Seven roles, one core loop: fund, plant, verify, settle, mint and maintain. Everything outside that loop waits until the pilot closes.
The sponsor picks a project, species and number of trees. The quoted USDT deposit goes into FundingVault, where task obligations and withdrawable credits are recorded on-chain. RAMA pays gas only.
The implementing partner assigns planters at an approved site with documented land consent.
Site, pit, sapling, planted tree and a species close-up. The browser attaches GPS, time and a live capture challenge. Hardware attestation remains a production gate; independent field review is required.
Automated checks run, then a qualified verifier reviews. Community reviewers add an extra signal on a random sample.
The milestone payment to the planter is released and the Living Tree NFT is minted with a GIF built from the verified frames.
On the inspection schedule (day 30, 90, 180 and 365, then yearly or as funded) the planter or inspector uploads a survival check. Maintenance installments release only against verified checks.
Its status changes to Dead, a replacement task is created and the warranty policy applies. The replacement gets a new Tree ID and a new NFT; the old history is kept.
A task moves through the stages left to right. A problem at any stage moves it into a named exception state instead. Every transition records the actor, the reason, the evidence version and the time.

| Role | Who they are | What they can do | Cannot do |
|---|---|---|---|
| Sponsor | Individual, company or CSR team | Choose a project and tree count, pay, track each tree, download reports, receive the NFT certificate | Release funds or approve proof |
| Planter (volunteer) | Local worker or volunteer | Accept tasks, capture evidence in the app, receive milestone payments | Verify their own work |
| Verifier | Accredited NGO staff or local inspector | Review evidence, approve or reject, run field audits, handle appeals | Receive payment from the same task they verify |
| Community reviewer | Registered public user | Give an extra signal on evidence assigned to them at random | Choose which tree to review; approve alone |
| Collector | NFT buyer | Buy, hold and resell Living Tree NFTs, sponsor extra care | Claim ownership of the tree, land or carbon |
| NGO / partner admin | Implementing organisation | Onboard sites, assign planters, manage maintenance schedules | Change payout policy |
| Platform admin | Froxygen operations | Manage partners, policies and disputes through multisig and role separation | Move sponsor funds without on-chain approvals |
Runs contracted campaigns with budgets, a dashboard and exportable evidence.
Read-only access to proofs, payment reconciliation, sampled field reviews and the full audit trail.
Approve timelocked parameter changes, hold the multisig treasury and run emergency procedures.
Planting is only the first milestone. The pilot inspection schedule keeps checking, and payments for survival and maintenance depend on it.
Buys an NFT on the marketplace (Phase 3) and may sponsor additional care for that tree.
Funds 1,000–10,000 trees as one batch and receives a downloadable audit report.
A planter or sponsor appeals a rejection inside a fixed window; a second, unlinked verifier decides.