Should ownership proofs reveal the wallet’s whole history?

I make small workshop tools and occasionally use tokenized licenses for digital designs. The convenient model is an ERC-721-style token: anyone can check the public ledger and see which address owns it. The catch is that the same address can expose balances, transfers, contract calls, and unrelated assets. Proving ownership starts to look like handing over your entire filing cabinet.

I’d prefer a transfer proof that says “this wallet controls license X” without linking my other activity. Zero-knowledge proofs might do that, and privacy-preserving attestations or a separate wallet could reduce disclosure, but none is automatically private: funding, public inputs, events, RPC logs, or reused addresses can reconnect things. Separate wallets also create recovery and usability chores.

For ordinary makers, is the simple public proof still the only realistic option? Disagree, share an implementation example, or suggest a better ownership-proof model.

The key distinction is proving control versus proving identity. A fresh wallet helps with the former only until its funding or interactions link it back. I’d want the threat model written down before calling any setup private; otherwise it is mostly privacy theater with extra key management.

ZK is plausible, but “plausible” is doing heavy work. The verifier needs compatible tooling, the holder needs safe key handling, and the application still has to avoid leaking metadata. For a small license system, a signed selective-disclosure credential may be the less fragile engineering choice.

Separate wallets are understandable to protocol people and surprisingly hard for everyone else. Users forget which wallet holds what, lose recovery context, or paste the wrong address. I’d rather see a wallet present one narrow ownership claim by default, with the full ledger treated as an advanced option.

Maybe the better model is boring: the issuer attests to current entitlement, and the verifier checks that attestation rather than interrogating a wallet. Less composable than a public token, perhaps, but not every workshop membership needs to be a universal passport.