COORDINATED DISCLOSURE, WITHOUT THE IDENTITY LEAK

Report the critical bug.
Keep the researcher out of the blast radius.

Encrypted reports. Cryptographic authorship. Deadlines a vendor cannot quietly rewrite. Fixed-tier rewards settled through STRK20.

Create encrypted case Inspect privacy boundary

IMPLEMENTED Browser encryptionTESTED Destination-bound claimsBLOCKED Live wallet validation

VENDOR PROGRAMLOCAL KEY CONTROL

Publish a key without giving VeilZero the private half.

Generate an X25519 program key in this browser. Only the public key is copied into the researcher form; the private package is downloaded directly and never persisted.

No program key generated.

Program nameDisclosure policy Committed publicly; do not include report detailsReward token addressAcknowledgement SLA hoursRemediation SLA daysFixed reward tiers token units, strictly increasing

Program ID: —
Encryption key commitment: —
Policy commitment: —

The vendor key package decrypts every report for this program. Store it offline; never commit or share it.

RESEARCHER CONSOLELOCAL-FIRST

Open a case without opening your identity.

The plaintext below is encrypted locally. This public demo does not submit a transaction and never reports a fake success.

ON-CHAIN CASE LIFECYCLE

Commitments force the process into daylight.
The report stays in the dark.

01SubmittedReport + ciphertext commitments

02AcknowledgedAcknowledgement clock stops

03AcceptedFixed reward tier is selected

04Reward authorizedExact tier locked to this case

05SettledOne-time nullifier + shielded note

VENDOR TRANSACTION HANDOFF · PREVIEW ONLY

Verify the researcher's claim commitment.
Build bounded calls without signing them.

Import the researcher's case-signed reward request. VeilZero verifies its program, case, public key, message binding, and signature before it can enter an authorization call.

Reward authorization request JSON, maximum 32 KiB

No reward authorization request imported.

Undeployed VeilZero contract addressReserve funding amount 18-decimal token unitsReward tierAuthorization expiry hours from this local previewOptional clarification-request commitment

These are mutually exclusive handoff calls, not an executable batch. The address is intentionally undeployed; current chain state, fee estimates, budget checks, wallet prompts, receipts, and event reconciliation are required before each separate human signature.

SELECTIVE EVIDENCE

Verify one case.
Learn nothing about the researcher's other cases.

Import a public authorship proof. Verification checks its case/report commitments, challenge, case public key, and Stark signature locally. The file is not uploaded or persisted.

Authorship proof JSON, maximum 32 KiB

No authorship proof imported.

READ-ONLY MAINNET EVIDENCE

The live pool path is identified.
No transaction is implied.

Network: Starknet mainnet · pool v2.0
Pool: 0x040337b1af3c663e86e333bab5a4b28da8d4652a15a69beee2b677776ffe812a
Observed class: 0x067dddd89d80fedadc06b6f160798f94800a4a70164e5a24301cd0d6076b554d
Helper ABI: Single Span<OpenNoteDeposit> · compatible at observation
Protocol fee: 6 STRK per pool action at block 14205166
VeilZero state: Contract not deployed · transactions 0/3

The pool is upgradeable. Address, class, ABI, fee, and wallet estimate must be rechecked immediately before every browser signature.

Inspect live pool ↗

DEVELOPER DIAGNOSTIC · READ ONLY

Probe the wallet before trusting a transaction path.

Discovery follows the current Wallet Standard. A probe may request account permission, then reads chain, supported API versions, and STRK20 balance capability. It never signs or submits.

No compatible Starknet wallet detected.

Discovery starts in this browser; no account is connected.

Fixed-value action preview

After connection, build the exact shield, private self-transfer, and unshield actions locally. This does not call the wallet again, estimate a fee, create a proof, sign, or submit.

Token addressAmount 18-decimal token units

Connect through the probe above before building account-bound previews.

A preview is not a fee estimate or transaction. Re-read the pool fee, obtain a wallet estimate, apply the 100 STRK budget gate, and use a separate human signing gate before any write.

PRIVACY BOUNDARY

Precise claims, not privacy theatre.

PUBLIC BY DESIGN

Program policy and contract addresses
Case/action existence and timestamps
Deadlines and lifecycle status
One-time claim secret and signature after settlement
Shield deposit address, token and amount

POTENTIALLY CORRELATABLE

Timing and distinctive action sequences
Ciphertext size class
Browser, network and IP metadata
Repeated amounts and low anonymity sets

Timing, amount patterns, browser/network metadata, and low anonymity-set activity can still correlate actions. Shield deposits are public. VeilZero is unaudited experimental software.