[ THE METHOD ]

From intent to settlement,
one explicit lifecycle.

Lockey does not ask you to trust that a system is private. Each phase states what becomes public and what does not.

Privacy is a boundary, not a promise.

The lifecycle below is the product model. Proofs and contracts that enforce it are not built yet.

Shield

Move an asset from public state into Lockey private state.

Becomes public: That an address deposited into Lockey, and the amount deposited.
Stays private: Everything the asset does afterwards inside private state.

Private State

Hold the asset in private state, where balance is known to you and not to observers.

Becomes public: That the pool exists and its aggregate size.
Stays private: Your individual balance and its composition.

Private Transfer

Send value inside private state without publishing sender, recipient or amount.

Becomes public: That a valid state transition occurred and was verified.
Stays private: Counterparties, amount and the link between them.

Unshield

Return value to public state for settlement, on your timing.

Becomes public: The withdrawal and the receiving address.
Stays private: Which earlier deposit it came from, to the extent the anonymity set allows.

Disclose

Prove something specific about your private activity to a chosen party.

Becomes public: Exactly the statement you chose to disclose.
Stays private: Everything outside that statement — disclosure does not grant spending authority.

Public settlement is the point,
not the leak.

Robinhood Chain is the primary programmable settlement environment for this lifecycle. Public verification stays public; the intent behind it does not have to be.

See the modules →Trust boundaries

From intent to settlement,one explicit lifecycle.