Architecture

The Vault Registrar Sandbox lets a DeFi protocol register compliance-aware vaults on behalf of DS Protocol investors. The investor signs off-chain, an operator broadcasts the registration, and the VaultRegistrar contract enforces identity and permission checks before binding the vault.

System overview

At a glance:

How it works

1. Off-chain authorization — the investor signs an EIP-712 RegisterVault payload in their wallet. No on-chain transaction happens at this step. The signature pins the vault address, the authorized operator, and a deadline.
2. On-chain submission — a Securitize-managed operator broadcasts registerVault(vault, investor, deadline, signature) to the VaultRegistrar contract on Sepolia.
3. Protocol validation — VaultRegistrar verifies the EIP-712 signature, checks the investor in DS Registry, and confirms the operator role in DS Trust.
4. Binding — once validated, VaultRegistrar binds the vault to the investor. From that point the DeFi protocol can operate the vault on the investor's behalf under the DS Protocol compliance rules.

Investor-initiated operations such as ERC-20 approve and invalidateOperatorPermission are signed and submitted directly from the wallet against the contracts.

Contracts

Contract	Purpose
VaultRegistrar	Registers vaults for investors with EIP-712 signature verification
DSToken	ERC-20 security token used by the DS Protocol
Faucet	Mints testnet DS Tokens to requesting wallets

Supported networks

Network	Chain ID	Block Explorer
Ethereum Sepolia	11155111	sepolia.etherscan.io

Key technologies

Layer	Technology
Web app	React + TypeScript
Wallet & chain	Wagmi + Viem
Smart contracts	Solidity, UUPS upgradeable