EXHIBIT D — Transfer & Secondary Policy
Version 1.0 — Effective October 17, 2025
Scope
This Exhibit governs any secondary transfer of an Autheo validator license across all tiers: Sovereign (full node), Prime (10% fractional license), and Core (1% fractional license). It ensures the validator license registry stays accurate, the transferee is bound to the Agreement and all Exhibits, and Autheo satisfies compliance obligations.
Transfer Method
1) Registry update required. A validator license may be transferred only through Autheo’s approved transfer workflow that updates the validator license registry.
2) Token signifier. Movement of any tokenized signifier alone does not transfer operating rights. Until the registry shows the new holder, the current holder remains responsible for all obligations.
3) Binding effect. Completion of the registry update binds the transferee to the Agreement and all Exhibits as of the effective transfer time.
Eligibility; KYC/OFAC
1) Mandatory verification. For each transfer event, both transferor and transferee must complete identity and sanctions screening through Autheo’s designated provider (currently Blockpass).
2) Prohibited users. Autheo will deny or void transfers involving prohibited persons, entities, or jurisdictions, or where verification cannot be satisfactorily completed.
Transfer Admin Fee
1) Fee schedule. A non-refundable administrative fee is payable at submission of the transfer request, per license transferred:
a) Sovereign (full node): US$150
b) Prime (10% fractional): US$100
c) Core (1% fractional): US$50
2) Dual-price protection. Autheo may offer a token-denominated option: US$ amounts above or 50 THEO, whichever is higher at the time of request.
3) Who pays. The initiator of the transfer request pays the fee unless the parties agree otherwise between themselves.
4) Purpose. The fee covers administrative processing, compliance screening, and registry updates; it is not a resale royalty or trading fee.
Waivers and Reductions
1) Launch liquidity. For the first 90 days after mainnet launch, Autheo may waive or reduce the fee to as low as US$50 per transfer to support healthy secondary liquidity.
2) Intra-group housekeeping. Transfers among a parent and its wholly owned subsidiaries may be reduced to US$0–US$50 at Autheo’s discretion upon proof of control.
3) Case-by-case discretion. Autheo may waive or adjust fees to correct operational errors or facilitate security-driven rekeying.
Process and Timing
1) Submission. The proposed transferee connects a compatible wallet, completes KYC/OFAC, and the transferor confirms release of the license.
2) Review window. Autheo targets review within 5 business days after complete materials are received; complex reviews may take longer.
3) Effective time. The transfer is effective only when the registry shows the transferee as the current holder; Autheo will issue confirmation via the sale interface or email.
Technical Re-Provisioning
1) Keys and endpoints. Where required, the transferee completes any key or endpoint re-provisioning per Autheo onboarding before operating the validator.
2) Cool-down. Autheo may impose a brief cool-down to prevent double-sign risk during handover.
Restrictions
1) No unauthorized splits. Sublicensing, fractionalization beyond defined tiers, or splitting license rights without Autheo’s written consent is void.
2) No encumbrances without consent. Licenses may not be pledged or otherwise encumbered in a way that would transfer rights upon default without Autheo’s transfer process and approvals.
3) Anti-evasion. Attempts to circumvent this Exhibit, including off-book assignments, are voidable and may result in suspension.
Misstatements; Non-Compliance
Autheo may suspend or reverse a transfer that relied on material misstatements or that violates this Exhibit, applicable law, or sanctions restrictions. If reversal is not feasible, Autheo may suspend operating rights until a compliant transfer is completed.
Records; Privacy
Autheo will maintain records of transfer requests and outcomes. Personal data collected for transfer processing is handled per the Autheo Privacy Notice and used for compliance screening and audit purposes.