Treasury controls

Competitors and journalists should not be able to read your runway in real time.

Status: design. XEROPAY is being built. These pages describe intended behaviour. Nothing here is claimed as live mainnet. Details can change. See What's live.

Protocol treasuries on public chains are spectator sports. A shielded treasury is specified so only operators and named auditors see the books — with caps, approvals, and vaults so one key cannot empty the company.

	Public treasury	XEROPAY
Runway	Visible to anyone	Encrypted notes
Payroll	Salary graph	Stealth destinations
Vendors	Every invoice on-chain	Private settlement, optional proof

Multi-sig and policy

Co-signers for companies that cannot put funds behind one device. Spending policy (limits, destinations, time locks) belongs with the workspace, not in a public config anyone can read as a hint.