Almost every gold-backed token published today answers the same question: how much metal sits in the vault. Far fewer answer the harder one: where that metal came from, who handled it, and whether each transfer left a record a third party could re-check. Reserve size is a snapshot. Provenance is a chain, and a chain fails at its weakest link.
What a complete custody chain contains
A defensible chain has five documented stages. First, origin: the licensed concession or scrap source, tied to a named operator and a valid mining or trading licence. Second, refining: the accredited refiner that produced the bar, with the bar's serial number, weight and fineness. Third, assay: an independent measurement of purity, ideally from a laboratory that is not the refiner. Fourth, storage: the vault operator, the account structure and whether the metal is allocated to a specific bar or held as an unallocated claim. Fifth, issuance: the on-chain record linking a token supply to those specific bars, and the redemption terms that let a holder convert back.
Break any one of those and the token still trades, but the claim behind it becomes an assertion rather than a verifiable position.
Why refiner accreditation matters more than it looks
The London Bullion Market Association's Good Delivery List and its Responsible Gold Guidance set the reference standard for bars that circulate in the wholesale market, covering both physical specification and the sourcing checks a refiner must run on its suppliers. The World Gold Council has separately pushed responsible mining principles for producers upstream of that refining step. Neither framework was written with tokens in mind, but together they give a token issuer something concrete to point at: an accredited refiner and a serial-numbered bar are far easier to independently confirm than a general statement about holdings.
Allocated, unallocated and the difference that shows up in a default
Allocated metal is specific: identified bars, held for a named owner, outside the vault operator's balance sheet. Unallocated metal is a claim on a pool, and in an insolvency the holder is a creditor rather than an owner. Tokens built on unallocated positions can be perfectly legitimate, but they carry a different risk, and the distinction belongs in the token's documentation rather than in a footnote.
Where on-chain records genuinely help
The Bank for International Settlements has argued that tokenisation's real gain is the ability to bind an asset, its record and the rules governing it into a single programmable object. Applied to metals, that means bar-level identifiers, attestation hashes and redemption events written to a ledger anyone can read. It does not mean the ledger verifies the physical world for you: someone still has to weigh the bar. What the ledger removes is the ability to quietly change the story afterwards.
The questions worth asking before buying
Ask for bar serial numbers, not aggregate tonnage. Ask who the refiner is and whether it holds current accreditation. Ask whether the attestation is an audit or an agreed-upon-procedures report, and who signed it. Ask whether metal is allocated. Ask what a redemption actually delivers, and to whom. An issuer with a real chain can answer all five in writing.
Producer-linked issuance and where it changes the picture
A small group of programmes start the chain at the mine rather than the vault, which in principle extends the audit trail back past the refiner to a licensed concession. Our standing review of that model is our Burlcore Mining Uganda company analysis, which examines how a licensed Busia producer documents output before it reaches a custody chain at all. The approach is not automatically stronger: it simply moves the verification burden upstream, where licensing and regulatory filings become part of the evidence set.