Vault

CipherSign TEE — policy-gated signing only

Live TEE

Keys stay inside a Flare Confidential Compute TEE. GhostBook operators lock an allowlist, max amount, and expiry — then only intents that pass can get a signature. This is the ops / treasury TEE path. Trading uses PrivacyRouter on Swap and Orders.

GhostBook fee vault — allowlisted fee recipient + hard cap.

Policy

Allowlist (one address per line)

Max amountExpires at (unix)

Sign intent

Recipient

AmountDeadline (unix)

Ready

Lock a policy, then request a signature.

InstructionSender Extension 0x00000000…CipherSign demo

GhostBook