleted if never activated.
ActiveOperational access granted. Users can sign in and perform role-scoped actions.May move to Suspended by an administrator.
SuspendedAccess revoked. Sign-in attempts fail. Data retained. Existing assigned certificates remain assigned.May be restored to Active, or terminated in exceptional cases.

User & role management

Each account contains one or more users, with a role assigned per user. The DAF role hierarchy applies (Administrator, Custodian, Editor, Viewer). Every account must have at least one Administrator. A user may belong to one account only at any one time. Cross-account access is handled by issuing separate user accounts, each scoped to one organisation.

Audit trail

Every state transition on an account, user, certificate, mine site, project, or transaction is recorded with timestamp, actor, and before / after values. The audit trail is immutable, queryable through the standard DAF Data Query interface. Certain transitions (certificate Unassigned → Assigned → Retired; framework State or Status changes; eligibility withdrawal) also surface as dedicated events on the relevant subject pages.

§ 6

Design status & roadmap

Coordinator interface

ModuleStatusPriority
DashboardDesignedMVP
Mine SitesPartialMVP
ProductionPartialMVP
Eligibility & IssuancePartialMVP
Projects ManagementStartedMVP
Partners ManagementStartedMVP
Certificates RegistryStartedMVP
TransactionsStartedMVP
ReportingNot startedPost-MVP

Partner interface

SurfaceStatusPriority
DashboardNot startedPost-MVP
My FootprintDesigned (v0.1.12)MVP
My CertificatesPartialMVP
My ImpactNot startedPost-MVP

The Partner Interface is at an earlier stage of design maturity than the Coordinator Interface. The My Footprint calculator is well developed. The My Certificates hub is partially built and needs the request and retirement flows wired in. Dashboard and My Impact will mature in subsequent iterations as the Coordinator workflows stabilise.

Deferred beyond MVP

  • Operator Interface. Self-reporting production by mine site operators.
  • FAC Monitor Interface. Direct FAC member access, voting, proposal submission.
  • Multiple Coordinators. Parallel scheme operators across regions or minerals.
  • Advanced Framework Integration. Full CRAFT, FCA, RMAP, LBMA workflow screens and automation.
  • Non-fungible certificate purchase. Selecting specific mine sites or framework certifications.
  • Automated issuance. Triggered automatically by production recording (MVP is manual).
  • Public Interface. Public-facing dashboard with contributor rankings and aggregated impact data.
  • Mineral-agnostic expansion. Beyond cobalt, copper, and gold.
§ 8

Glossary

ASMArtisanal & Small-Scale Mining
Mining operations conducted by individuals or small groups, often informal, labour-intensive, and with limited mechanisation.
Book-and-claim
An environmental accounting model that decouples sustainability attributes from physical commodity flows. Buyers purchase instruments representing impact separately from the actual supply chain.
Certificate
A fixed-price, integer-based instrument representing one production unit of ASM mineral output. Certificates are fungible, tradeable, and tagged with compliance frameworks and vintage year. Formally designated DASME.
Coordinator
The Impact Facility (TIF). The system operator responsible for mine site management, certificate issuance, transaction logging, Partner management, and project oversight.
Coverage
The ratio of certificates procured by a Partner to their calculated footprint. Tracked as a reference metric; not a mandated minimum at MVP.
DASMEDeliberate ASM Engagement
The formal designation of certificates issued under the RMC scheme. Used in Retirement Statements, registry exports, and scheme-level reporting.
Eligibility evaluation
Assessment of an ASM mine site against a defined compliance framework (Minimum Viability, CRAFT, FCA, RMAP, LBMA, TIF IMP) to determine if its production may back certificate issuance.
Expert evaluation
The assessment approach used in Oreka. A human-led assessment against framework criteria; the system applies a deterministic eligibility rule (typically AND-aggregation of confirmation and boolean fields) to derive Status.
FACFund Allocation Committee
A community-level governance body, one per mine site. A first-class Stakeholder subject in Oreka. Decides how certificate proceeds are allocated to improvement projects.
Footprint
An estimation of a Partner's annual ASM mineral exposure: estimated mineral content multiplied by ASM share of global production. Used to recommend certificate purchase quantity.
Framework
A set of criteria and standards used to assess ASM mine eligibility. Examples: Minimum Viability (MVP baseline), CRAFT Code, FCA Standard, RMAP, LBMA.
Fungible
Interchangeable without loss of value or meaning. At MVP, all unassigned certificates are fungible; Partners cannot request specific origins or frameworks.
Issuance
Creation of new certificates from eligible production. A manual action by the Coordinator, separate from production recording.
Mine site
A registered ASM mining operation, identified by name, GPS location, operator, and mineral types. A Location subject in DAF.
Minimum Viability Framework
MVP's baseline eligibility criteria, implemented as an Expert Evaluation framework: legitimacy of mining operation per CRAFT modules 1–2, absence of worst forms of child labour and forced labour per CRAFT module 3 and OECD Annex II, basic organisational governance.
Partner
A downstream company (for example, Fairphone, an electronics manufacturer, a materials processor) that purchases certificates and engages with ASM communities.
Production
Recorded mineral output from an ASM mine site, in decimal quantities. Production during an active eligibility window backs certificate issuance.
Retirement
Permanent removal of a certificate from circulation upon Partner disclosure. Irreversible. Creates a final audit record and produces a Retirement Statement.
RMCResponsible Minerals Credits
The governed scheme under which DASME certificates are issued. The name refers to the scheme, not the instrument.
Status lifecycle
Progression of a certificate through three states: Unassigned → Assigned → Retired. All transitions are irreversible and enforced at the database level.