{
  "markdown": "<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->\n# PrivateDAO\n\nPrivateDAO helps organizations keep sensitive operations private and make\nthe final outcome independently verifiable.\n\nThe public product message is:\n\n> Private decisions. Verifiable outcomes.\n\nThe current live website is [privatedao.org](https://privatedao.org/). This\nrepository is the engineering and evidence repository behind the platform;\nit is not the production deployment. Amazon, the live website, and the\ncurrent production database are operated separately.\n\n## Current Product Surface\n\nThese are the primary product lanes currently presented on the live site:\n\n| Product | Customer outcome | Live entry | Repository status |\n| --- | --- | --- | --- |\n| **Blind Verification** | Verify that a private policy or claim was satisfied without exposing sensitive inputs. | [Open product](https://privatedao.org/proof-workflows/blind-policy/) | Existing Solana product and proof surface |\n| **Private Governance** | Coordinate proposals, approvals, votes, and execution with a reviewable result. | [Open governance](https://privatedao.org/govern/) | Existing Solana governance application |\n| **Treasury Coordination** | Review and coordinate treasury actions with clear authorization and evidence. | [Open treasury](https://privatedao.org/treasury/) | Existing product corridor |\n| **Workflows** | Turn sensitive business processes into reviewable, evidence-linked outcomes. | [Explore workflows](https://privatedao.org/proof-workflows/) | Product surface assembled from existing capabilities |\n| **Confidential Auctions** | Run sealed bidding and publish only the final, verifiable result. | [Open auctions](https://privatedao.org/auctions/) | Devnet implementation; not production-certified |\n| **Decision Intelligence** | Give operators better context before approving or signing an action. | [Open intelligence](https://privatedao.org/intelligence/) | Specialist surface; claims must match live evidence |\n\nSupporting routes include [Pricing](https://privatedao.org/pricing/),\n[Pilots](https://privatedao.org/engage/),\n[Developers](https://privatedao.org/developers/),\n[Trust](https://privatedao.org/trust/),\n[Docs](https://privatedao.org/documents/), and\n[Community](https://privatedao.org/community/).\n\n## What Is Live\n\nThe live homepage currently presents PrivateDAO as Solana-based confidential\ncoordination infrastructure for organizations. Its central workflow is:\n\n1. Choose a workflow.\n2. Keep sensitive details private while the work is active.\n3. Finish with a clear result, receipt, or on-chain reference.\n\nThe live site is the source of truth for public availability and wording.\nThis repository is the source of truth for the implementation that is\ncommitted here. A feature is not production-supported merely because its code,\nroute, badge, or documentation exists in this repository.\n\n## Repository Map\n\n| Path | Purpose | Canonicality |\n| --- | --- | --- |\n| `apps/web/` | Next.js product UI and web API routes | Canonical application source |\n| `programs/private-dao/` | Existing PrivateDAO Solana program | Existing protocol source |\n| `programs/privatedao-auction/` | Standalone confidential-auction program | New Devnet auction source |\n| `idl/` | Checked-in Anchor IDLs used by clients and review | Generated from programs, reviewed before commit |\n| `scripts/` | Build, verification, certification, and operational tooling | Executable engineering tooling |\n| `docs/` | Architecture, security, evidence, product, and operating documents | Evidence and documentation source |\n| `tests/`, `test/` | Protocol and application tests | Validation source |\n| `dist/` | Packaged review artifacts required by CI | Generated release artifacts only |\n| Root route folders such as `about/` and `proof/` | Historical static mirror output | Generated compatibility surface, not application source |\n\nSee [`docs/REPOSITORY_MAP.md`](docs/REPOSITORY_MAP.md) for source ownership,\ngenerated-file rules, and the cleanup boundary.\n\n## Confidential Auctions\n\nThe auction implementation is intentionally isolated from the existing large\nPrivateDAO program:\n\n- Program: `privatedao-auction`\n- Program ID: `4Z7AeFRZHBCok68hhbUgVLC3uFaEP2aDWozsYVksPuQd`\n- Runtime target: Solana Devnet and MagicBlock development environment\n- Public status: **Devnet implementation; not Mainnet or production-certified**\n- UI route in source: `/auctions`\n- Walletless verification route in source: `/verify/auction`\n\nThe intended lifecycle is:\n\n```text\nCreate auction\n  -> delegate the selected state\n  -> submit private bids in the private execution session\n  -> close and compute the result\n  -> commit the final result to Solana\n  -> undelegate/reconcile\n  -> publish a durable verification receipt\n```\n\nMagicBlock-specific evidence and limitations are kept under\n[`docs/magicblock/`](docs/magicblock/). The primary UI should describe the\ncustomer outcome, not internal runtime terminology.\n\n## Development\n\nPrerequisites:\n\n- Node.js 22+\n- Rust stable\n- Solana CLI\n- Anchor CLI compatible with the checked-in workspace\n- A local Solana wallet for Devnet testing only\n\nInstall web dependencies and run the web app:\n\n```bash\nnpm --prefix apps/web install\nnpm --prefix apps/web run dev\n```\n\nBuild and check the auction program:\n\n```bash\ncargo check -p privatedao-auction\nbash scripts/build-auction-sbf.sh\n```\n\nRun the auction Devnet certification gate only when the required development\nwallets and MagicBlock development credentials are available:\n\n```bash\nnpm run certify:auction:devnet\n```\n\nThe certification command must never be interpreted as production or Mainnet\ncertification. It must fail rather than manufacture a signature, receipt, or\nruntime session.\n\n## Deployment Boundaries\n\n| Environment | Role | Status in this repository |\n| --- | --- | --- |\n| Local | Development and tests | Allowed |\n| Solana Devnet | Protocol rehearsal | Allowed for approved tests |\n| MagicBlock development runtime | Auction execution rehearsal | Development evidence only |\n| Amazon production | Existing live deployment | Not changed by repository commits |\n| Current production database | Existing application state | Not changed by repository commits |\n| Solana Mainnet | Production protocol | No auction deployment from this repository |\n\nGitHub is used for source control and review. A push to GitHub is not an\nAmazon deployment. Production release requires a separate reviewed deployment\nstep, environment configuration, migration plan, visual check, and rollback\nplan.\n\n## Evidence And Security\n\n- Never commit `.env` files, PEM files, wallet keypairs, private keys, secrets,\n  production receipts, or deployment state.\n- Never treat a UI label, hash, metadata field, or documentation statement as\n  runtime evidence.\n- Keep private bid values and losing bids out of public Solana state and public\n  receipts.\n- Use the reports under `docs/magicblock/` for diagnostic evidence, not as\n  public product claims.\n- Review [`SECURITY.md`](SECURITY.md), [`NOTICE.md`](NOTICE.md), and\n  [`TERMS_OF_REVIEW.md`](TERMS_OF_REVIEW.md) before redistribution.\n\n## Known Repository Boundaries\n\nThis repository still contains historical static mirror output and older\noperational integrations because other scripts and review checks reference\nthem. They are not automatically part of the current commercial product\nsurface. The cleanup plan classifies them before removal so generated release\nartifacts, rollback evidence, and existing runtime paths are not confused with\ncanonical application source.\n\nFor current public availability, use the live site. For implementation\nstatus, use the source tree, tests, and evidence files together.\n\n## License And Brand\n\nCore source remains subject to the applicable repository licenses. PrivateDAO\nbrand identity, official deployments, product design, protected evidence, and\ncommercial service packaging are reserved. See [`NOTICE.md`](NOTICE.md),\n[`TERMS_OF_REVIEW.md`](TERMS_OF_REVIEW.md), and [`LICENSE`](LICENSE).\n",
  "bytes": 8004,
  "sha": "725b662b518e588bdd98e28f39b9eed5cbcc75c96af0b042d5c61dc5971669ed",
  "repo_slug": "x-pact/privatedao",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_x_pact_pdao_agent_exchange_b212d154/readme"
}