The internet can prove when something happened, but not where.

Location is the one fact online systems still take on faith. When you log in, send money or place a trade, the device reports whatever it was told. Free apps make location services report any place you choose, $300 of hardware spoofs GPS, and a $5 VPN moves your IP address across the world. No system can tell whether you logged in from Tokyo or Manhattan.

Your phone stays with you, so the useful question at login is whether the login is in the same place as your phone. Someone with your password looks exactly like you, except that he is somewhere else. Your phone is in Chicago, and the login comes from Myanmar through a VPN that matches your IP address. No system can read that difference reliably today. The same unproven location also decides whether an action is legal where it happens, so authentication, compliance and authorization all rest on it.

Presence in a place cannot be faked. But a single coordinate is easy to fake, so Octet builds up location from what the phone itself can sense: satellite signals, the cell network around it, its own motion and signals most systems ignore.

The phone builds the location, and the chip signs it.

One sensor on its own proves nothing: a magnetometer reading could come from a magnet, and a pressure reading changes with the weather. Octet tests each signal against statistical and physical checks, then combines satellite, cellular and Wi-Fi signals with the phone’s own motion into one answer. That answer is signed in the Secure Enclave by a private key that never leaves the hardware.

A proof can only claim what its signals support.

Multiple independent checks run on the device, and each signal is tested before it is combined with the others. The result is one signed verdict with a confidence level. A higher level needs more independent signals to agree, so a proof can never claim more than its signals support. Where signals disagree, the disagreement is recorded in the proof.

The proof says yes or no, and the coordinates stay on the phone.

The position is sealed inside a cryptographic commitment, so the device cannot change its answer later and no one can read the coordinates from it. The proof also carries replay protection and a chain of hardware-signed attestations, so any change made after the fact breaks verification.

What leaves the device is a yes or no against the policy you set: inside this jurisdiction, outside that one, at this venue. A counterparty checks the proof offline against the device’s enrolled public key, with no account and no call to Octet. The proof contains the answer and a signature, and never a coordinate.