<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->

Confidential Payments Diagram

flowchart LR
  A["Encrypted payroll or bonus manifest"] --> B["Manifest URI + hashes"]
  B --> C["configure_confidential_payout_plan"]
  C --> D["Proposal-bound payout plan PDA"]
  D --> E["Commit / Reveal / Finalize"]
  E --> F["Timelock clears"]
  F --> G["execute_confidential_payout_plan"]
  G --> H["Treasury releases aggregate batch"]
  H --> I["Settlement wallet distributes off-chain against encrypted manifest"]

Reading The Diagram

• The encrypted manifest stays off-chain.
• The proposal-bound payout plan PDA becomes the immutable on-chain reference.
• Governance approves the aggregate batch through the standard lifecycle.
• The treasury releases only the aggregate amount to the settlement recipient.

Why This Matters

The model keeps compensation operations:

• reviewable
• proposal-scoped
• timelocked
• replay-resistant

without forcing the DAO to publish the full payroll sheet on-chain.