1. Private Governance
Confidential decisions for Solana-native organizations.
Create or review DAO state, prepare proposals, commit/reveal private votes, inspect PDAO context, then verify the Testnet action.
This route packages the full confidential payment stack as an operational product surface: encrypted planning, private payout rails, intelligence-assisted risk review, and proof-linked execution continuity.
This services route explains hosted reads, privacy policies, payout corridors, and the integration starter needed to plug the product into real organizations.
We think that is broken. PrivateDAO enables organizations to operate privately while remaining cryptographically verifiable on Solana. Each layer below has a live route, a proof route, and when available a one-click API exercise.
Confidential decisions for Solana-native organizations.
Create or review DAO state, prepare proposals, commit/reveal private votes, inspect PDAO context, then verify the Testnet action.
Private budget and execution coordination before funds move.
Review treasury risk, preview Jupiter routing, keep encrypted payment metadata bounded, and route approved actions to proof.
Confidential payouts from organizations to contributors, operators, and task executors.
Generate a private settlement intent, preserve a receipt reference, and route the visitor to the matching proof lane.
Payroll integrity without exposing every contributor detail.
Use REFHE payroll proof, encrypted manifests, stablecoin payout context, and proof continuity for auditor-safe payroll review.
Decision support before governance or treasury authorization.
Summarize proposals, score risk, inspect wallet and treasury context, and detect abnormal governance or payment posture before signing.
Execution lineage for intent -> approval -> execution -> outcome.
Forward an approved operational event to the agent/growth rail while keeping the approval and outcome tied to verifiable receipts.
The confidential payments lane turns sensitive payout intent into encrypted metadata, wallet review, settlement receipt, and a verifier-visible proof path.
This section combines multiple rails. Some cards execute live flows, others expose health or receipt continuity. The boundaries stay explicit so visitors know what has already moved on-chain and what is still a review or readiness step.
This lane is not a trading flow. It is operational infrastructure for confidential payroll, encrypted treasury coordination, secure payout routing, and AI-assisted pre-sign controls, with each rail connected to review and proof surfaces on Solana Testnet.
Shielded treasury and payroll settlement path for confidential value movement with review-safe proof handoff.
Recipient-private payout lane for high-sensitivity disbursements and selective disclosure boundaries.
High-frequency execution path for private payment intent, commit continuity, and low-latency operation loops.
Client-side payload encryption and confidential execution commitments before any shared route receives metadata.
Encrypted payroll packet, computation commitment, and Ika custody readiness for confidential salary operations.
`UserShareEncryptionKeys` must be created before dWallet creation, and the selected curve must match the dWallet signature path. Any mismatch breaks authorization and decryption flows.
PrivateDAO exposes the MagicBlock corridor as a live proof lane: the read-node verifies the corridor PDA and the deposit, private transfer, withdraw, settle, and execute signatures directly against Solana RPC. Private balance reads still require MagicBlock challenge/login, so sensitive state remains wallet-authorized.
This route now distinguishes the hosted PrivateDAO intent receipt from the official Cloak devnet SDK surface. Reviewers can see the exact SDK package, program, relay, and probe command used for live validation.
The live probe records only public program IDs, public relay status, and public transaction or receipt references. It does not print private keys, viewing keys, UTXO private keys, raw notes, or seed material.
The live lane reaches Umbra's public relayer endpoint through the PrivateDAO read-node and keeps the exact claim boundary visible: browser clients still need wallet signing, SDK-generated proof account data, UTXO slot data, and relayer polling before a real claim is submitted. The upstream hostname is preserved as evidence; the PrivateDAO operating surface remains routed through the Testnet read-node.
For payment-lane planning, IKA economics matters at runtime: operation pricing, validator incentives, and governance adjustments can affect dWallet lifecycle costs (generation, presign, signing, resharing). This route keeps those economics visible to treasury operators before finalizing confidential execution policies.