Shielded payroll
Compensation that is not a public spreadsheet. Each employee receives into a stealth destination.
Status: design. XEROPAY is being built. These pages describe intended behaviour. Nothing here is claimed as live mainnet. Details can change. See What's live.
A public payroll run is a graph of who earns what. XEROPAY is designed so a company pays from a shielded treasury in one batch: each recipient gets a note at a fresh address. Colleagues cannot read each other. Outsiders cannot scrape bands.
Roles and thresholds
Who can initiate a run is separate from who can approve it. Large runs wait for a second operator. That is company policy encoded in the product, not a shared hot wallet with a spreadsheet on the side.
Batch files
CSV in, shielded notes out. The file stays with the workspace. The chain sees a batch proof, not a payslip. Recipients decrypt their own line.
Auditors
A viewing key scoped to the payroll vault and a filing window is how accountants get what they need without a dump of the whole treasury.