The model
Built in, not bolted on. Screening at the edge. No permanent back door.
Status: design. XEROPAY is being built. These pages describe intended behaviour. Nothing here is claimed as live mainnet. Details can change. See What's live.
Counterparties say yes when they can check the perimeter and when you can prove a fact without opening the account. They say no to a mixer-shaped blob. XEROPAY is specified as the first, not the second.
Three layers
- Edge screening — enter and exit.
- Viewing keys — scoped read access you issue.
- Attestations — yes-or-no proofs.
Who sees what
| Party | Public wallet | XEROPAY |
|---|---|---|
| Accountant | Screenshots and a shared sheet | A key scoped to the filing window |
| Auditor | Full history, forever | A read-only key that expires |
| Lender | A public balance they can watch | A proof of balance above X |
| Ramp / issuer | Nothing but a mixer-shaped address | Edge screening plus association-set proofs |
| Counterparty | Your whole balance from one payment | A one-time stealth address |