ENRG Protocol Whitepaper
An open protocol for cryptographically verifiable physical infrastructure. The first reference implementation tokenizes energy production data on the Solana blockchain.
Abstract
ENRG is an open, blockchain-independent protocol for establishing cryptographic trust between physical devices and digital systems. The protocol defines a standard for Proof-of-Production — cryptographically signed data packets from IoT devices that are verified by an oracle network and recorded on-chain.
The first reference implementation tokenizes verified energy production as SRC (Source) tokens on Solana. Each SRC token represents exactly 1 MWh of verified energy production. The protocol leverages Ed25519 cryptographic signatures for device authentication, a policy engine for deterministic verification, and Solana's SPL Token standard for on-chain representation.
Problem Statement
The global renewable energy market suffers from three critical inefficiencies:
- Opaque certification. Renewable Energy Certificates (RECs) are issued by centralized bodies with limited auditability, slow issuance cycles, and high administrative overhead.
- Fragmented markets. Energy producers in different regions cannot access unified, liquid markets for their certificates. Small producers are effectively excluded.
- Verification trust gap. Buyers of RECs must trust intermediaries rather than cryptographic proof. Double-counting and fraudulent certificates are persistent problems.
Solution: Proof-of-Production (PoP)
ENRG introduces Proof-of-Production: a cryptographic pipeline that connects physical energy devices to on-chain tokens. The pipeline consists of five stages:
IoT device (ESP32 + PZEM-004T or industrial Modbus/RS485 meter) measures energy production every 10 minutes. Data is signed with the device's Ed25519 private key stored in a Secure Element (ATECC608).
The ENRG Oracle receives signed data packets, verifies the Ed25519 signature
via solana_instructions_sysvar, validates the monotonic nonce and
timestamp (MAX_PROOF_AGE = 1 hour), and checks device status against the
Device Registry.
For small producers, the oracle aggregates verified readings into a pool. When the pool reaches the threshold of 1 MWh, the oracle initiates minting. Tokens are distributed proportionally to each participant's contribution.
The oracle calls mint_energy on the enrg-mvp program. The
smart contract verifies the oracle's Ed25519 signature via sysvar, validates
the producer PDA, and mints SRC tokens via CPI to the SPL Token program.
85% goes to the producer, 15% is distributed as protocol fees.
Every mint event is recorded on-chain. The full audit trail is publicly verifiable via Solana Explorer. Token supply is always auditable and deterministic.
SRC Token
| Property | Value |
|---|---|
| Name | Source |
| Symbol | SRC |
| Standard | SPL Token (Solana) |
| Decimals | 9 |
| Max Supply | 1,000,000,000 SRC (fixed cap) |
| Peg | 1 SRC = 1 MWh verified energy |
| Transferable | Yes |
| Burnable | Yes (buyback & burn mechanism) |
Protocol Fee Distribution
15% of each mint is distributed as follows:
- 20% Buyback & Burn — creates constant deflationary pressure
- 40% Staking Rewards — distributed to SRC stakers proportionally
- 30% DAO Reserve — governed by token holder voting
- 10% Emergency Fund — protocol insurance
85% of each mint goes directly to the energy producer.
Source Multipliers
| Energy Source | Multiplier |
|---|---|
| Solar / Wind / Hydro | 100% |
| Biogas | 80% |
| Fossil | 50% |
Protocol Design
The ENRG Protocol consists of two Solana programs that communicate via Cross-Program Invocation (CPI):
enrg-mvp — Core Protocol
The core program responsible for:
- Verifying oracle Ed25519 signatures via
solana_instructions_sysvar - Minting SRC tokens via CPI to SPL Token program
- Managing the Energy Vault (buyback, staking, DAO, emergency funds)
- Device lifecycle management (8 states per ADR-0005)
- Enforcing mint constraints (max supply, nonce, timestamp, power limits)
EsaKY8C3EZeRLL1wG5UECAnDWjbLfWJr7jL3pBLmpFfW
enrg-profile — Energy Profile
Manages energy producer profiles with:
- Participant profiles (PDA per wallet)
- Device registration and metadata
- 30-day rolling energy window
- Rated power configuration (determines max energy per mint)
enrg-mvp calls enrg_profile::cpi::record_production during each mint
via declare_program! to update the producer's energy profile.
H9GDJQhaLqHeZZmuiqL1JTCaQ4nSquKterUyFVRdL5GZ
Device Lifecycle (ADR-0005)
Every device follows a cryptographically enforced state machine with 8 states:
UNREGISTERED → REGISTERED → CLAIMED → PROVISIONED → ACTIVE
│
┌───────────────┼──────────────┐
▼ ▼ ▼
QUARANTINE MAINTENANCE REVOKED
│ │
└───────→ ACTIVE ←──────────┘
- UNREGISTERED — device unknown to the system
- REGISTERED — cryptographic identity created, not yet bound to owner
- CLAIMED — bound to owner, not yet configured
- PROVISIONED — Wi-Fi configured, time synced, manifest received
- ACTIVE — producing and sending Proofs
- QUARANTINE — under suspicion, Proofs not minted
- MAINTENANCE — service mode, no Proofs sent
- REVOKED — permanently removed
Oracle System
The ENRG Oracle is a permissioned off-chain service that bridges the physical and digital worlds:
- Ingests signed device telemetry over HTTPS
- Verifies Ed25519 signatures using
solana_instructions_sysvar - Validates monotonic nonces and timestamps (replay protection)
- Aggregates readings into pools (1 MWh threshold for minting)
- Submits
mint_energyinstructions to the enrg-mvp program
In the MVP, the oracle is a Node.js server deployed on Render. Future versions will use a decentralized Switchboard oracle network for redundant verification.
solana_instructions_sysvar::get_instruction_relative.
The private key never leaves the oracle server.
Oracle API
Base URL: https://enrg-oracle.onrender.com/api/v1
| Method | Endpoint | Description |
|---|---|---|
| GET | /stats | Protocol-wide statistics (total energy, active producers, supply) |
| POST | /device/register | Register a new device |
| POST | /proof/submit | Submit proof of production |
| GET | /device/:id/status | Get device status and accumulated energy |
Governance
ENRG Protocol v1 is governed by the founding team. A DAO governance model is planned for v2, where SRC token holders will be able to vote on:
- Approved device categories and verification standards
- Oracle operator set and quorum thresholds
- Protocol fee parameters
- Treasury allocation
Protocol evolution follows the ENRG RFC process and Architecture Decision Records (ADR). All changes are transparent, documented, and publicly reviewable.
Roadmap
Smart contract, Oracle, ESP32 Proof-of-Production, device registration, minting, documentation, ADRs.
Device Registry, Provisioning Service, Device Manifest, Policy Engine, Dashboard, REST API, Live Statistics.
SDK, CLI Tools, Reference Integrations, Developer Portal, Oracle Network, Community Contributions.
Independent Audit, Multi-chain Support, Carbon Credits, Energy Marketplace, Full DAO Governance.
Team
ENRG Protocol is built by a team of blockchain engineers and renewable energy specialists.
For inquiries: anton@enrg.network