{
  "ok": true,
  "source": "privatedao-privacy-execution-matrix",
  "generatedAt": "2026-05-28T18:27:40.409Z",
  "cluster": "testnet",
  "programId": "EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva",
  "posture": "wallet-first-private-operations",
  "summary": "PrivateDAO routes every sensitive service through review, encryption or privacy intent, wallet execution, and public-safe verification. Public outputs prove state transitions without exposing payroll rows, recipient context, private balances, or strategy intent.",
  "serviceMatrix": [
    {
      "service": "private-governance",
      "route": "https://privatedao.org/govern/",
      "executionMode": "wallet-signed Solana Testnet governance",
      "executionProofClass": "wallet-signed-onchain",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet",
      "currentOnchainStatus": "repeatable-wallet-execution",
      "privacyRails": [
        "commit-reveal",
        "ZK verifier companion",
        "nullifier-ready governance primitive"
      ],
      "proofEndpoints": [
        "/api/v1/runtime",
        "/api/v1/proposals",
        "/api/v1/cryptographic-readiness"
      ],
      "onchainEvidence": {
        "programId": "EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva",
        "zkVerifierProgramId": "5H7Afyqdh5yPekkZJ5UM2j3HNB2bRvU8aVv8XoqeAW1j",
        "zkReceiptTx": "zwqNsA3kNP1mgcaS6zNdR92LLdssFULXfsRdkMK3UxraKLM6wYDoPaWCwV3J9PqApK5xJJH8TpxsGyCRcdEah67"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Votes and proof receipts are separated from public identity claims; full Semaphore-style governance remains a release-gated primitive."
    },
    {
      "service": "confidential-payroll",
      "route": "https://privatedao.org/payroll/",
      "executionMode": "encrypted manifest plus evidence-gated payout",
      "executionProofClass": "onchain-signature",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/tx/2a8sHWgiVCZkstybMff2M9R6DVU4Y96Rfsg8mqYs7K3xcYSEG1zMcq2iSTNwLD6FgfXvxxxWpwEP9Tbyin47RXvE?cluster=testnet",
      "currentOnchainStatus": "testnet-executed",
      "privacyRails": [
        "REFHE envelope",
        "encrypted manifest hash",
        "selective-disclosure receipt"
      ],
      "proofEndpoints": [
        "/api/v1/refhe/payroll/proof",
        "/api/v1/cryptographic-readiness"
      ],
      "onchainEvidence": {
        "configureTx": "3fygnmHzFpRQEbHq9q6u3djBnkTEcYz9y1TSwxDmbnuemshrMwLmy9CqpjifjRb7SmW3DbmXrkyq35cnjU7mMSPi",
        "settleTx": "5TmS2AcpAmifcoG97U63Unzy7wt7B2NfyhBRs8Z6C4r1eqcWthEqf3GLcZXQ33sVYHf9YwfvBNhZD8ZZdt4HRwEY",
        "executeTx": "2a8sHWgiVCZkstybMff2M9R6DVU4Y96Rfsg8mqYs7K3xcYSEG1zMcq2iSTNwLD6FgfXvxxxWpwEP9Tbyin47RXvE"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Payroll row content stays in encrypted manifest/proof inputs; public chain evidence shows commitments and token movement."
    },
    {
      "service": "private-payments",
      "route": "https://privatedao.org/services/magicblock-private-payments/",
      "executionMode": "MagicBlock corridor and private payment proof lane",
      "executionProofClass": "onchain-signature",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/tx/22XW8XVhWwQtChNQK2aEqXv5BVBbckxUmu4NsisoZQW21KA5ii87gVNUTcNoZ9e1vYKnHmm62qP1girpzVXWN1WY?cluster=testnet",
      "currentOnchainStatus": "testnet-corridor-settled",
      "privacyRails": [
        "MagicBlock private corridor",
        "private balance challenge",
        "private transfer receipt"
      ],
      "proofEndpoints": [
        "/api/v1/magicblock/onchain-proof?refresh=1",
        "/api/v1/magicblock/health"
      ],
      "onchainEvidence": {
        "configureTx": "4UiUumtuGeDciojDA26PkQby7RFiTNb12UG4ACcvGMGfQj24PUPxK5Apeno7EY8mbCvq8nR6h6nfxDcBpjPvGvPj",
        "settleTx": "22XW8XVhWwQtChNQK2aEqXv5BVBbckxUmu4NsisoZQW21KA5ii87gVNUTcNoZ9e1vYKnHmm62qP1girpzVXWN1WY"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Payment corridor proves execution receipts while keeping private balance/login operations behind wallet-authenticated payment API flows."
    },
    {
      "service": "umbra-confidential-payout",
      "route": "https://privatedao.org/services/umbra-confidential-payout/",
      "executionMode": "recipient-private claim intent and relayer health corridor",
      "executionProofClass": "testnet-intent-receipt",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/?cluster=testnet",
      "currentOnchainStatus": "visitor-repeatable-intent-now-full-claim-signature-next",
      "nextOnchainGate": "SDK proof_account_data + UTXO slot data + submitted Umbra claim transaction",
      "privacyRails": [
        "Umbra relayer health",
        "claim request",
        "viewing-key-ready disclosure pattern"
      ],
      "proofEndpoints": [
        "/api/v1/umbra/relayer/info",
        "/api/v1/umbra/relayer/health",
        "/api/v1/private-settlement/intent"
      ],
      "onchainEvidence": {
        "relayer": "server-side relay endpoint when configured"
      },
      "testnetExecutable": true,
      "privacyBoundary": "The live surface prepares private settlement intent and relayer checks; full claim settlement is not claimed until SDK proof account data is recorded."
    },
    {
      "service": "ika-custody-and-interoperability",
      "route": "https://privatedao.org/services/encrypt-ika-operations/",
      "executionMode": "Ika Solana final approval plus dWallet/2PC-MPC custody preparation",
      "executionProofClass": "onchain-signature",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/tx/3hvwNpfrUxdkt44VEEuXDXuhgcseVZxBhnZEBnWCCQYbsd9rv3eQe9JiCGZPc63Fa3CptQET5qkr7UKLQ1Ev4xki?cluster=devnet",
      "currentOnchainStatus": "ika-solana-prealpha-final-approval-signed",
      "nextOnchainGate": "funded dWallet DKG + final Ika-network 2PC-MPC signature receipt",
      "privacyRails": [
        "Ika Solana final approval",
        "Ika Sui readiness",
        "Solana pre-alpha approval route",
        "2PC-MPC policy boundary"
      ],
      "proofEndpoints": [
        "/api/v1/ika/solana-prealpha/final-approval",
        "/api/v1/ika/solana-prealpha/readiness",
        "/api/v1/ika/solana-prealpha/approval/prepare",
        "/api/v1/ika/custody/prepare"
      ],
      "onchainEvidence": {
        "signature": "3hvwNpfrUxdkt44VEEuXDXuhgcseVZxBhnZEBnWCCQYbsd9rv3eQe9JiCGZPc63Fa3CptQET5qkr7UKLQ1Ev4xki",
        "protocol": "IKA_SOLANA_FINAL_APPROVAL_V1",
        "operator": "EFpoUvDwHwQJDW1dY2otjRbeH8todKSe8kJK9M2U5g2P"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Ika Solana final approval is signed on-chain through the pre-alpha operator. Ika-network dWallet DKG remains a separate receipt class."
    },
    {
      "service": "intelligence-and-risk",
      "route": "https://privatedao.org/intelligence/",
      "executionMode": "provider intelligence before private execution",
      "executionProofClass": "provider-plus-rpc-receipt",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet",
      "currentOnchainStatus": "pre-sign-intelligence-feeds-wallet-execution",
      "privacyRails": [
        "GoldRush wallet intelligence",
        "Zerion portfolio policy",
        "QVAC runtime proof",
        "QuickNode stream telemetry"
      ],
      "proofEndpoints": [
        "/api/v1/provider-integrations/status",
        "/api/v1/goldrush/query",
        "/api/v1/zerion/portfolio",
        "/api/v1/qvac/runtime-proof",
        "/api/v1/quicknode/stream/stats"
      ],
      "onchainEvidence": {
        "streamNetwork": "solana-testnet"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Provider data is converted into pre-sign risk context; sensitive decisions are not posted as raw strategy text on-chain."
    },
    {
      "service": "treasury-routing-and-growth",
      "route": "https://privatedao.org/services/jupiter-treasury-route/",
      "executionMode": "Jupiter order preview and Torque event relay around governed execution",
      "executionProofClass": "wallet-reviewed-route-plus-ingestion-receipt",
      "visitorRepeatable": true,
      "blockchainVerificationUrl": "https://explorer.solana.com/address/EP9xE8MJZ6FfyEwLqns6HDdUZBknEa7WGYs1Jzsecuva?cluster=testnet",
      "currentOnchainStatus": "route-preview-and-growth-ingestion-live-final-swap-signature-next",
      "nextOnchainGate": "wallet-signed Jupiter execution transaction governed by treasury policy",
      "privacyRails": [
        "Jupiter Developer Platform order mode",
        "Torque custom event relay",
        "policy-scoped execution receipts"
      ],
      "proofEndpoints": [
        "/api/v1/provider-integrations/status",
        "/api/v1/jupiter/order",
        "/api/v1/torque/custom-event",
        "/api/v1/execution-events/stats"
      ],
      "onchainEvidence": {
        "signingBoundary": "wallet-reviewed execution, not server-held user funds"
      },
      "testnetExecutable": true,
      "privacyBoundary": "Treasury route preparation is separated from final wallet signing; growth events are relayed only with scoped server credentials."
    }
  ],
  "crossServiceControls": [
    "No browser localStorage vote salt is required for the private voting remediation path.",
    "Provider keys are read from server environment only.",
    "QuickNode stream auth accepts scoped headers and does not persist raw payloads.",
    "Public pages receive proof endpoints and receipts, not private manifests or private keys.",
    "Every sensitive operation should preserve Review -> Sign -> Verify."
  ],
  "liveProofLinks": {
    "readiness": "https://api.privatedao.org/api/v1/readiness",
    "cryptographicReadiness": "https://api.privatedao.org/api/v1/cryptographic-readiness",
    "privacyExecutionMatrix": "https://api.privatedao.org/api/v1/privacy-execution-matrix",
    "judge": "https://privatedao.org/judge/",
    "proof": "https://privatedao.org/proof/"
  },
  "claimBoundary": {
    "mainnetFundsLive": false,
    "finalIka2pcMpcSignatureClaimed": false,
    "umbraFullClaimSettlementClaimed": false,
    "externalAuditCompleted": false
  }
}