Cloak Private Settlement

This route is the direct reviewer and operator surface for Cloak-aligned private settlement. It prepares private treasury and payroll intents, forwards them through the settlement proxy, and keeps execution references visible for judge and proof flows.

Open govern Open execute Open curated docs

Route summary

Use PrivateDAO like infrastructure, not like a static brochure

This services route explains hosted reads, privacy policies, payout corridors, and the integration starter needed to plug the product into real organizations.

Use PrivateDAO like infrastructure, not like a static brochure

Execution model

Prepare → forward private intent → verify receipt

Operators can run confidential settlement intents for payroll, vendor payouts, and treasury motion from one route. The same intent and reference path can be inspected from Judge and Proof without moving to terminal workflows.

Open execute lane Open judge lane Open proof lane

Choose the privacy posture that matches the operation

PrivateDAO is strongest when the privacy boundary is explicit. Pick the policy that fits the action, then open the matching route and proof path.

Best fit now

Reviewer-visible proof

Best when judges, buyers, or community reviewers must follow every public hash while sensitive inputs stay abstracted.

Run this policy Verify this policy

Cloak SDK contract

UTXO-first devnet lane, verified without exposing secrets

This route now distinguishes the hosted PrivateDAO intent receipt from the official Cloak devnet SDK surface. Reviewers can see the exact SDK package, program, relay, and probe command used for live validation.

SDK

@cloak.dev/sdk-devnet

0.1.5-devnet.1 installed in the web app.

Devnet relay

https://api.devnet.cloak.ag

Checked by the generated live probe packet.

Secret handling

The live probe records only public program IDs, public relay status, and public transaction or receipt references. It does not print private keys, viewing keys, UTXO private keys, raw notes, or seed material.

Capability matrix

UTXO API

Primary

transact, createUtxo, createZeroUtxo, transfer, withdraw, and swap helpers are the active integration contract.

Viewing keys

Ready

The SDK path derives nk for scan/decrypt readiness, and the product boundary forbids logging private key material.

Relay / Merkle

Live checked

The repo probe checks Cloak devnet relay health and the executable devnet program account.

Compliance history

Available

Scanner and CSV exports are present in the SDK surface; full history requires a funded wallet and persisted UTXOs.

Read-node receipt

Live

The hosted PrivateDAO API returns a Cloak-labelled testnet intent receipt for reviewer-visible continuity.

Open SDK probe Open proof lane

Private settlement rail workbench

Prepare and forward rail-specific private settlement intents

This workbench turns private settlement into a real operator action surface. It prepares a Cloak or Umbra execution intent, forwards it through a rail-specific proxy when available, and records the resulting receipt path.

Settlement rail

Operation type

Asset

Amount

Recipient

Raw Solana address or .sol SNS name accepted.

Operator memo

Open proof route Open packet

Delivery state

Prepare a private settlement intent, forward it through the read-node rail endpoint, and store the receipt.

Prepared intent

{
  "rail": "cloak",
  "operationType": "private-payroll",
  "asset": "USDC",
  "amount": "250",
  "recipient": "B3STL1akxLGLvPpKd6Grz19jjVySkWrGgHFwGNK8yEZ",
  "memo": "Payroll tranche / reviewer-safe memo",
  "auditMode": "selective-disclosure",
  "recipientVisibility": "private-by-default",
  "createdAt": "2026-08-27T19:40:57.419Z"
}

Latest response preview

The rail receipt will appear here after the operator forwards the prepared intent.