RWA-101 Safe-Yield Checklist: 10 Baseline Requirements for Tokenised Real-World Assets
This is the canonical RWA-101 reference. Ten baseline requirements that any tokenised real-world asset should meet before an investor treats it as a safer-yield candidate. Each point includes the underlying rationale, a verification methodology any investor can follow, and live SHA-256 evidence badges that link to the primary-source documents.
What this checklist is
This checklist is an educational reference. It is not investment advice, not a solicitation, and not a ranking. The ten points are presented as falsifiable, individually verifiable requirements — meaning each can be checked independently against primary-source evidence rather than against the issuer’s marketing copy.
Where a point is illustrated with documents from the ALKN evidence locker, it is because the underlying primary sources are live, hash-anchored and freely retrievable. The methodology generalises: an investor should be able to reproduce the same verification flow against any tokenised RWA they are considering.
How to use it
- Walk each point in order. Treat any unanswered point as an unresolved risk, not a default-pass.
- For every claim the issuer makes, locate the primary-source document. Marketing language is not evidence.
- Where SHA-256 anchoring is published (point 8), verify at least one document end-to-end before you trust the rest.
- Record where you got each answer. If you cannot cite a source, the point is not yet satisfied.
The 10-Point Checklist
1. Regulated custody arrangement
What it is. A bonded, regulated custodian holds the underlying asset under a written safe-keeping agreement, separate from the issuer’s operational treasury.
Why it matters. Without a regulated custodian, "asset-backed" is a marketing claim. Regulated custody means the assets are identifiable, segregated, and recoverable in the event of issuer failure.
How to verify
- Identify the named custodian (full legal name, jurisdiction, regulatory licence).
- Locate the safe-keeping receipt (SKR) or equivalent — it should reference quantity, quality, location and an SKR number.
- Confirm the custodian publishes or directly attests to your specific SKR on request.
2. Independent audit (Big Four or recognised firm)
What it is. A recognised audit firm signs an independent opinion on the issuer’s financial statements and, where relevant, on asset existence and valuation.
Why it matters. An audit is the bridge between the issuer’s claims and an external accountability framework. Big Four involvement materially raises the cost of misstatement.
How to verify
- Find the audit firm’s name and licence on the cover page of the most recent annual accounts.
- Cross-check against the firm’s public register (Big Four firms publish client lists by jurisdiction in some markets).
- Read the scope paragraph: an unqualified opinion on financial statements is the floor; opinions extending to asset existence are stronger.
3. Certified specification (third-party validation)
What it is. The physical or contractual specification of the asset is verified by an independent body whose report is reproducible.
Why it matters. Tokenised commodities, in particular, depend on the asset matching a defined grade (purity, dimension, condition). Self-attested grades are not evidence.
How to verify
- Identify the certifying body and its accreditation (e.g., ASACERT, ASTM-recognised lab, NASA-certified test house).
- Locate the specification document — it should reference the exact lot, batch or serial range that backs the token.
- Confirm the specification is dated within a reasonable refresh window (annually for commodities).
4. Regulatory authorisation (jurisdiction-specific)
What it is. The issuer holds a current authorisation from a named regulator to offer the security in at least one jurisdiction.
Why it matters. Authorisation creates duties: ongoing reporting, fit-and-proper tests for principals, sanctions for misconduct. "Code is law" alone does not create those duties.
How to verify
- Identify the regulator (e.g., CNAD El Salvador, CSSF Luxembourg, MAS Singapore, FCA UK).
- Locate the authorisation reference — registration number, resolution number, or licence ID.
- Verify the reference against the regulator’s public register.
5. Transparent NAV publication
What it is. The net asset value (NAV) and the methodology used to compute it are published, dated and revisable.
Why it matters. A token’s relationship to its NAV is the most important number for investors. Hidden, infrequent or undefined NAV calculations are a risk amplifier.
How to verify
- Find the most recent NAV figure with its as-of date.
- Confirm the methodology is documented and references the same valuation inputs as the issuer’s appraisals.
- Look for a fair-value opinion or equivalent third-party sign-off on the methodology.
6. Legal opinion (recognised counsel)
What it is. A legal memorandum from recognised counsel sets out the legal nature of the token, the rights it confers, and the tax treatment.
Why it matters. A counsel opinion converts marketing labels ("security token", "LP interest", "claim") into binding legal characterisations that hold up in court.
How to verify
- Identify the law firm, the lead partner, and the jurisdictions covered.
- Read the conclusions paragraph — it should state, in plain language, what the holder owns.
- Confirm the opinion is dated, addressed to the issuer, and references the actual offering documents.
7. Registry presence (RCS / RBE or equivalent)
What it is. The issuing entity is registered in a public commercial register and, where required, a beneficial-ownership register.
Why it matters. Registry presence makes the issuer publicly accountable: directors, address, statutory filings, and (in beneficial-ownership registers) the natural persons behind the structure.
How to verify
- Find the registry number on the issuer’s offering memorandum or front page.
- Pull the registry extract directly from the public register (e.g., LBR Luxembourg).
- Cross-check the directors and registered address against the issuer’s public communications.
8. Cryptographic evidence anchoring
What it is. Every primary-source document referenced by the issuer is published with a cryptographic digest (SHA-256) so its integrity can be verified end-to-end.
Why it matters. Without cryptographic anchoring, a PDF on a website is just bytes — the issuer can replace it silently. With SHA-256 anchoring, a third party can detect any post-publication change.
How to verify
- Pull the issuer’s evidence manifest (e.g.,
curl -s https://rwanickel.com/api/evidence-manifest/). - Download any referenced PDF directly from its evidence-locker URL.
- Hash it locally (
shasum -a 256 doc.pdf); the result must equal thefile_sha256in the manifest and the response’sX-Evidence-SHA256header.
9. Identifiable issuer and operator
What it is. The legal entity that issues the token, and the operator that manages the offering, are both identifiable by name, address and named principals.
Why it matters. Anonymous or shell-only structures cannot be served, sued or sanctioned. Identifiable issuers and operators carry a personal accountability surface.
How to verify
- Read the offering memorandum: the issuer’s full legal name, registered address, and managing principals must be present.
- Pull the GP / manager registry extract.
- Confirm the incorporation deed names a notary and a date.
10. Recoverable in regulated insolvency
What it is. If the issuer fails, holders have an enforceable claim under a recognised insolvency regime — not just an on-chain promise.
Why it matters. Tokens that "live or die with the chain" are not asset-backed in any meaningful sense. Recovery requires a legal wrapper and a court that will enforce it.
How to verify
- Confirm the issuer is incorporated in a jurisdiction with a functioning insolvency code (e.g., Luxembourg).
- Read the legal memorandum on the insolvency ranking of holders relative to other creditors.
- Verify the incorporation deed and articles of association establish the structure that the legal opinion relies on.
Summary
Tokenised real-world assets do not become "safer" through marketing. They become more verifiable through the structures listed above — regulated custody, independent audit, certified specification, named regulator, transparent NAV, recognised counsel, public registry, cryptographic anchoring, identifiable principals, and a working insolvency code.
An investor who applies this checklist is not relying on the issuer’s framing. They are reading the same primary documents the regulator, the auditor, the custodian and the counsel have already signed.
For the structural background, start with What is RWA. For the regulated-vs-unregulated distinction that underpins points 1, 4 and 7, see Chapter 03. For the full primary-source library this article cites, see the Evidence Locker.