Gloam
OverviewTestnet guideWhat ships whenHow shield worksPrivate payWhat stays privateSealed tradeRobinhood ChainLive dataProduction gateWhitepaper$GLOAM token

Documentation

Production gate

Testnet is live. Mainnet and real money wait on this checklist — we will not skip it.

Why this page exists

The app proves unshield and private send in the browser. That is real cryptography — and still not production-safe while the proving keys come from a development trusted setup.

Gate order

  1. 1

    Production ceremony

    Multi-party Powers of Tau + circuit-specific contribution. Publish transcripts. Replace app zkeys and redeploy verifiers.

  2. 2

    Independent review

    Contracts + circuits reviewed. Fix blockers. No “audit pending” mainnet.

  3. 3

    Ops + incident plan

    Owner keys, pause/upgrade policy (or immutability choice), monitoring, disclosure channel.

  4. 4

    Mainnet deploy

    New pool + verifiers on Robinhood mainnet. App points at production artifacts only.

Ceremony checklist (keys)

  • Document phase-1 ptau source (or re-run public Powers of Tau)
  • Phase-2 contributions for unshield + transfer circuits with public logs
  • Export new *.zkey + Solidity verifiers; match public inputs layout v2
  • Update SHA-256 fingerprints in circuitArtifacts.ts
  • Flip PROVING_CEREMONY to production only after the above
  • Destroy or never re-use toxic waste from the ceremony

What is already hardened on testnet

  • Real on-chain verifiers (no always-true mock on the funded pool)
  • Browser prove path with artifact hash checks
  • Private send does not keep the payment note on the sender
  • Honest product copy: vault trade adapter ≠ sealed-size trade

What is still open product-wise

  • Sealed-size private trade — hide swap size, not just hold/move
  • Anonymity set growth (more users → better privacy)
  • Mainnet only after this gate

Security policy: Disclosures · repo SECURITY.md. Product status: What ships when.