Observer lensPublic view · no wallet required

What the chain sees

All on-chain requests — public metadata and encrypted handles only. Amounts and policy thresholds stay sealed regardless of who is watching.

Policy pack compliance

Travel

SaaS

Vendor

Marketing

Vendor registry

Loading vendor registry...

Privacy boundary

ShieldCardControlPlane

Public — visible to anyone

Request IDSequential on-chain counter
Employee addressWallet address that submitted the request
Policy packTravel, SaaS, Vendor, or Marketing
Department IDDept context attached at submission
Vendor IDVendor reference number (0 = none)
Risk bitmapFlags: vendor status, dept assignment
MemoPlain-text description from employee
TimestampBlock time of submission
Published statusAuto-Approved / In Review / Denied — after publish
Settlement receiptkeccak256 hash committed after finalisation

Sealed — FHE encrypted

Spend amounteuint32 ciphertext handle — value sealed on-chain
Pack hard limitEncrypted threshold — never leaves FHE storage
Pack auto-thresholdEncrypted boundary between auto-approve and review
Rolling budget capEncrypted per-pack epoch limit
Department budgetEncrypted dept accumulator — updated homomorphically
FHE decision operandsIntermediate ebool values discarded after eval

Policy evaluation runs entirely on ciphertext. No plaintext amount or threshold is accessible to the contract, validators, or observers at any point during evaluation.

On-chain requests

Loading public state from Arbitrum Sepolia...