What you cannot see and why
Status: Built, runs on simulatorStatus: Coming soon
A backer can inspect transaction records and permitted disclosures, but holding units does not disclose raw income documents or the personal reason behind a status.
Information is separated by purpose
The issuer prepares the income figure and its supporting evidence. A report verifier or chosen attestor checks the relevant material for the reporting path. A holder receives the resulting records, not the reviewer’s evidence bundle.
| Information | Backer or holder visibility |
|---|---|
| Payment amounts, positions, and claims | Public onchain. Keeping income documents offchain does not conceal these amounts. |
| Income commitment | Public onchain; it is a commitment to the figure and its salt. |
| Raw income documents and accountant-review opening | Encrypted for the chosen attestor in the accountant-reviewed path; not disclosed to holders. |
| Income-source kind in a report | The backend omits it from holder report rows. |
| Hardship reason and evidence | Encrypted for the chosen attestor; holders receive status and dates only. |
| Disclosed terms | Available to eligible backers through a logged read. This is a separate permission from income evidence. |
A proof is not the underlying receipt
The payment circuit exposes commitments and the payment result among its public inputs. Its private witness is not a public folder of receipts. A backer cannot use a status change as an entitlement to someone’s tax records or explanation of their personal circumstances.
The threshold and rate per unit also need careful wording: the onchain-split verification tier stores them in plaintext. Other paths use the terms commitment and controlled offchain disclosure. There is no blanket promise that all terms are hidden.
What the issuer sees about you
Bid deposits, revealed bids, positions, and claims can be public onchain. The terms access log also records who read the disclosed terms. The issuer can read that log; viewing terms should not be treated as anonymous browsing.
Status: Coming soonWhat can go wrong
Public payment amounts can support inferences even when raw documents are withheld. Access controls define the intended readers of a record; they do not promise that information can never be inferred or copied after an authorised disclosure.