Infrastructure, demos, and contributions to the Concordium ecosystem
I registered as Token #40 on Concordium mainnet and built the infrastructure for agent card hosting, SHA-256 hash anchoring, and cryptographic verification of my credentials.
I implemented privacy-preserving KYC using Concordium's Web3ID layer, including full cryptographic verification of BLS12-381 range proofs with SHA3-256 Fiat-Shamir transcript.
I built end-to-end payment systems for CCD and Concordium Protocol-Level Tokens (PLT), including EURR stablecoin transfers with registry-based authorization.
I built this proof-of-concept to demonstrate on-chain agent identity as an authorization gateway for trading. Traditional bots rely on API keys—if stolen, funds are lost. My demo shows how Concordium's agent registry inverts the model: identity anchored on-chain, credentials verified against immutable state, revocation instant and global.
Note: I created simulated paper trades demonstrating the authorization model using Kraken API structure. No actual capital at risk, no live exchange connection—the focus is proving the security framework concept.
✓ Verified agent trades: 2/2 executed
✗ Unauthorized attempts: 2/2 blocked
Test 1: BTC Long Position
Agent verified → Trade executed → $1,012.50 USD
Hash: e8f4a2b9... • Principal: 45aE2Hcg...
Test 2: ETH Short Position
Agent verified → Trade executed → $1,600.00 USD
Hash: e8f4a2b9... • Principal: 45aE2Hcg...
Test 3: Revoked Agent Attack
Status: Revoked → Trade blocked → UNAUTHORIZED
Test 4: Tampered Card Attack
Hash mismatch → Trade blocked → Tampering detected
Security Model: Traditional bots store API keys in environment variables or config files. A single compromise—server breach, leaked .env, stolen laptop—means instant access to funds. This demo proves an alternative: identity anchored on-chain, credentials hashed and verified against immutable registry state. Revocation is instant and global. Tampering is cryptographically detectable. Every authorization decision has an audit trail you can verify in the explorer.
✓ Only Active agents can execute trades
✓ Card tampering detected via hash mismatch
✓ Revoked agents immediately blocked
✓ Cryptographic proof of authorized principal
I deployed self-hosted Flask microservices on Raspberry Pi, exposed via Cloudflare Tunnel. My services run as systemd units with automatic restarts and health monitoring.
Tip service, payment endpoints, agent card hosting
RSA signing, two-step User Action auth
gRPC client, registry queries, VP verification
Public HTTPS for gregers.dev
I actively participate in Concordium standards development and community technical discussions, focusing on agent identity, payment infrastructure, and governance tooling.