Developer tooling

Private settlement as an integration, not a circuit rewrite.

As the protocol matures, Hypertron will expose reusable SDKs, APIs, and language-specific crates around the machinery that today lives inside our own frontend: note discovery, transaction construction, proof generation, relaying, payment verification, and selective disclosure.

The goal is a developer experience closer to integrating a payment API than implementing a privacy protocol from scratch.

Consumers

What should be able to call this layer.

Hypertron is not trying to win by inventing another cryptographic primitive. The work is making the existing pool easy to consume.

IntegratorIntended outcome
WalletA private-send option against the shared pool, without embedding circuit engineering in the wallet team.
DEXSettle a fill privately so the trade amount is not published on the ledger.
PayrollConfidential stablecoin disbursement while deposits and withdrawals stay visible on Stellar.
Merchant appPrivate stablecoin checkout without learning ZK circuits, via workspace or API today, SDK later.
Any applicationCall an API or SDK and let Hypertron handle proving, relaying, and disclosure underneath.
SurfaceJob
Note discoveryScan encrypted blobs, match commitments to on-chain leaves, build a local unspent set.
Transaction constructionSelect notes in {1, 2, 4}, assemble public inputs, and choose deposit / transfer / transfer_n / unshield.
Proof generationRun Groth16 in a browser worker (or native crate) against the registered proving key.
RelayingSubmit a valid private transfer so the customer is not the fee payer (CAP-0015).
Payment verificationConfirm a settlement against the pool without holding a spend key.
Selective disclosureExport viewing material, then payment-specific receipts that an auditor can verify independently.

Current state

The client logic is ours. It is not a third-party SDK.

Today you integrate through the open contracts, the Payments API, or the merchant workspace. There is no published typed client for wallets or DEXes.

  • Browser proving, note math, and checkout coin selection live in this frontend and in prover-wasm. They are not versioned as a public package for integrators.
  • The pool ABI is already callable: Apache-2.0 contracts on Stellar testnet. A Soroban app can deposit, transfer, and unshield without waiting on the SDK.
  • Relaying, client Merkle-root checks, and invoice-bound receipts are still protocol/client work. Packaging them for third parties follows those shipping.