commit 67f02313f8acfaf18e7eb2790ed62bd93aa83053
parent 368d64189b6354b645f3d289374a02fb497a57da
Author: Stefan Kügel <stefan.kuegel@taler.net>
Date: Thu, 30 Oct 2025 22:56:12 +0100
update DD46, donation authority
Diffstat:
1 file changed, 6 insertions(+), 7 deletions(-)
diff --git a/design-documents/046-mumimo-contracts.rst b/design-documents/046-mumimo-contracts.rst
@@ -537,13 +537,12 @@ by a government authority that determines eligibility for tax deduction. A
DONAU blindly signs tax receipts using a protocol very close to that of the
Taler exchange's withdraw protocol, except that the reserves are not filled
via wire transfers but instead represent accounts of the organizations
-eligible to issue tax deduction receipts. These accounts are bascially
-expected to have only negative balances, but the DONAU may have a
-per-organization negative balance limit to cap tax deduction receipt
-generation to a plausible account. DONAU administators are expected to be
-able to add, update or remove these accounts using a SPA. Tax receipts
-are blindly signed by keys that always have a usage period of one calendar
-year.
+eligible to issue tax deduction receipts. These accounts are basically
+expected to have only negative balances, but the DONAU can set a negative
+balance threshold per organization to limit the creation of tax deduction
+receipts to a plausible amount. DONAU administrators are expected to be
+able to add, update or remove these accounts using a SPA. Tax receipts are
+blindly signed by keys that always have a usage period of one calendar year.
A stand-alone app for tax authorities can scan QR codes representing DONAU
signatures to validate that a given tax payer has donated a certain amount.
