Zero-Knowledge-Verified Provenance, Ownership and Access Control for Digital Twins Bound to Non-Fungible Tokens

A distributed system maintains verifiable provenance of a digital twin. Digital-twin data are serialized into salted leaf digests whose hash-tree root forms a state commitment, and a birth commitment binds the initial root to a twin secret. A non-fungible token stores the birth commitment immutably, the current state commitment, a transition-relation identifier and a registry of authorized keys. For an update, a prover generates a zero-knowledge argument that a new commitment results from applying the transition relation to committed data and to inputs signed by registered keys. The token contract replaces the stored commitment only if the argument verifies against the current commitment and a binding of token, version and epoch, and otherwise rejects the update. Ownership is proved by knowledge of the birth-commitment opening bound to the current holder. Training rounds are committed as lineage leaves; artifacts are encrypted under token-bound identity keys issued by threshold nodes.