Security + Intelligence
Decision support
Hugging Face free-ready
Intelligence
Operational intelligence that helps a normal user make safer governance and treasury decisions

PrivateDAO uses intelligence where it actually matters: proposal review, treasury execution review, voting compression, RPC health interpretation, and gaming-governance decision support tied to real product flows before execution.

ConnectReviewSignVerify
Wallet-orchestrated UXReview first · Sign second · Verify third
Connect
Choose wallet, confirm account, and stay on Solana Testnet.
Review
Read the action, policy, risk, privacy mode, and execution lane first.
Sign
Approve the exact wallet request only after the operation is clear.
Verify
Open the receipt, explorer hash, and proof continuity from the same flow.
PrivateDAO Stack

Most DAOs expose everything. Votes. Payroll. Treasury activity. Internal operations.

We think that is broken. PrivateDAO enables organizations to operate privately while remaining cryptographically verifiable on Solana. Each layer below has a live route, a proof route, and when available a one-click API exercise.

route proof

1. Private Governance

Confidential decisions for Solana-native organizations.

Create or review DAO state, prepare proposals, commit/reveal private votes, inspect PDAO context, then verify the Testnet action.

SolanaAnchorcommit-revealZK proof anchorsreviewer proofs
one-click API

2. Encrypted Treasury Coordination

Private budget and execution coordination before funds move.

Review treasury risk, preview Jupiter routing, keep encrypted payment metadata bounded, and route approved actions to proof.

JupiterstablecoinsSquads-style authorityencrypted metadataread-node telemetry
TryVerify
one-click API

3. Private Payments

Confidential payouts from organizations to contributors, operators, and task executors.

Generate a private settlement intent, preserve a receipt reference, and route the visitor to the matching proof lane.

CloakUmbraIkaencrypted receiptsSolana memo/hash anchoring
TryVerify
route proof

4. Confidential Payroll

Payroll integrity without exposing every contributor detail.

Use REFHE payroll proof, encrypted manifests, stablecoin payout context, and proof continuity for auditor-safe payroll review.

REFHEencrypted metadatastablecoin payoutsproof receiptsselective disclosure
route proof

5. Intelligence Layer

Decision support before governance or treasury authorization.

Summarize proposals, score risk, inspect wallet and treasury context, and detect abnormal governance or payment posture before signing.

QVACGoldRushCovalentZerionQuickNodeSupabase receipts
one-click API

6. Agent / MCP Layer

Execution lineage for intent -> approval -> execution -> outcome.

Forward an approved operational event to the agent/growth rail while keeping the approval and outcome tied to verifiable receipts.

Torque MCPMagicBlock skillscustom MCP toolsexecution lineageread-node APIs
TryVerify
Intelligence explainer

AI should explain risk before a wallet signs, not decorate the page.

The intelligence route turns proposal context, treasury risk, RPC quality, operational drift, and continuity memory into a signer-facing review gate.

Pain
Teams sign before understanding operational risk
Path
Summarize -> Score -> Route -> Approve
Rails
QVAC, GoldRush, QuickNode stream intelligence
Operational Intelligence Layer for DAOs

DAO Coordination Intelligence before the wallet signs

PrivateDAO treats intelligence as an execution control surface, not a chatbot. QVAC handles local proposal and policy reasoning; GoldRush/Covalent and QuickNode-backed context help explain on-chain history, treasury movement, and route quality before a signer approves the next action.

The internal model is the Operational Gravity Observatory: it watches whether an organization is keeping intent, approval, execution, and proof aligned across governance, payroll, treasury, and reward lanes.

Recovery Memory

Keeps the user anchored to prior receipts, proposal state, wallet signatures, and proof routes after refresh or reconnect.

Coordination Gravity

Shows whether governance, payroll, treasury, rewards, and proof are pulling toward one executable operation or splitting apart.

Operational Drift

Flags stale context, missing proof continuity, weak route quality, or a payment lane that no longer matches the approved intent.

Continuity Legitimacy

Connects intent, review, wallet signature, read-node receipt, explorer URL, and proof artifact into one verifier-readable chain.

End-to-end Testnet claim matrixPain → Treatment → Proof

Every integration is part of one confidential coordination graph

Organizations need privacy because payroll, votes, vendors, treasury routes, and internal operations leak by default. Blockchains need verifiability because trust collapses when execution cannot be checked. PrivateDAO connects both: private preparation, wallet-controlled Testnet execution, and public-safe proof.

PrivateDAO-native workflow
Market passesGrant reviewers assignedPrivate review roomPrivate scoringTreasury approvalGrant payoutProvePublic audit receipt
Live matrix anchor
Waiting for live matrix anchor
loading
digest: loading
slot: pending
PrivateDAO Grant Review Workflow
Testnet path
Pain

A market-passed decision still needs private reviewer assignment, private scoring, treasury approval, payout execution, and a public audit receipt.

PrivateDAO treatment

PrivateDAO turns the post-governance path into one confidential coordination graph: Market Decision -> Grant Review -> Treasury Approval -> Payroll Allocation -> Execution -> Prove -> Audit Proof.

Proof action

Open the PrivateDAO workflow, encrypt the private scoring room, sign the Testnet digest, export public attestation, then verify who reviewed, approved, executed, and proved the outcome without exposing the private notes.

Confidential Treasury Request
Testnet path
Pain

Treasury requests leak strategy, vendor terms, and negotiation context before the DAO is ready to execute.

PrivateDAO treatment

PrivateDAO encrypts the request body, stages Discuss -> Review -> Approve -> Execute -> Audit, and anchors only a digest commitment on Solana Testnet.

Proof action

Open the claim console, select Confidential Treasury Request, encrypt the request, sign the memo digest, then verify the explorer receipt.

Confidential Payroll Request
Testnet path
Pain

Public payroll exposes contributor salaries, bonus reasons, and internal compensation strategy.

PrivateDAO treatment

Payroll rows become encrypted selective-disclosure receipts while the organization keeps a public-safe batch digest and REFHE proof path.

Proof action

Run Confidential Payroll Request, sign the Testnet memo, export public attestation, and keep the private disclosure receipt for authorized reviewers.

Security Incident Room
Testnet path
Pain

Security teams cannot reveal exploit details while they are still investigating and patching.

PrivateDAO treatment

Incident findings, responder notes, and mitigation plans stay encrypted until disclosure; the decision path still leaves a signed digest trail.

Proof action

Open Security Incident Room, encrypt the response context, anchor the digest, and route reviewers to the mitigation proof.

Emergency Governance
Testnet path
Pain

Exploit, oracle, or key-loss decisions need speed and privacy without losing accountability.

PrivateDAO treatment

PrivateDAO gives the council a private evidence lane, fast approval claim, execution handoff, and postmortem audit surface.

Proof action

Select Emergency Governance, sign the encrypted decision digest, then verify the final action and public-safe postmortem trail.

Confidential Grant Review
Testnet path
Pain

Grant reviewers influence each other when notes, scores, and committee debate are public too early.

PrivateDAO treatment

PrivateDAO separates intake, blind review, award approval, grant execution, and outcome audit with encrypted review packets.

Proof action

Anchor a Confidential Grant Review claim, export the public attestation, then inspect the final award proof surface.

Institutional Memory Vault
Testnet path
Pain

Organizations lose decision context across sessions, teams, and reviewer handoffs, or they expose too much too early.

PrivateDAO treatment

PrivateDAO stores why decisions happened, who objected, what alternatives were rejected, and what happened later, with progressive disclosure and digest continuity.

Proof action

Capture the decision as an encrypted memory-vault claim, sign the digest, and keep public/private receipts separated.

Agent Governance Request
Testnet path
Pain

AI agents can prepare work, but organizations need human approval, private context, and auditable execution lineage.

PrivateDAO treatment

Agent intent, human review, approval, execution, and outcome are connected through encrypted context plus a wallet-signed Testnet digest.

Proof action

Select Agent Governance Request, encrypt the agent intent, sign the approval digest, and verify the lineage attestation.

Governance + ZK
Testnet path
Pain

Strategic votes become public before the organization is ready.

PrivateDAO treatment

Commit/reveal governance, local Groth16 proof artifacts, and standalone Testnet verifier receipts turn private voting into a verifiable workflow.

Proof action

Create DAO, create proposal, commit, reveal, finalize, execute, then open Solscan and proof.

ZK Commit/Reveal
Testnet path
Pain

Private votes lose credibility if the proof path is hidden from normal reviewers.

PrivateDAO treatment

The governance rail binds commit, reveal, Groth16 proof context, and a visitor-signed Testnet digest claim into one verifiable path.

Proof action

Open Govern, run the governance flow, anchor the ZK commit/reveal claim, then inspect readiness and Explorer links.

REFHE / Encrypt Payroll
Testnet path
Pain

Salary rows, bonus reasons, and payroll strategy leak when teams operate from public wallets and spreadsheets.

PrivateDAO treatment

Encrypted payroll manifests, REFHE envelope settlement, and wallet-signed payout rehearsal bind private payroll context to public-safe proof.

Proof action

Encrypt payroll payload, anchor a confidential-payroll claim, run payout rehearsal, export proof.

REFHE Payroll Computation
Testnet path
Pain

Payroll privacy is not enough unless encrypted computation receipts and payout evidence stay connected.

PrivateDAO treatment

REFHE payroll proof produces ciphertext-safe receipts, then the visitor anchors a digest claim on Solana Testnet.

Proof action

Open REFHE payroll proof, generate the receipt, anchor the REFHE claim, export public attestation.

Encrypt Manifest
Testnet path
Pain

Sensitive operational plans should be encrypted before they enter review, automation, or payment rails.

PrivateDAO treatment

Browser AES-GCM encryption creates a local encrypted packet, hashes ciphertext, and signs only the digest on Testnet.

Proof action

Open Services, pick Encrypt Manifest, anchor a claim, verify locally, export public attestation.

MagicBlock Private Payments
Testnet path
Pain

Reward and payout corridors expose timing, recipients, and operational intent.

PrivateDAO treatment

MagicBlock corridor receipts and visitor-signed encrypted claims make private payments testable while preserving a visible execution trail.

Proof action

Open the private payments service, anchor a claim, and inspect corridor evidence.

MagicBlock Claim
Testnet path
Pain

Private payment UX needs a single route from payment corridor to explorer-visible proof.

PrivateDAO treatment

MagicBlock corridor evidence, health checks, and visitor-signed encrypted payment claims become one Testnet-verifiable lane.

Proof action

Open MagicBlock, inspect on-chain proof, anchor the MagicBlock claim, verify the digest transaction.

Umbra / Cloak Settlement
Testnet path
Pain

Vendor and contributor payments reveal counterparties before the organization wants disclosure.

PrivateDAO treatment

Recipient-private settlement intent, rail health, and selective-disclosure receipts keep the operation private but reviewable.

Proof action

Prepare settlement intent, forward through the rail, anchor the encrypted claim, verify receipt.

Ika / 2PC-MPC Custody
Testnet path
Pain

Treasury operations need stronger signing control than a single hot-wallet action.

PrivateDAO treatment

Ika readiness, Solana pre-alpha final approval, and custody preparation expose the threshold-signing path as an execution rail.

Proof action

Open Encrypt/Ika operations, inspect readiness, prepare custody, anchor an Ika claim.

Ika 2PC-MPC Approval
Testnet path
Pain

Treasury custody claims are weak unless the approval, readiness, and signing boundary are inspectable.

PrivateDAO treatment

Ika readiness, Solana pre-alpha final approval, custody preparation, and a visitor Testnet claim form one reviewable path.

Proof action

Open Encrypt/Ika operations, inspect final approval, prepare custody, anchor the Ika 2PC-MPC claim.

Jupiter + Torque Treasury
Testnet path
Pain

Treasury moves lose context when routing, approval, and growth/accounting events live in separate tools.

PrivateDAO treatment

Jupiter route review and Torque event delivery connect treasury execution with operational telemetry.

Proof action

Preview the route, run the claim or event lane, then inspect provider status.

Torque MCP Growth Loop
Testnet path
Pain

Growth rewards become untrustworthy when product activity, treasury policy, and event delivery are split.

PrivateDAO treatment

Torque MCP/event delivery is tied to governed treasury context and an on-chain digest claim for reviewer-visible proof.

Proof action

Open Torque, inspect provider status, trigger/prepare event delivery, anchor the Torque MCP claim.

Palm USD Utility Layer
Testnet path
Pain

Stablecoin payroll, grants, and rewards usually expose operational context or sit outside governance proof.

PrivateDAO treatment

PUSD becomes a governed settlement rail: prepare private payroll/grant/reward context, encrypt the claim, sign from wallet, and verify public-safe evidence.

Proof action

Open the PUSD route, anchor the PUSD utility claim, inspect the utility API, then verify the matrix anchor.

QVAC + GoldRush Intelligence
Testnet path
Pain

Signers approve proposals without enough risk, history, counterparty, or treasury context.

PrivateDAO treatment

QVAC local reasoning plus GoldRush/Covalent, Zerion, QuickNode, and provider status create the pre-sign intelligence gate.

Proof action

Open Intelligence, review Operational Gravity, then continue to Execute.

Operating journey
Review is the decision gate before any signer approves treasury or governance actions
Freshness
12d old

This route exists between wallet connection and signature approval. Read the risk context here, then move to execution only when the policy, route quality, and proof path are clear.

Connect
Scaling
Wallet evidence intake is active across desktop and mobile paths
Review
Verified
DAO bootstrap and proposal creation are captured in the governance evidence lane
Sign
Verified
Commit, reveal, finalize, and execute signatures are all captured in the wallet-driven lifecycle
Verify
Scaling
Verification continuity exists, but some evidence lanes are still being expanded
Next step
Expand wallet/device evidence
On-chain lifecycle is captured, and wallet/device evidence is attached through signed capture packets as each path is verified.
Open next route
Execution command surface

Every major route must lead to review, execution, or verification

PrivateDAO is organized as an operating path: intelligence reviews the action, privacy rails prepare the protected packet, the user signs from the wallet, and proof routes expose the receipt or blockchain evidence. The normal user should not need code or a terminal; the interface carries governance, treasury, private intent, encrypted claims, wallet-first signing, and verification as one browser flow.

Governance treasury

Move from governance token intent to treasury policy, private intent, wallet approval, and Anchor 1.0.1 proof.

Governance token + treasury + Anchor 1.0.1
Intelligence

Review wallet, proposal, RPC, provider context, and QVAC local-first risk before signing.

GoldRush, Zerion, QuickNode provider status
QVAC

Run local-first sensitive decision intelligence before any treasury or governance signature.

QVAC runtime proof + local-first boundary
Privacy claims

Generate a visitor-repeatable encrypted claim and prepare a Solana Testnet memo.

AES-GCM packet + Testnet memo commitment
Encrypt / Ika

Open REFHE receipts, Ika Solana final approval, and custody preparation.

Ika Solana final approval signature
Execute

Run wallet-first payroll, settlement, treasury, or reward operations.

Wallet signature, receipt, proof route
Growth + stablecoin

Use Torque, Jupiter, Zerion, Supabase receipts, and PUSD-ready rails.

AWS read-node + Supabase counters
This route is easiest to understand after /learn and a real Testnet action from /govern. The goal is simple: help the signer understand risk, treasury context, RPC quality, and gaming consequences before pressing approve and moving to /execute.
Pre-execution gate

Execution should not run before this gate is clear

Proposal risk score reviewed
Counterparty context checked
Liquidity and route quality reviewed
Proof and audit path prepared
Sensitive DAO and treasury decisions use the QVAC local-first path; general encrypted analysis uses the SolRouter lane. Review the exact boundary at /documents/solrouter-vs-qvac-boundary.
Live proofs
2

Baseline proof and dedicated V3 proof packet are both reviewer-facing

ZK anchors
3

On-chain proof anchors exposed in the Testnet evidence path

Wallets
50

Multi-wallet Testnet rehearsal already captured and packaged

Commercial rails
4

Grant, fund, gaming, and enterprise service packs remain part of the UI

Decision-to-execution spine

GoldRush does not stop at analytics; it feeds the encrypted execution path

Use this sequence when a judge asks how intelligence becomes action: provider data informs a decision, the sensitive part is encrypted, the wallet signs, and the proof path remains visible.

Not a chatbot

AI in PrivateDAO exists to explain hard decisions, not to distract from them

This route is intentionally operational. It helps users understand proposal review context, treasury execution context, voting posture, RPC quality, and gaming-governance implications before they sign or execute anything.

Security + Intelligence layer

This is where AI belongs in PrivateDAO: proposal review, treasury execution review, voting compression, RPC interpretation, and gaming-governance assistance. It is decision support, not a shallow chatbot.

Operational intelligence
User-facing analysis
Hugging Face free-ready path

How to use this route

Open it before signing when you want a plain-language explanation of proposal or treasury risk.
Use the RPC analyzer when the product feels slow and you want the data path explained without digging through logs first.
Use the gaming path when governance and reward decisions need to stay fair, fast, and understandable to non-experts.

Proposal Review AI

Proposal execution review

Execution notes attached
Intelligence output

This proposal should keep explanation, trust context, and destination rationale visible before signatures are collected.

The point of this output is not to replace human judgment. It is to compress hard governance, treasury, RPC, and gaming context into something a signer can actually understand before acting.
Transfer size is meaningful enough to justify an explicit treasury review note.
Recipient has no prior usage history in this governance context yet.
Timelock is compact, so timing context should stay explicit before execution.
Hugging Face free posture

This layer is built to help users now with browser-side intelligence and clear governance heuristics. If you later want a free open-model path, the same UX can be connected to a Hugging Face-hosted summarization or classification adapter without changing the product surface.

Operating map

Intelligence feeds every operating lane

This is not a detached analytics page. Intelligence feeds governance review, treasury route choice, payroll preparation, confidential payment rail selection, compliance posture, and wallet-first execution clarity before the user signs.

How intelligence feeds every lane
Governance receives proposal review, risk framing, and policy context before a signer approves.
Payments receive counterparty review, settlement lane selection, and private rail clarity before funds move.
Payroll receives encrypted operational preparation so payout metadata stays out of shared review surfaces.
Treasury receives wallet history, stablecoin visibility, and route comparison before rebalance or disbursement.
Wallet-first flows receive simpler user context so normal operators can act safely without losing technical truth.
GoldRush intelligence workbench

Structured on-chain intelligence for treasury and counterparty review

This surface makes GoldRush prominent where it belongs: before signature. It turns wallet history, stablecoin flow, counterparty trust, and holdings queries into a pre-execution review lane for normal users and a live evidence lane for judges.

Live execution
This page does not move funds. It prepares signer context only.
Health / status
Vendor, fallback, and runtime source states stay visible per request.
Intent receipt
Every run can persist a reviewer-visible receipt without claiming settlement.
Full settlement
Settlement belongs to Umbra, Cloak, and MagicBlock lanes after review.
Query template
Delivery state
Run a live Covalent GoldRush intelligence request here. The hosted read-node now forwards configured GoldRush, Zerion, SNS, and Solana RPC checks for reviewer-visible pre-sign context.
Degraded fallback
Portfolio summary
Assets tracked
Stable positions
Estimated valueN/A
Preview txns
Risk signals
Run a live query to generate reviewer-facing risk hints.
Top holdings
No holdings loaded yet.
Stablecoin review
No stablecoin positions returned for this wallet.
Prepared request payload
{
  "queryType": "wallet-history",
  "chainName": "solana-mainnet",
  "walletAddress": "So11111111111111111111111111111111111111112",
  "include": [
    "transactions",
    "classifications",
    "token-metadata"
  ]
}
Latest response preview
Ready for a live Covalent GoldRush query. Run the workbench to populate this reviewer packet with wallet intelligence before signing.
QuickNode stream intelligence

Live Solana Testnet stream intake for proof freshness and operational telemetry

PrivateDAO now treats QuickNode as infrastructure, not a logo. Streams can send Testnet block or program-log data into a protected webhook, where the product converts noisy chain payloads into reviewer-safe intelligence: program matches, transaction health, compute usage, and evidence freshness before a signer executes.

QuickNode
real-time Solana stream
GoldRush
wallet and counterparty context
QVAC
local-first decision brief
Stream endpoint
api.privatedao.org/api/v1/quicknode/stream
Authenticated webhook for Solana Testnet Programs + Logs or Block datasets. Do not point QuickNode at privatedao.org; use the api subdomain.
Payload posture
live stats
Large raw blocks become accepted-payload counters, program hits, compute usage, and proof freshness signals.
Security
env-token only
Secrets live in deployment environment variables; no stream token is committed to GitHub.
Decision use
data-to-intel
QuickNode feeds runtime telemetry, GoldRush adds wallet context, and QVAC turns both into signer guidance.
SNS identity lookup

Use a name.sol identity instead of forcing raw wallet input

PrivateDAO resolves Solana Name Service domains locally from the browser before a user moves into counterparty review, treasury settlement, or proof. The resolved address is still shown before signing.

Enter a .sol name to resolve it before using a raw wallet address.
QVAC sovereign AI layer

Local-first decision layer for sensitive DAO operations

QVAC is used where disclosure would hurt the operator: private payroll, confidential treasury proposals, compliance review, and high-value votes. It prepares the brief locally before signing so sensitive governance intent does not need a centralized model endpoint.

On-device capability
WebGPUnot detected
WebGLnot detected
WASMnot detected
Workersnot detected
Languageunknown
QVAC SDKinstalled; browser model runtime active
Runtime package@qvac/sdk + @xenova/transformers
Runtime versionruntime proof
Local modelqvac/fabric-llm-finetune
Operational local brief
Powered by QVAC fabric-llm running locally — zero cloud dependency. No API key. No centralized model call.
Local execution brief
Local deterministic fallbackqvac/fabric-llm-finetune
Operation: private_treasury_execution | Amount: 1250 USDT | Privacy mode: shielded | Risk notes: new recipient + rebalance path
Operation typeprivate_treasury_execution
Privacy modeUse shielded/private mode with scoped viewing-key audit evidence.
CounterpartyNew recipient detected: run counterparty trust review before settlement.
New recipient signal detected: run counterparty check before settlement.
Runtime capabilities
@qvac/sdk-installedqvac-fabric-transformersdeterministic-local-brief
Local LLM policy brief before sign
Offline translation for multilingual ops teams
Speech-to-text command capture on device
OCR of invoice / payroll attachments locally