Index Asset Token & Smart Contract
Shariah-Compliant Utility Token Ecosystem
Executive Summary
This document describes the perpetual Index Asset Token (IAT) eco-system, a regulator-centric and Shariah-compliant utility token structure designed for perpetual operation without interest, leverage, or peer-to-peer trading. Each IAT represents a proportional ownership share (hissah) in an identifiable pool of real-world assets — including the HAL AI Service, its associated intellectual property, revenue streams, and linked media and collectible assets — structured as a digital title deed (sakk milkiyyah) under Shariah principles. The IAT framework separates governance, economic execution, and liability tracking across clearly defined actors and contracts. All obligations are transparent, auditable, and deterministically enforced through smart contracts and bearer contracts.
Glossary of Terms
This section provides standardized definitions for all technical, legal, Shariah, and operational terms used in the IAT eco-system. The glossary ensures consistent interpretation by regulators, auditors, developers, and Shariah scholars across the entire document.
Introduction: IAT Token and Contract Framework
The Index Asset Token (IAT) is a perpetual, per-unit utility token representing proportional ownership in an identifiable pool of real-world assets. Each IAT constitutes a digital title deed (sakk milkiyyah) granting the holder genuine, enforceable economic rights in the HAL AI Service, associated media and collectible assets, and linked revenue streams for a specific market. The IAT framework is Shariah-compliant by design, operating without debt, interest, leverage, or derivative obligations. Each IAT represents a single, indivisible contractual unit whose lifecycle is governed by a combination of a smart contract (governance layer) and a bearer contract (economic execution layer).
The IAT ecosystem is structured to clearly separate definition, ownership, governance, economic execution, and liability management. IATs are created through a one-time batch mining process with a fixed and immutable supply. Following issuance by the Issuer, IATs are subscribed by Subscribers. Liquidity Providers (LPs) then acquire IATs from Subscribers, after which the tokens are enabled for trading in the secondary market with customers. All economic interactions in the secondary market occur exclusively between customers and contracted Liquidity Providers. Customers do not trade with one another and do not negotiate prices.
The smart contract functions as a non-custodial control layer. It defines token identity, market linkage, pricing boundaries, participation status, and fee parameters. It records all lifecycle events in an immutable and auditable manner and maintains the running liability of each LP. The smart contract does not hold funds or execute trades.
The bearer contract functions as the economic execution layer. It records ownership of each IAT unit, executes subscriber to LP, LP-to-customer and customer-to-LP transfers, recording IAT pricing, and deterministically updates the LP’s running liability. All financial exposure changes occur at this layer, strictly in accordance with predefined rules.
Economic continuity is maintained through recurring market settlement events. At market settlement, the Liquidity Provider undertakes on a best-effort basis (wa’d) to publish executable settlement prices — derived from the Net Asset Value (NAV) of the underlying Asset Pool — for all outstanding IAT units and to facilitate executions at those prices, in accordance with the settlement methodology. Settlement occurs through price execution based on asset valuation rather than index-dictated redemption. No fixed, minimum, or capital-protected settlement value is promised or implied. At the same time the issuer is responsible for all payments dues associated with the attached Asset Pool.
For the avoidance of doubt, IAT settlement does not constitute a guarantee of capital, principal protection, par redemption, or repayment of subscription price. All settlement values are derived from Asset Pool NAV and may be higher or lower than the original acquisition price.
Liquidity Providers operate subject to predefined prudential constraints including minimum capital adequacy requirements. The smart contract continuously tracks LP Running Liability and compares it against predefined exposure thresholds and capital adequacy ratios. If LP Running Liability breaches configured limits, the system automatically restricts new customer purchases while the LP continues to offer sell-back on a best-effort basis at published NAV-referenced prices, ensuring orderly risk reduction rather than sudden illiquidity. Supervisory intervention is limited to trading pause mechanisms and does not alter ownership rights, settlement mechanics, or token supply.
HAL AI Service
HAL AI is a proprietary artificial intelligence engine designed to analyse asset indices and market data. It operates as an off-chain, real-world service and is proportionally owned by IAT holders through the Asset Pool structure.
Within the IAT ecosystem, HAL AI serves as the primary real-world asset to which Index Asset Tokens are linked. Each IAT represents a proportional ownership share (hissah) in the HAL AI Service — including its intellectual property, analytical capabilities, and revenue-generating capacity — for a specific market. This ownership stake constitutes genuine mal mutaqawwam (tradable property with usufruct) rather than a nominal or non-exclusive entitlement.
HAL AI access is market-specific: each market’s IAT grants the holder access to HAL AI analytical services tailored to that market’s asset class, ensuring differentiation and distinct utility across the token ecosystem.
Each IAT carries enforceable economic rights linked to the HAL AI Service, exercisable within the platform. These rights include:
Proportional ownership of HAL AI intellectual property and service infrastructure for the relevant market
A defined claim on HAL AI–generated revenue streams including licensing fees, service charges, and performance-based income, distributed proportionally to token holders
Access to market-specific HAL AI analytical outputs, index calculations, and performance metrics
Participation in value outcomes derived from linked media and collectible assets (photos, videos, digital collectibles) associated with the market
Through this structure, HAL AI and associated assets are genuinely owned by IAT holders in a controlled, auditable, and Shariah-compliant manner, enabling real-world value participation grounded in actual asset ownership rather than synthetic index exposure.
Asset Pool Composition and Governance
Each IAT is linked to a defined Asset Pool comprising multiple layers of real-world assets. The Asset Pool is market-specific and its composition is transparently disclosed and auditable.
Layer 1 — HAL AI Service (Primary Asset)
The HAL AI engine and its associated intellectual property, analytical capabilities, and revenue streams for the relevant market. Token holders have proportional ownership of HAL AI’s market-specific operations and a defined claim on revenue generated through licensing fees, service charges, and performance-based income.
Layer 2 — Media and Collectible Assets
Photos, videos, digital collectibles, and other media assets associated with the market. These assets have intrinsic value and generate revenue independent of index movement through licensing, advertising, and distribution channels.
Layer 3 — Additional Contracted Assets
Any additional tangible or intangible assets contractually assigned to the Asset Pool by the Issuer, subject to Shariah board approval.
NAV Calculation
The Net Asset Value (NAV) of the Asset Pool is calculated based on the aggregate fair market value of all assets in the pool. The index serves as a valuation benchmark (mi’yar) reflecting the NAV, but does not dictate or determine token price independently of asset performance. NAV is calculated as:
NAV per IAT = (Total Asset Pool Value) / (Total IAT Supply)Revenue Distribution
Revenue generated by the Asset Pool is distributed proportionally to IAT holders through the Bearer Contract. The distribution follows the compliant formula:
Return = Initial_Capital + (Asset_Performance_Yield − Service_Fees)This replaces any index-delta-based return calculation, ensuring that returns derive from genuine economic activity rather than index movement.
System Actors, Roles, and Governance Boundaries
This section defines all system participants and clearly delineates their roles, permissions, and prohibitions. Each actor operates within strict governance boundaries to prevent conflicts of interest, market manipulation, or Shariah-non-compliant behaviour.
Token Mining and Supply Governance (Perpetual Model)
This section explains how IAT supply is created and governed under a fixed, one-time batch mining model. Token supply is immutable, non-fractional, and perpetual, with no burn or re-issuance mechanisms. Mining itself has no economic effect and does not create liability; all exposure arises only from LP subscription and customer trade.
Supply Governance Matrix
Token
Index Asset Token (IAT)Each IAT is a perpetual utility token representing proportional ownership in the Asset Pool — comprising HAL AI Service rights, media/collectible assets, and associated revenue streams — for a specific market. Each token carries genuine, enforceable economic rights qualifying as mal mutaqawwam.
Token characteristics immutable post-definition
Prevents misclassification as security, deposit, or derivative. Structured under Haqq Mali principles.
Mining Method
One-time batch mintingAll IAT units are created in a single, discrete issuance event
Minting function disabled permanently after execution
Enables fixed-supply disclosure and audit certainty
Total Supply
Fixed and immutableExample: 1,000,000 IAT units minted at inception
No additional minting or dilution permitted
Allows maximum exposure modeling and stress testing
Perpetual Nature
No expiry or maturityTokens remain valid indefinitely unless voluntarily sold by holder
No expiry or maturity logic tied to time
Avoids maturity cliffs and forced liquidation risk
Divisibility
Non-fractionalIAT units cannot be split or partially transferred
Enforced at bearer contract level
Simplifies custody, audit, and ownership tracking
Initial Ownership
Issuer → SubscriberIssuer mints tokens and transfers them to Subscriber via subscription
Subscription recorded and auditable
Establishes clean chain of custody
Post-Mining Supply Control
DisabledNo mint, burn, or clawback allowed
Supply parameters locked in smart contract
Prevents arbitrary issuer intervention
Burning Policy
Not permittedTokens are never destroyed as part of lifecycle
Burn functions explicitly absent
Ensures perpetual continuity
Supply Visibility
Fully transparentTotal supply and unit identifiers publicly observable
On-chain events and logs
Enables regulator and auditor verification
Economic Neutrality of Mining
No value creationMining itself creates no profit, yield, or entitlement
No pricing applied at mint stage
Confirms mining is not an investment event
Link to Liability
Indirect onlyMining does not create LP Running Liability
Liability arises only upon subscription or customer trades
Separates issuance from risk exposure
Audit Artifacts
MandatoryMint event logs, supply manifest, ownership snapshot
Retained for life of system
Meets regulatory record-keeping standards
Smart Contract Governance Layer (Perpetual IAT)
This section outlines the smart contract's role as a governance and coordination layer rather than an economic execution engine. The smart contract defines lifecycle states, enforces permissions, links to the bearer contract, and records audit events. It does not custody funds, execute trades, or settle obligations.
IAT Definition
Issuer
Define IAT for asset (e.g., Arsenal EPL Index), issuer policies, LP policies, min/max price, shariah annotations, asset pool composition
defineIAT(IATTokenID, IssuerID, AssetPoolID, AssetIdentifiers[], MinPrice, MaxPrice, ShariahAnnotations, HALAIServiceRights, MediaAssetRights, MarketID)
IATDefined
Issuer
N/A
Token parameters set before deployment; asset pool composition registered
0
IAT Token Mining (Batch Mint)
Issuer
Batch mint N IAT units (e.g., 100,000) to Issuer treasury wallet; Assign IATTokenID range/serials; Hash and publish mint manifest for audit; Assign minimal value
mintBatchIATUnits(...) assign(nominalvalue)
IATUnitsMinted
Issuer
N/A
Creates per-unit tokens before market activation; no trading; regulator/audit trace starts here
0
IAT Deployment
Issuer/LP
Deploy smart contract per IAT token; Link to designated bearer contract; Mint 1 IAT to Issuer; Set subscription prices anchored to NAV price
deployIAT(IATTokenID, MarketID, IssuerID, LPID, BearerContractID, SubscriptionPrice)
IATDeployed
Issuer
Points to designated bearer contract
Subscription prices fixed; IATs ready for subscription
0
IAT Subscription
Issuer & Subscriber
Subscriber pays issuance fee to subscribe IAT
subscribe(IATTokenID, MarketID, IssuerID, SubscriberID, IssuanceFee, SmartContractReference)
IATSubscribedToSubscriber
Subscriber
Already linked
Subscriber becomes owner; spot subscription
0
LP IAT Acquisition
Subscriber & LP
LP Buy all subscribed IAT units from the subscriber at the subscription price
acquireLP(IATTokenID, MarketID, IssuerID, SubscriberID, SubscriptionPrice, SmartContractReference)
IATAcquiredBYLP
LP
Already linked
LP become the owner
+(AcquiredUnits × SubscriptionPrice) → initial liability baseline
Secondary Market Ready
LP
LP Offer Buy/Sell Price; Enable IATs for trade; Enforce LP policies (min/max resale)
tradeEnableIAT(IATTokenID, LPID, SmartContractReference)
IATSecondaryReady
LP
Already linked
Token ready for customer buy
Same as liability at LP IAT Acquisition
Customer Ownership Validation
Smart Contract
Validate LP → Customer transfer rules via bearer contract
validateOwnership(IATTokenID, LPID, CustomerID, SmartContractReference)
OwnershipRulesApplied
LP / Customer via bearer contract
Already linked
Smart contract enforces rules; token movement handled by bearer contract
Repriced with LPBuyPrice/LPSellPrice rules; liability = subscribedCustomerUnits × LPBuyPrice
MarketEnd — Non-Participating
LP
Mark IAT as non-participating
markNonParticipating(IATTokenID, MarketID, LPID)
IATNon-Participating
LP
Already linked
IAT Tokens cannot be sold until the next market opening
Non-Participating; liability remains subscribedCustomerUnits × last-valid LPBuyPrice
Market Settlement
LP/Issuer
Record final settlement price derived from Asset Pool NAV; LP facilitates settlement of customer-held IATs at NAV-derived prices (wa’d); Issuer settle all IATs from LP at minimal value; Settle smart contract; Asset Pool rights revert to Issuer for reallocation
settleMarket(IATTokenID, MarketID, LPID, FinalSettlementPrice)
MarketSettled
LP
Already linked
Immutable final settlement; token lifecycle completed
Set to subscribedCustomerUnits × FinalSettlementPrice; then → 0 on buyback completion
Next Market Re-Enablement
Subscriber & Issuer
Deploy new IAT contract for next Market; Assign Asset Pool rights; Assign new market; Require eg:5% Issuer Ujrah to enable trading
reEnableNextMarket(IATTokenID, NewMarketID, SmartContractReference, BearerContractID) mintBatchIATUnits(...)
MarketReenabled
Subscriber
Already linked
Old MarketIAT remain non-participating
0 for prior market; new market liability starts at new subscription
Smart Contract Structure
The Smart Contract structure defines the governance, lifecycle, and control parameters of each IAT unit. It establishes token identity, market linkage, pricing boundaries, fee parameters, and participation status, while linking each IAT to its corresponding bearer contract. The smart contract does not custody funds or execute trades; its purpose is to enforce rules, record state transitions, and provide an immutable audit trail across markets.
IATTokenIDstringUnique token/unit ID
Identifies each IAT unit individually
AssetIDstringUnderlying asset (e.g., Arsenal EPL Index)
Links token to the asset
AssetPoolIDstringReference to the identifiable Asset Pool
Links IAT to specific real-world assets
AssetIdentifiersstring[]Array of specific asset IDs in the Asset Pool
Enables hawalah (transfer of rights) for identified subject matter
MarketIDstringMarket identifier
Each market has a unique ID
IssuerIDstringIssuer unique ID
Owner/creator of token
SubscriberIDstringSubscriber unique ID
First subscriber of IAT
LPIDstringLP ID
IAT owner and counterparty of customer in secondary market
BearerContractIDstringReference to associated bearer contract
Used for secondary market and AI service linkage
Minimal Valueuint256Initial minimal value of IAT
The initial value set for IAT, linked to Asset Pool NAV
SubscriptionPriceuint256Price LP pays for IAT units
Fixed at deployment
LPRunningLiabilityuint256Tracks LP’s aggregate repurchase obligation for outstanding customer-held IAT units
Updated on customer buy/sell-back and market settlement; audit-ready liability trail
MinPriceuint256Minimum allowed price
Enforces price boundaries
MaxPriceuint256Maximum allowed price
Enforces price boundaries
IssuanceFeeuint8Issuer fee
Shariah-compliant fee for issuance
ParticipatingboolToken can be traded
True = active/participating; False = non-participating
ResaleEnabledboolSecondary market allowed
True = LP → Customer allowed
ribaFreeboolShariah Annotation
Shariah-compliant
ghararControlledboolShariah Annotation
Shariah-compliant
maysirBlockedboolShariah Annotation
Shariah-compliant
spotOnlyboolShariah Annotation
Shariah-compliant
assetBackedboolShariah Annotation
Confirms token is backed by genuine proportional ownership in an identifiable Asset Pool
HALAIServiceRightsstringReference to HAL AI service proportionally owned by IAT holders
The primary real-world asset in the Asset Pool, with market-specific access rights
MediaAssetRightsstringReference to linked media/collectible assets
Additional tangible asset layer
SubscriptionDateuint256Subscription timestamp
Subscriber subscribe IAT
SecondaryMarketDateuint256LP assignment timestamp
When LP started trading IAT
ContractStartDateuint256Deployment timestamp
Start of token lifecycle
ContractEndDateuint256End of market
Token lifecycle end
MarketSettleDateuint256Date LP settled all customer held IATs
Used in final settlement
FinalSettlementPriceuint256Final settlement price at market settlement derived from Asset Pool NAV
Used in final settlement
Bearer Contract Economic Execution Layer
This section describes the bearer contract as the layer where economic ownership transfers occur. All Issuer-to-Subscriber, Subscriber-to-LP, LP-to-customer and customer-to-LP transactions are executed here, and LP running liability is updated deterministically. The bearer contract monitors pricing rules, market participation status, and Asset Pool linkage without discretionary behaviour.
Bearer Contract Initiate
Initiate
N/A
0 (bearer contract not active yet)
Bearer contract begins tracking LP secondary market activation
0
Link IAT Smart Contract
Issuer
Reference IAT smart contract; Initialize ledger for secondary transactions
linkIATSmartContract(IATTokenID, SmartContractReference, MarketID, BearerContractID, IssuerID)
BearerLinked
0
Ledger tracks transfers of IAT unit
0
Subscription
Issuer/Subscriber
Subscribers subscribe IAT from issuer at issuance fee
subscribe(IATTokenID, SmartContractReference, MarketID, BearerContractID, IssuerID, SubscriberID)
BearerLinked
All
Ledger tracks transfers of IAT unit
0
LP Acquisition
Subscriber/LP
LP acquire IATs from subscriber at subscription price
acquire(IATTokenID, SmartContractReference, MarketID, BearerContractID, IssuerID, SubscriberID, LPID)
BearerLinked
All
Ledger tracks transfers of IAT unit
0
Market Sets Secondary Price
LP
Publish LP Sell Price and LP Buy Price per IAT; Ensure price within min/max bounds; Prices anchored to Asset Pool NAV
setSecondaryPrices(IATTokenID, MarketID, LPID, BearerContractID, LPSellPrice, LPBuyPrice)
PricePublished
All LP-held IATs
Price visible to customers; compliance enforced; NAV-anchored
0
Customer Buy
LP & Customer
Execute LP → Customer IAT transfer; Transfer proportional Asset Pool rights (hawalah); Record transaction immutably (no platform fee)
buyFromLP(IATTokenID, MarketID, LPID, CustomerID, BearerContractID, Price)
TransactionRecorded
IAT unit ID
Spot transfer of proportional asset ownership; Shariah-compliant; token-per-unit; includes transfer of Asset Pool rights (hawalah)
+(UnitsSoldToCustomer × LPBuyPrice)
Customer Sell-Back
LP & Customer
Execute Customer → LP IAT transfer; Deduct 5% platform fee from customer; Record transaction immutably
sellBackToLP(IATTokenID, MarketID, CustomerID, LPID, BearerContractID, Price, PlatformFee)
TransactionRecorded
IAT unit ID
LP always counterparty; transparency ensured
−(UnitsBoughtBack × LPBuyPrice)
Market End — Non-Participating
LP
Mark all IATs non-participating
closeMarket(IATTokenID, MarketID, LPID, BearerContractID)
MarketClosed
All IATs
Tokens marked non-participating until the new market opening
Non-participating (no change)
Market Settlement
LP
LP facilitates settlement at NAV-derived prices (wa’d); Issuer settle all IATs from LP at minimal value; Asset Pool rights transferred back to Issuer; Record final settlement price from Asset Pool NAV; Execute proportional revenue distribution; Close ledger for market
settleMarket(IATTokenID, MarketID, LPID, BearerContractID, FinalSettlementPrice)
MarketSettled
All IATs
Immutable final settlement; ensures complete Shariah-compliant closure
Rebased to FinalSettlementPrice × subscribedCustomerUnits; then −(BuybackPayments)
Next Market Re-Enablement
LP & Issuer
New bearer contract for new market; Track new IAT smart contracts
reEnableNextMarket(IATTokenID, NewMarketID, SubscriberID, BearerContractID, SmartContractReference)
MarketReenabled
New IAT units
Previous Market IAT remain non-participating
0 for closed market
Bearer Contract Structure
The Bearer Contract structure governs the economic execution and ownership registry of IAT units. It tracks per-unit ownership, applies LP buy and sell prices based on Asset Pool NAV, updates LP running liability, and records all LP-customer transfers and market settlements. The bearer contract operates deterministically within the limits set by the smart contract and is the only layer where economic exposure changes occur.
BearerContractIDstringUnique bearer contract ID
Links to IAT smart contract
IATTokenIDstringReference to smart contract token
Ensures correct token mapping
MarketIDstringMarket identifier
Tracks which market this transaction belongs to
SmartContractReferencestringLink to IAT smart contract
Ensures rules and policies are enforced
IssuerIDstringIssuer unique ID
Token originator
SubscriberIDstringSubscriber unique ID
First subscriber of IAT
LPIDstringLP unique ID
Token owner and counterparty in secondary market
IATUnitOwnermapping(string ⇒ address)Tracks ownership of each IAT unit
Maps IAT token ID → current owner (LP or Customer)
IATUnitPricemapping(string ⇒ uint256)Tracks last traded price per token
Maintains transaction history
SubscriptionPricemapping(string ⇒ uint256)Initial agreed market price
Maintains transaction history
LPSellPriceuint256Offered LP sell price
Guides secondary market pricing; NAV-anchored
LPBuyPriceuint256Offered LP buy price
Guides secondary market pricing; NAV-anchored
LPRunningLiabilityuint256Aggregate repurchase liability owed by LP for subscribed customer-held IAT units
Updated deterministically on each bearer transfer and sell-back; rebased at market settle to FinalSettlementPrice
AssetPoolOwnershipmapping(string ⇒ string)Maps each IAT unit to its proportional share in the Asset Pool
Ensures genuine ownership tracking at the execution layer
RevenueDistributionuint256Proportional revenue pass-through from Asset Pool to holders
Implements ijarah rental or mudarabah profit distribution
ParticipatingboolToken can be traded
True = active/participating; False = non-participating
SecondaryMarketEnabledboolEnables LP ↔ Customer trades
True = trades allowed
Shariah Governance Framework
The IAT ecosystem operates under ongoing independent Shariah governance in accordance with AAOIFI Governance Standard No. 1.
Shariah Board
An independent, qualified Shariah board provides oversight of all IAT structural and operational decisions. The Shariah board issues formal opinions (fatwa) on the permissibility of the IAT structure and reviews any material changes.
Ongoing Compliance
- Quarterly Shariah audits of smart contract behaviour and economic outcomes
- Annual comprehensive Shariah board review
- Continuous monitoring through on-chain Shariah annotations (ribaFree, ghararControlled, maysirBlocked, spotOnly, assetBacked)
- Dedicated Shariah compliance officer serving as liaison between technical team and Shariah board
Zakat Disclosure
The platform provides zakat calculation guidance for IAT holders based on the NAV of their holdings, in accordance with applicable Shariah standards for mal (wealth) meeting the nisab threshold.