Roadmap
Ordered by dependency, not by wish. Each item derives from something that already runs.
Built
Private orders
Set your price. Nobody sees it until it fills. A sealed book, a swap circuit, and a vault that finishes the output note on-chain against the real Uniswap v4 pools.
Open the deskNext
The terminal
A private trading desk on our own rails: change notes, partial fills, a relayer so the gas payer is never you, and a proof that you called it.
Items 03, 04 and 06 belowLater
Wallet extension
Your positions, private, in the browser you already use. The distribution of the desk.
After the relayer011 day
Testnet 46630, verified on Blockscout
The holding path with a public explorer link. Orders stay on the mainnet fork until USDG and pools exist there.
022 days
Withdraw with the real nullifier
The withdraw circuit is compiled and its verifier deployed. Withdrawing the USDG note a fill created proves it is a first-class note.
034 days
Change notes and partial fills
A second output in the swap circuit. An order stops spending the whole note.
043 days
Relayer and paymaster, ERC-4337
The address that deposited never signs a withdrawal or a fill. The protocol pays the gas out of its fees.
053 days
Note indexer
Portfolio and desk history rebuilt from NoteCommitted, NoteSpent and OrderFilled.
064 days
Prove you called it
A fifth circuit over OrderBook.placedAt: an order was placed before a date and filled at a price, without revealing which.
076 days
Association proofs for eligibility
Privacy Pools style: prove the deposit belongs to an approved set without revealing which one.
082 days + liquidity
$AHOOD in circulation
A Uniswap v4 pool with liquidity and the first permissionless buyback and burn.
Mainnet is not an item. It is a config change after an external contract review, after the issuer risk is put in writing, and after the route table is re-measured that day.