Milestone 2 Delivered: Verifiable Land Rights with Veridian and Cardano
We’ve reached an important checkpoint in our Project Catalyst Fund 12 work: Milestone 2 of “Implementing the Cardano Foundation Identity Wallet in Landano” is complete and signed off. Every test case passes, every critical bug we found has been resolved, and the prototype is ready for demonstration. This post is a short tour of what Milestone 2 actually proves, why it matters for property rights on Cardano, and where to dig deeper. What we set out to demonstrate Land rights only work if people can prove three things, reliably and without a central gatekeeper: Milestone 2 is a working prototype that performs all three checks end-to-end, using the Veridian identity wallet (Cardano Foundation), KERI/ACDC credentials, and Cardano-native NFTs. A quick look at the prototype The screenshot below is from our Milestone 2 demo video. On the right, the Landano application running in Mendix shows a Chief’s dashboard: their AID prefix, alias, LEI, and OOBI. On the left, a phone running Veridian shows the incoming signing request that the Chief approves to issue a credential to a Representative. If you’d rather watch it run, the full walkthrough is here: The Mendix application can be found on our public Github repository: https://github.com/landano/mendix-veridian-prototype The three use cases we delivered 1. Verifying Landano user identity A traditional Chief, acting as a self-sovereign root of trust, issues an ACDC credential to a community Representative through Veridian. The credential carries an LEI sourced from the Chief’s wallet contact, follows the IPEX Apply / Grant flow, and lands in the Representative’s wallet with status Issued. Failures (for example, a contact without an AID) are caught and surfaced cleanly. 2. Verifying ownership of a Landano NFT A Land Owner mints a Cardano NFT that represents their parcel. The mint is signed twice: once with their KERI AID in Veridian and once with their Cardano wallet through CIP-30. Both signatures, plus the binding payload and the KERI challenge SAID, are written into the NFT’s onchain_metadata. A Verifier can then confirm three things in one flow: the NFT is still held by the original wallet, the KERI challenge is fresh and approved, and the Cardano signature is valid against the expected payload. 3. Verifying that a wallet balance belongs to the identity holder Same dual-signature pattern, applied to wallet binding instead of an asset. A Verifier can confirm that a specific Cardano address — and the ADA balance returned by Blockfrost — really belongs to the person behind a given KERI identity. Test results Test cases executed 15 Pass rate 100% Issues found and resolved 9 Critical bugs fixed 1 (CIP-30 payload validation) Test environment Mendix Studio Pro 11.6.2 · Cardano preprod · KERIA (Cardano Foundation testnet) · Veridian wallet (customisation on top of 1.2.0) Test date 22 April 2026 The full test report and the 15 individual test cases are attached below. What we fixed along the way The most important fix was a CIP-30 verification bug where a valid signature on the wrong payload would have been accepted. We now extract the payload from the COSE_Sign1 structure and compare it to the expected value before trusting the signature. We also corrected hex/bech32 handling in the Cardano integration, replaced a flawed Blockfrost import mapping with a direct OkHttp + Jackson call to handle 64-character chunked metadata, and tightened the domain model so that issuer and receiver associations on credentials are explicit rather than inferred. These look like small things written down. They’re the kind of small things that decide whether a verification system can actually be trusted. What’s intentionally still open A few items are out of scope for this prototype and earmarked for follow-up work: The Veridian wallet used in testing is a Landano build on top of version 1.2.0; behaviour may differ from the production Cardano Foundation Identity Wallet release. Why this matters Property rights only become real when they survive scrutiny. A title that can’t be checked is a title that can be disputed. By combining KERI-based identity, ACDC credentials, and Cardano’s settlement layer, we get a way to verify identity, ownership, and control without relying on a single authority — and without exposing more personal data than the verification actually needs. Milestone 2 is the smallest end-to-end version of that idea that we can ship. We’re now turning toward presentation flows, transfer mechanics, and the next round of field validation. Resources