Proof of reserve

Every CardNFT points at exactly one slab through a public backing key, and a redeemed slab's key is retired forever. The reconciler reads every token from the chain and checks it against what each custodian reports holding.