One transaction funds the fleet
Northwind holds 5,000.00 USDG in H081's shielded pool. The owner grants allowances to three agents in a single proof, and each agent gets its own rules.
One spent treasury note and four new commitments: three allowances and the change. No names, no amounts, no rules. The amounts travel encrypted to each agent.
| Agent | Lifetime | Daily cap | Per trade |
|---|---|---|---|
| desk-07 | 200.00 | 50.00 | 25.00 |
| desk-08 | 500.00 | 100.00 | 40.00 |
| desk-09 | 120.00 | 30.00 | 15.00 |
Each rule sits inside the agent's note. The owner can reclaim any note.
The limit is part of the payment
desk-07 has already paid two vendors today. Pick a payment to see whether a proof can exist. When a rule would be broken, there is no proof, so the payment cannot be made at all.
A payment shows who was paid and how much. It shows nothing about the treasury, the other agents or the rules. Blocked attempts never leave the browser.
An auditor gets one fact
Northwind's auditor asks whether desk-07 still holds at least a given amount. Pick a bound. A proof exists only when the claim is true, and it says nothing else.
The proof is bound to one audience, so nobody can replay it somewhere else. It is checked off-chain in one SDK call, or on-chain by the disclose verifier.
A lender can underwrite what it cannot see
Northwind pledges 40% of desk-07's spending to a lender. The lender and the share are fixed when the stream is created. Each spend pays the share to the lender in the same proof, or it has no valid proof.
The rate and expiry here are example values. The lender can verify the bound without seeing a single payment.
Spend more on the Spend step and these rows grow with it.
Who sees what
Five parties touched Northwind's money in this story. Each one learned only what it needed.
| Party | Sees | Never sees |
|---|---|---|
| Public chain | Commitments, and who was paid and how much | Treasury size, rules, remaining balances |
| Vendor | One payment | The runway behind it, or that a fleet exists |
| Auditor | One fact as of one block | Balances and payments |
| Lender | Remaining bound, pledge share, rate, expiry | The book and the counterparties |
| Owner | Every note, and can reclaim any of them | Holds the keys, so nothing is hidden |