cover.unykorn.ai · program
UnyKorn Cover compiles an in-force life policy into a funds-advance file. Ambiguous clauses stay locked. The agents you own prepare the work. Licensed counterparties release the money.
UnyKorn LLC licenses software and administration workflow. It is not an insurance company, life-settlement provider, viatical settlement provider, insurance producer, broker-dealer, lender, bank, custodian, transfer agent, or investment adviser. It does not underwrite risk, hold policies, hold PHI in the clear, or advance funds.
Walkthrough · for the room
This is the operating room for life-policy liquidity. Software and records. Licensed counterparties still fund.
01
Claim the vault
Six agents issue into your namespace. Keys stay with you.
02
Run Ingest
The instrument packet hashes. Carrier in-force stays a counterparty fact.
03
Human gate HIPAA
Authorization names parties, purpose, window. Agents cannot sign it.
04
Claim a verified offer
Attestation applies only where deps are ready. Dual-control will not close here.
Illustrative file · not an offer · not a real insured
Illustrative Life of Iowa · Indexed universal life
did:unykorn:cover:demo:pol-illus-2014-0881
$2,500,000
COV-01
Ingest
Bind the instrument, illustration, beneficiaries, and in-force status into one file.
Carrier in-force confirmation is a counterparty fact, not a PDF.
COV-02
Qualify
Admit only policies whose origination and privacy file can be reconstructed.
HIPAA, STOLI, insurable interest, and domicile waiting period. Named operator.
COV-03
Value
Record cash value, loans, and LE. We are not the appraiser.
CSV and life expectancy come from named, licensed sources.
COV-04
Structure
Enumerate loan, premium finance, life settlement, or SPV interest — then lock the rest.
Path is chosen. Unresolved predicates refuse the path.
COV-05
Advance
A licensed lender or provider funds. We receipt the instruction.
Dual-control. The engine cannot release funds.
COV-06
Administer
Keep the file current so a benefit does not become unclaimed property.
Premiums, beneficiaries, death claim, unclaimed-benefit contacts.
Predicate compiler
Cover-core compiles the instrument into a directed graph. Contestability, HIPAA, STOLI, domicile waiting period, CSV, and license sit as nodes. A path that still has an open node does not advance. That is the product — not a chatbot over a PDF.
Ambiguity elimination · 0/20 resolved
18 blocking settlement
Owned agent cluster
Six A2A agents issue into your vault. Identities, memory, and the conversation log bind to your namespace. UnyKorn never holds the keys. Agents prepare. They do not approve, sign, or release funds.
Vault unclaimed · agents are not issued
COV-01
Assemble the instrument packet and request carrier in-force confirmation.
May: Hash documents, detect missing riders, draft the in-force request.
May not: Treat a scan as carrier verification.
COV-02
Build the origination, domicile, and privacy case. Surface STOLI and contestability.
May: Compare issue date to model-act waiting periods. Flag incomplete origination.
May not: Clear STOLI or sign a HIPAA authorization.
COV-03
Queue CSV and LE requests to named counterparties.
May: Prepare the underwriting packet once HIPAA is on file.
May not: Produce a life expectancy or appraise the policy.
COV-04
Enumerate legal liquidity paths against the resolved graph.
May: Show which predicates block each path. Draft the path memorandum.
May not: Select a path or bind a counterparty.
COV-05
Assemble the funds-instruction file for dual-control review.
May: Match offer, license, and wiring coordinates. Queue the release pack.
May not: Approve, sign, or move funds.
COV-06
Keep premiums, beneficiaries, and death-claim contacts current.
May: Detect grace-period risk and draft beneficiary notices.
May not: Change a beneficiary or file a death claim.
cover-a2a/1 · A2A 1.0
A2A moves tasks. Cover decides who may speak, what they may say, and what never leaves the vault. A2A v1.0 advertises authentication. It does not enforce authorization, card authenticity, or payload hygiene. Those are implementer work. This desk is that work.
Probe log
0 admitted · 0 refused
unsigned
A2A supports signed cards. It does not require them. An unsigned card is treated as untrusted input, not a peer.
Refuse. Only vault-signed cards enter the session.
poison
Description and skills fields are consumed by language models. Trustwave showed a card can steer task routing with injected prose.
Scan markers. Capability claims are checked against the vault registry, not the card text.
shadow
A lookalike DID or name is cheap. Without a registry, clients cannot tell the copy from the original.
DID must be issued under the claimed vault. Typosquat fails the prefix check.
smuggle
Unit 42: a peer changes identity or injects covert turns inside a stateful session. TLS does not see it.
Session is bound to one peer DID. Mid-session DID change terminates the session.
deputy
AP2 mandates sign whatever the agent decides. If the agent is steered, crypto blesses the wrong act.
Approve, sign, and release are not valid A2A types. Dual-control stays a human gate.
phi
A2A has no protocol-level consent for sharing sensitive data between agents.
Plaintext PHI is a forbidden type. Only a Merkle commitment may travel.
replay
Stolen task messages can be resent. A2A does not require nonces.
Every admitted message carries a nonce. Duplicates are dropped.
depth
Unbounded A→B→C handoff is privilege escalation and a cost loop.
Max depth is two. Child scope must be a subset of the parent mandate.
Signed agent card · COV-01
did:unykorn:cover:vault:demo:agent:ingest
Assemble the instrument packet and request carrier in-force confirmation. Mandate is typed. Treat a scan as carrier verification.
May: Hash documents, detect missing riders, draft the in-force request.
May not: Treat a scan as carrier verification.
Forbidden types
Policy to funds
Instant funds means a qualified advance from a licensed counterparty against a verified in-force policy — not a minted insurance token. The engine enumerates the path. It refuses the rest.
Carrier of record
Borrow against cash surrender value. Owner and beneficiary stay in place.
State-licensed lender
A licensed lender pays premiums against a collateral assignment.
State-licensed life-settlement provider
Licensed provider purchases the policy for more than CSV, less than the net death benefit.
Licensed provider + SPE counsel
Policy sits in a related-provider trust. The token is an interest in the SPE, not the policy.
Never: insurance company or producer.
Never: life-settlement or viatical provider.
Never: lender or policy-loan desk.
Never: custodian of keys, policies, or phi in the clear.
Never: tokenization of the insurance contract itself.
Verified counterparties
Counterparties list a license, a BAA, and the predicates they can attest. Claiming an offer records attestation. It does not bind a contract or move funds. Figures on this desk are illustrative.
Active path · Life settlement
18 predicates still block this path.
Carrier desk
VerifiedOwner remains owner. Advance is capped at confirmed cash surrender value, less any existing loan.
Carrier of record
Licensed lender
VerifiedLender pays premiums. Collateral assignment recorded with the carrier. License checked against domicile.
State-licensed lender · illustrative
Life settlement
VerifiedBid above CSV, below net death benefit. Provider licensed in the insured's domicile. HIPAA packet required.
State-licensed provider · illustrative
SPE interest
In reviewPolicy assigned into a related-provider trust. Tokens, if any, are SPE interests — not insurance.
Licensed provider + SPE counsel · illustrative
Private placement
In reviewIn-kind contribution into a carrier-appointed qualified custodian sub-account. Title passes to the carrier.
Carrier + qualified custodian · illustrative
Administration
VerifiedKeep beneficiary contacts current so a death benefit does not become unclaimed property.
Carrier of record + administrator
Get verified
Providers, lenders, and producers submit license evidence. A named operator reviews. Listing is not an endorsement and not a placement.
Namespace · vault · HIPAA
The namespace is the identity. The vault holds keys, agent memory, and the encrypted object store. The public chain holds a Merkle commitment. Medical records do not.
A HIPAA form names parties, purpose, and window. No authorization, no medical underwriting packet.
The vault releases only the fields the named counterparty is entitled to see for the stated purpose.
Any party that handles PHI on this stack does so under a business-associate agreement. We record it. Counsel still drafts it.
The chain holds a Merkle commitment and a receipt. The PHI stays in the encrypted vault. A hash is not a medical record.
Rust engine · claim families
Cover-core is specified as a Rust crate family. This desk runs the same lock semantics. Claim families below are architecture under review — not granted patents, and not a product claim that we are the carrier.
cover-core
Predicate compiler. Directed graph. Unresolved nodes emit a hard lock.
cover-namespace
did:unykorn:cover:{tenant}:{policy}. Collision-free. Transfer with a human gate.
cover-vault
User-held keys. Agent identities and memory live in the vault, not in our SaaS tenancy.
cover-phi
HIPAA minimum-necessary object store. Merkle commitment on-chain. PHI never on-chain.
cover-a2a
A2A profile: signed cards, poison scan, session-bound DID, forbidden types, PHI never on the wire.
cover-gate
Human and counterparty locks. Dual-control on funds instruction.
cover-path
Enumerates loan, finance, settlement, SPV. Refuses a path whose predicates are open.
Claim family AEL
A method for compiling insurance-contract language into a directed predicate graph wherein each node is a resolvable assertion and any unresolved node emits a hard lock that prevents bind, claim, or funds-advance until a named human and, where required, a licensed counterparty record a resolution receipt.
Claim family OAT
A system for issuing a persistent multi-agent team into a user-controlled cryptographic vault, wherein identities, memory, and A2A logs are bound to a hierarchical namespace DID, keys are never held by the platform, and each agent carries a typed mandate that enumerates actions it may prepare and actions it is prevented from executing.
Claim family PHI
A privacy architecture in which protected health information is stored in an encrypted object vault under HIPAA minimum-necessary rules, and only a Merkle commitment — not the PHI — is written to a public ledger, with selective disclosure via hash-locked attestations to named BAA counterparties.
Claim family PTF
A method that, given a verified in-force life policy and a resolved predicate graph, enumerates legally distinct liquidity paths and refuses any path whose predicates remain unresolved or whose counterparty is not license-verified in the insured's domicile state.
Claim family A2S
A profile on Agent2Agent in which every peer presents a vault-signed agent card, description and skills are scanned as untrusted input, sessions are bound to a single DID, approve/sign/release are not valid message types, plaintext PHI is refused, and delegation depth is capped. A2A transports the task. Authorization stays in Cover.
Cite this
The provenance standard proves origin of the file. It does not turn a life policy into a token, and it does not move a death benefit. Use this citation in a grant or examiner pack.
Burns, K. (2026). Deterministic Literary Publishing: A Multi-Layer Provenance Model for Verifiable Manuscripts. Zenodo. https://doi.org/10.5281/zenodo.18646886. Also SSRN 10.2139/ssrn.6241279. ORCID 0009-0008-8425-939X.
Rails
UnyKorn LLC is a technology and administration service provider. It is not a bank, broker-dealer, exchange, custodian, trustee, transfer agent, appraiser, auditor, investment adviser, money transmitter, or issuer. It issues no tokens and never holds client funds. UnyKorn LLC licenses software and administration workflow. It is not an insurance company, life-settlement provider, viatical settlement provider, insurance producer, broker-dealer, lender, bank, custodian, transfer agent, or investment adviser. It does not underwrite risk, hold policies, hold PHI in the clear, or advance funds. Studio stills are atmospheric. They are not photographs of a real insured, a real vault we operate, or a custody claim.
