verifiable on testnet
On-chain
Every gate is a real Soroban contract. Each proof below was verified on-chain before the gate released — the fees are the actual charged stroops, and the contracts are open on Stellar Expert.
testnet event trail
Accepted proofs
On-chain Groth16 verification gated each transaction. Replayed nullifiers are rejected by the contract.
deployed contracts
Live on testnet
The hardened stack: a verifier with an admin-set then frozen VK, issuer/policy/nullifier registries, proof gates, and an OpenZeppelin SEP-57 asset path. Open any on Stellar Expert.
VerifierGroth16 · VK frozen after set
pending
Payment gateverify_and_pay · SAC transfer
pending
Identity verifierattest_for_mint · OZ IdentityVerifier
pending
RWA tokenOpenZeppelin SEP-57
pending
Issuer registrytrusted credential issuers
pending
Policy registryper-gate eligibility policy
pending
Nullifier registryreplay protection
pending
Compliance adapterConsumes mint authorization
pending
governance
Timelock + multisig governance contract
A governance contract (propose → timelock →
threshold-execute, with emergency Pause/Unpause/RevokeGate and admin
transfer) is in the workspace and tested. The live testnet
deployment currently runs a single admin; the
cutover to governance-controlled admin is documented
(docs/GOVERNANCE.md,
docs/MAINNET_RUNBOOK.md) and gated on real independent
signers. Self-serve enrollment root publishing is routed through a
loopback-only signer process that recomputes the credential root
before it can broadcast.
trusted setup
Deployment facts
try it yourself
Generate a proof and watch a gate open
Run the in-browser prover and reproduce the exact public inputs behind these transactions.