Home / Critical Brief / Pillar archive
Lemma Critical Brief · Pillar archive

Pillar 04 Regulatory Attribute Proof

The layer that proves KYC / AML / regulatory attributes via selective disclosure.

10 Briefs
No. 040 · 2026-06-09

Phantom Carbon Credits

When an Environmental Attribute Is Issued Without Independent Verification of Its Underlying Data (Operation Greenwashing)

Attribute Proof Bypass Data Provenance Brief →
No. 032 · 2026-06-08

Inside a Legitimate Booking Platform, the Payout Bank Account Was Silently Rewritten

The Change Was Not Independently Verified Before Funds Moved (Polaris Holdings / Booking.com)

Attribute Proof Bypass Data ProvenanceIdentity & Auth Brief →
No. 035 · 2026-06-08

The Inspections Were Recorded as 'Complete'

But Never Performed. On the Boeing 787, the Existence of a Record Was Mistaken for Proof of the Act

Attribute Proof Bypass Data ProvenanceIdentity & Auth Brief →
No. 034 · 2026-06-08

Live Biometric Verification Defeated by an Injected Video Feed

KYC Believed It Had Captured a Live Person, But the Provenance of the Capture Was Never Verified

Attribute Proof Bypass AI Decision IntegrityIdentity & Auth Brief →
No. 022 · 2026-06-04

OnlyFake

AI-Generated IDs Bypass Exchange KYC

Attribute Proof Bypass Identity & AuthData Provenance Brief →
No. 019 · 2026-06-03

Unqualified Engineers Placed Under National-License Claims

Regulatory Attributes Asserted Without Independent Verification at the Point of Assignment

Attribute Proof Bypass Identity & Auth Brief →
No. 020 · 2026-06-03

Tampered Certification Test Data Behind Type Designation

Product Regulatory-Conformance Attributes Asserted Without Independent Verification on the Path to Shipment

Attribute Proof Bypass Identity & Auth Brief →
No. 021 · 2026-06-03

Forged Balance Confirmations Asserting Asset Existence

A Financial Attribute Asserted Without Independent Verification, Reaching Disclosure and Markets (Wirecard)

Attribute Proof Bypass KYC / AML Disclosure Brief →
No. 013 · 2026-05-31

The Coinbase KYC Insider Breach

When Regulation-Mandated Storage of Raw PII Becomes the Breach Surface

KYC / AML Disclosure Identity & Auth Brief →
No. 006 · 2026-05-30

Google API Keys Remain Usable for 23 Minutes After Deletion

Independent Verification Gap in Credential Revocation Attributes

Attribute Proof Bypass Identity & Auth Brief →