Dev Release #7Three portals, one tradeRead the notes
Protocol · Global Trade · Marketplace · 03 of 7

Two-step disclosure

Financiers browse on operational signals with no identity attached. Operators control who sees who, and when. The wall protects relationships on both sides.

≈ 3 min read · 6 sections
2 stepsInterest tap, then operator approval
6 signalsVisible pre-disclosure without identity
SymmetricReveal happens to both sides at once

What two-step disclosure is

Most matching marketplaces work one of two ways. Either everything is public (the operator's identity, the financier's mandate, the past deals between them), which destroys negotiation leverage. Or everything is private until both sides commit, which means financiers can't price anything without burning days on due diligence per deal.

Two-step disclosure is the third path: show enough operational data to price the deal, hide identity until both sides confirm interest. Financiers see the signal pack. Operators see the financier's mandate and references. Neither sees the other's company name until step two, and the reveal is simultaneous: no backdoor unmasking on either side.

Two-step disclosure flow on the Trade MarketplaceTWO-STEP DISCLOSUREIdentities reveal after mutual interest, not before.ANONYMOUS ZONE01LISTEDOperator posts the dealIndustry, region, value band, signals.No company name. No counterparty IDs.02BROWSEDFinanciers express interestFilter by mandate. Tap interest on fits.Still anonymous on both sides.MUTUAL CONSENTREVEALED ZONE★ 03REVEALOperator opens disclosureOperator picks a shortlist. Both sides see fullidentity, history, and references.Mutual consent crosses the wall.04OFFERSShortlist returns signed offersEach offer: rate, advance, tenor, covenants.No financier sees another financier's offer.05ACCEPTEDOperator accepts. Funds flow.EDSD or bank rails. Marketplace fee: 0.25%,paid by financier. 50% of every fee burns $EDM.The wall is enforced at the service layer. No backdoor reveals.
The five-stage flow with the wall in the middle. Stages 01-02 happen anonymously; the wall holds until the operator approves disclosure; stages 03-05 happen with both sides identified. The lock animation triggers on stage 03 when mutual consent crosses.

What is visible pre-disclosure

Deal characteristics

Industry sector, origin/destination corridor, value band (range, not exact), requested financing structure (advance %, tenor, currency), milestone schedule, latest disbursement date. Enough to know if the deal fits your mandate.

Operational signals

All six core signals: supplier reliability score, client payment history, dispute rate, fulfillment cycle time, document quality, operational maturity (tenure + completed orders + counterparty diversity). Hashed and attestor-signed.

Counterparty signal pack

The buyer's operational profile if not the operator's own customer; the supplier's profile if relevant. Same six signals, same evidence trail. Financiers see the full deal stack of operational truth without seeing names.

The disclosure step

When a financier taps Interest on a listing, the marketplace requires an indicative profile: their mandate (corridors, value bands, sectors they fund), capital availability, prior trading on EDMA. The operator sees a shortlist of interested financiers with this profile data plus references from other EDMA operators who have funded with each. No identity reveals yet.

The operator approves a subset of the shortlist. At that moment, identity reveals simultaneously to both sides. The operator sees full financier KYB profile. The financier sees full operator KYB profile, counterparty identities, and the actual order details. The wall comes down. Each approved financier can now send signed offers; the others remain locked out.

What never crosses the wall

Even after disclosure, certain information stays compartmentalised. Pricing offered by one financier is never visible to another. The operator sees all offers privately and picks one; no financier knows what another quoted. This prevents auction collusion and keeps offers grounded in the deal rather than the competitive set.

Past deals between specific operator-financier pairs do not influence other financiers' feeds. If you funded an operator three times, no other financier sees that history when browsing that operator's next listing; the operational signals are objective, the relationship is private. The Trade Marketplace is a referee, not a participant. It does not trade against its own users, does not sell deal flow data, does not rank-order results by who pays the most, and cannot be the counterparty on any deal.

THREE VISIBILITY STATESEvery piece of deal information falls into one of three buckets. Pre-disclosure data is visible anonymously to matched financiers. Post-disclosure data reveals only after the operator approves disclosure. A third category stays compartmentalised regardless of disclosure status.
The wall is enforced at the service layer in v1 with audit trails on every disclosure event. v2 hardens the wall further with on-chain disclosure receipts attested by the marketplace, so any breach is provable. The three-tier model is the protocol's answer to the bind facing every matching marketplace: how to show enough operational truth to price the deal without burning the relationship before it starts.
Every piece of deal information sits in exactly one of these three columns. The middle column (post-disclosure) flips on operator approval; the outer columns are state-invariant. The third column is the protocol's answer to auction collusion and relationship poaching.

Why this exists

Trade finance lives on relationships, and relationships die when they become marketable assets. If an operator's existing financier could see every other financier looking at a deal, they would price-adjust their next conversation. If a financier's competitive offers were public, every deal would race to the bottom. If the names were public from the start, financiers would skip the platform and call directly.

The wall makes the marketplace useful for both sides. Operators discover new capital without burning their existing relationships; financiers see deal flow without warehousing their pricing. The matching is on operational truth, the negotiation is on the merits, and the disclosure is bilateral by design.

WHAT FAILS WITHOUT THE WALLThree concrete failure modes the two-step disclosure architecture is designed to prevent. Each one is a pattern that has killed every prior trade-finance matching marketplace.
Every prior trade-finance matching marketplace failed on one of these three modes. The wall isn't a UX nicety; it's the structural prerequisite for the marketplace to have any economics at all. Make the matching valuable to both sides without giving either side a reason to exit the platform after they meet.
Three failure modes that have killed every prior trade-finance matching marketplace. Poaching by existing financiers, race-to-the-bottom from public bids, platform bypass when names are visible. Each failure is a specific structural problem the wall is engineered to prevent.

Where it stands today

The disclosure architecture ships with the Marketplace MVP in Stage 3 of the EDMA roadmap (Nov 2026 – Jan 2027). v1 enforces the wall via marketplace logic with audit trails for every disclosure event. v2 hardens the wall further with on-chain disclosure receipts attested by the marketplace, so any breach is provable. The operational signal pack is already in production through TradeOS for operators on the platform; the marketplace surface is the integration target.

Audited by
Current presale

Verify first. Then mint.

$EDM is the fee, burn, and governance token of the only Ethereum L2 designed to verify real-world events before they settle.

Community Chat

Five channels, one community. Pick where you live online; we'll meet you there.