Production gate

Testnet is live. Mainnet and real money wait on this checklist, we will not skip it.

Why this page exists

The app proves unshield, private send, and private trade in the browser. That is real cryptography, and still not production-safe while the proving keys come from a development trusted setup.

Gate order

Production ceremony

Multi-party Powers of Tau + circuit-specific contribution. Publish transcripts. Replace app zkeys and redeploy verifiers.

Independent review

Contracts + circuits reviewed. Fix blockers. No “audit pending” mainnet.

Ops + incident plan

Owner keys, pause/upgrade policy (or immutability choice), monitoring, disclosure channel.

Mainnet deploy

New pool + verifiers on Robinhood mainnet. App points at production artifacts only.

1
Production ceremony
Multi-party Powers of Tau + circuit-specific contribution. Publish transcripts. Replace app zkeys and redeploy verifiers.
2
Independent review
Contracts + circuits reviewed. Fix blockers. No “audit pending” mainnet.
3
Ops + incident plan
Owner keys, pause/upgrade policy (or immutability choice), monitoring, disclosure channel.
4
Mainnet deploy
New pool + verifiers on Robinhood mainnet. App points at production artifacts only.

Ceremony checklist (keys)

Document phase-1 ptau source (or re-run public Powers of Tau)
Phase-2 contributions for unshield + transfer + sealed swap circuits with public logs
Export new *.zkey + Solidity verifiers; match public inputs layout v2
Update SHA-256 fingerprints in circuitArtifacts.ts
Flip PROVING_CEREMONY to production only after the above
Destroy or never re-use toxic waste from the ceremony

What is already hardened on testnet

Real on-chain verifiers (no always-true mock on the funded pool)
Browser prove path with artifact hash checks
Private send does not keep the payment note on the sender
Private trade (sealedSwap) live with size privacy defaults, see sealed trade
Honest copy: via-market adapter ≠ private trade

What is still open product-wise

Stronger public-input privacy (rates / pair strategies)
Oracle-bound rates (not display marks)
Anonymity set growth (more users → better privacy)
Mainnet only after this gate

Security policy: Disclosures · repo SECURITY.md. Product status: What ships when.