A non-production demonstration of private dollar payments inside Signal, anchored to public Bitcoin signet.
Consumer demonstration, not a production Signal or OpenCSV interface. The Signal fork and temporary Swift bridge exist to show this experience to Signal's team. They are not a shipped feature, supported ABI, upstream commitment, or formal-verification layer.
The film follows Bob sending 1 Test USD to Carol on public Bitcoin signet. Every Signal screen is captured simulator footage; explanations appear beside the interface, never over it.
36.288 seconds · actual Signal simulator footage. Dead pauses are cut; all retained action plays at normal speed. The moving dot is an added illustration of the encrypted consignment path, not Signal UI. Test USD is signet-only test value with no monetary or redemption claim. Cut details and source-recording hashes: message-flow page and the journal.
Later live gates used the same Bob and Carol wallets:
5 + 5 Test USD shared one Bitcoin transaction,
and a separate 1 Test USD payment was
fee-bumped without becoming a second payment
(replacement confirmed at height 316803). A later zero-confirmation round
trip moved 45 Test USD and a 10 Test USD return while both anchors were
still unconfirmed
(parent,
child);
both follow-up fixes from that run are merged
(Signal #8
at 1e3472b9,
opencsv-rs #16
at 908bbb53). Both anchors later settled at height 316824.
Detailed receipts are in the status cards and the
journal.
Each item links to its receipt. Nothing on this page is a production release.
Issuer authorization and predecessor keys are bound in-circuit.
The 94-bit-floor proof profile, C1 co-funded transactions, and C2
two-round peer gossip have reproducible Rust receipts. The separate
translated-Rust kernel refinement has 15 audited declarations on
formal-aeneas/main.
The production FRI profile is unchanged. A new authenticated circuit
spends one predecessor into recipient plus change with no fake padding
coin. On the physical iPhone 16e it proved in 6.435 seconds, verified in
19.75 ms, and produced a 788,047-byte proof. The shape is on the
reference main line through 46a3e48.
A4/A5 adoption, dated signet/readiness evidence, C2 adversarial fixes, and the Rust-owned account-wallet foundation are merged. The independent adversarial re-review was deferred by the owner, not represented as completed.
db818658;
PR #7
closed the hosted CI gate at 4804e094 with
green
default-branch CI (1,552 tests passed, 0 failed).1e3472b9 with all hosted gates
green. It fixes canonical outgoing-presentation lookup.908bbb53 with green Rust CI.9b72d86d. Its PR-tip jobs
passed; the post-merge default Xcode job failed while recovery passed.The demonstration wallet cannot spend Bitcoin outside the protocol. It exposes fee reserve, UTXOs, confirmations, and evidence, but Bitcoin can be spent only by an OpenCSV transfer or protocol-safe fee bump. There is no general BTC send, mint interface, or issuer secret in Signal; issuance is a separate headless operator workflow outside the app. There is no OpenCSV anchor server. The exact gates are in issue #1 and the Signal architecture in issue #3. The OpenCSV test issuer's canonical disclosure is in the test USD issuer terms.
Formal verification, performance, and delivery status each have their own page, linking to the underlying source, CI, and machine-readable data.
The 72-declaration specification ledger, the 15 translated-Rust refinements, axioms, assumptions, and gaps.
Open the proof map → PerformanceChange batch size and fee rate in the CI-checked model, then inspect equations, limits, and benchmark receipts.
Open the calculator → RoadmapCompleted, active, open, and owner-gated tracks, each with its receipts. No track is a release claim.
Open the roadmap →Bitcoin provides ordering and availability. Everything else — amounts, coins, validity proofs — moves directly between sender and recipient, and the recipient verifies it client-side.
A v3 mint proves knowledge of the issuer seed committed by genesis
and binds the exact statement in-circuit. MINT ∥ asset_id ∥ V
remains public for supply audit; new coin openings remain private.
The Rust wallet reserves Bitcoin fees, fixes input zero, and anchors a 64-byte context-bound record. Raw nullifiers, coin openings, and the recursive proof travel only in the consignment, e.g. over Signal.
The recipient verifies one history-independent proof and one Bitcoin anchor, then evaluates first occurrence from its own header/filter/block view. Explorer data may accelerate discovery; it cannot decide acceptance.
OpenCSV extends Shielded CSV's client-side validation with issuer-gated issuance, auditable supply, and light verification.
SIGHASH_ALL. The current
reference profile supports up to 64 participants and unanimous safe RBF.| Proof | M4 prove (warm) | Verify | Size | iPhone 16e prove (cold) |
|---|---|---|---|---|
| Genesis mint | 102 ms | 14.8 ms | 535,705 B | 181 ms |
| V4 one-input / mint predecessor | 4.80 s | 20.4 ms | 788,068 B | 6.44 s |
| Transfer / mint predecessors | 7.77 s | 22.2 ms | 854,105 B | 11.25 s |
| Transfer / node predecessors | 9.76 s | 21.4 ms | 841,464 B | 14.47 s |
| Redeem | 4.71 s | 19.9 ms | 778,466 B | 7.28 s |
Where OpenCSV sits among RWA and client-side-validation designs.
| Client-side validation | Shielded transfers | Auditable supply | Issuer-gated issuance | Trustless light verification | Fork-free on Bitcoin | |
|---|---|---|---|---|---|---|
| ERC-20 (Ethereum) | no | no | yes | yes | trusted RPC | n/a |
| RGB | yes | partial | per-contract | yes | full history rescan | yes |
| Taproot Assets | yes | partial | issuer proofs | yes | issuer proofs | yes |
| Zcash | no (own chain) | yes | no | no | lightwalletd (trusted) | no |
| Shielded CSV | yes | yes | no | no | full scan or trusted indexer | yes |
| OpenCSV | yes | yes | yes | yes | compact filters + PoW, on-device | yes |
Issuer-gated issuance and auditable supply make OpenCSV an RWA scheme rather than a bearer asset. On light verification: in plain Shielded CSV, checking a double-spend means scanning every nullifier the chain has ever carried, or trusting an indexer that did. OpenCSV's marker output makes anchor blocks discoverable through the same compact block filters light wallets already sync, so a phone checks first occurrence locally from proof-of-work and a few kilobytes per block. The scan-soundness argument is machine-checked; see the formal page.