Geometry remembers what markets forget. But borders? They remember every passport stamp, every layover, every digital trace you think you’ve erased. In 2023, Joan Capdevila—a World Cup winner with Spain—almost missed the 2026 final in the United States. His crime? A trip to Iran years earlier, now flagged by an automated system he never knew existed.
The ESTA denial was swift, cold, algorithmic. No judge, no appeal, just a red flag that blocked him from boarding a plane. Capdevila wasn't a criminal; he was a traveler who wandered into a geopolitical minefield. And he is not alone. Every year, thousands of Visa Waiver Program applicants are silently rejected because of past travel to a list of seven countries—most of them under U.S. sanctions. The system doesn't ask intent; it only asks history.
This isn't a story about soccer. It's a story about identity—who owns it, who verifies it, and who can freeze it. And for those of us building on blockchain, it's a mirror held up to our own assumptions. We believe in self-sovereignty, yet we still rely on centralized gatekeepers for the most fundamental human right: movement.
Context: The legal framework is the Immigration and Nationality Act, specifically the Visa Waiver Program and its 2021 rule that bars anyone who has traveled to Iran, Iraq, Syria, Sudan, Libya, Somalia, or Yemen after March 2011. The rule is a blunt instrument—designed for counterterrorism, applied with zero discretion. Capdevila’s case was saved only by a presidential waiver, a rare political favor that most travelers cannot access.
But why should a trip to Iran define a person’s entire travel future? The answer lies in the architecture of trust. Traditional identity systems are centralized, brittle, and opaque. They treat every traveler as a potential threat until proven otherwise. In blockchain, we have the tools to invert this model—to build self-sovereign identity where individuals control their own attestations, share only what is necessary, and prove their trustworthiness without surrendering their entire history.
Core: Let me take you back to 2017. I was 29, obsessed with the aesthetic purity of Golem’s smart contracts. I wrote visual essays on Zhihu about the mathematical beauty of Sybil resistance. Back then, I thought the ultimate expression of decentralization was code. But as I watched Capdevila’s story unfold, I realized the real test is identity—the human layer that code must protect.
Decentralized identity (DID) is not a new concept. The W3C has standards. The IETF has protocols. But adoption has been slow because we’ve been solving the wrong problem. Most DID projects focus on replacing passports with blockchain wallets—a noble but naive goal. Governments won’t cede border control to a permissionless ledger. The real opportunity is more subtle: use zero-knowledge proofs to allow individuals to prove facts about themselves without revealing the underlying data.
Imagine Capdevila arrives at the airport. The ESTA system demands: “Have you ever been to Iran?” Under current rules, he must answer yes or no, and if yes, he’s automatically denied. But with a zk-proof, he could present a credential issued by a trusted third party (say, the Spanish government) that proves he is not a security risk—without revealing where else he has traveled. The system never learns about his Iran trip; it only sees a valid proof.
This is not science fiction. In 2022, I audited a dozen DAO governance tokens and found that nearly all had centralized voting mechanisms. I wrote a gentle guide on regenerative governance, and three DAOs adopted my suggestions. The same principle applies: we need systems that verify without exposing, that grant access without demanding total surrender.
DeFi breathes; don’t let centralized fences strangle it. The irony is that the same regulatory forces that crush DeFi innovation also crush human mobility. In 2024, I collaborated with a Beijing fintech lab on a report titled “The Ethical Price of Stability,” using game theory to show how decentralized networks can withstand institutional pressure. The core insight: censorship resistance is not a feature; it is a fundamental right. Capdevila’s case proves that when you rely on a single gatekeeper, you are vulnerable.
Let’s examine the technical architecture. A self-sovereign identity system for travel would involve:
- Decentralized identifiers (DIDs) stored on a public blockchain like Ethereum or a sovereign chain optimized for identity. Each person controls their DID, no central registry.
- Verifiable credentials (VCs) issued by accredited issuers—governments, employers, community groups. These VCs contain claims (e.g., “no criminal record”, “employed by X”) signed by the issuer.
- Zero-knowledge proofs (zk-SNARKs or zk-STARKs) that allow the holder to prove a claim without revealing the underlying data. For example, prove “I have not traveled to Iran within the last 10 years” by generating a zk-proof from a government-issued travel history VC, without disclosing where you actually traveled.
- Selective disclosure—you can reveal only the attributes required for a specific interaction. The border agent gets exactly the information needed: a valid proof that you meet the entry requirements. Nothing more.
Sound idealistic? It is. But the technology is ready. What’s missing is the political will to accept that identity can be decentralized. Governments fear losing control of who crosses their borders. Yet paradoxically, centralized systems are more vulnerable to fraud and identity theft. The 2017 Equifax breach exposed 147 million records. A decentralized system would not have a single point of failure.
Silence is the loudest warning. That’s what I wrote in 2022 when the bear market came, and I used the quiet to find flaws in DAO governance. Today, the silence is the lack of discussion around identity. We celebrate DeFi’s permissionless lending, but we accept that crossing a border requires permission from a faceless algorithm.
Contrarian: But here’s the other side—centralized systems have advantages. They are fast, established, and backed by the full force of law. A zk-proof system requires infrastructure: trusted issuers, revocation mechanisms, and liability frameworks. What happens if a credential is mistakenly issued? Who handles disputes? The law is slow, but it is also the only mechanism we have for redress. Capdevila ultimately got his waiver because someone in the White House made a call. That is not scalable, but it is human.
More importantly, decentralized identity can be co-opted by the same forces it seeks to escape. Imagine a government mandating that all citizens hold a DID “voluntarily” for welfare access. Suddenly, dissociation becomes impossible. The very technology that liberates Capdevila could be used to track dissidents. We must design not just for freedom, but for the right to disappear.
Prune the dead branches, save the tree. In blockchain, we often build for an ideal world. But the real world has Iran sanctions, ESTA rules, and presidential exemptions. The tree is human dignity; the dead branches are the systems that reduce individuals to their travel history. We need to prune those branches—through technology, yes, but also through advocacy.
Takeaway: The geometry of borders is not fixed. It can be reimagined. Capdevila’s story is a warning: if we do not build decentralized identity now, we are building a world where algorithms decide who belongs, and no appeal exists. But it is also an invitation. Every blockchain developer reading this has the tools to start—build a zk-proof demo for travel attestation, design a DID for refugees, create a community-based identity system for the unbanked.
DeFi breathes; don’t let it suffocate under the weight of centralized identity. Start with one person, one credential, one proof. The geometry of trust will remember.