Store proof, not conversations
What is kept, what is never stored, and what is public on chain.
Prompts and replies are never stored
- ScreenYour message
- ActionPasses through
- ResultNot logged
Send a messageIt streams, then shows the receipt
Example dataThe gateway logs metadata only: ids, models, token counts, money, latency and error codes. Request bodies are dropped from error traces. Conversations in Use stay in your browser.
What is kept where
- ScreenData
- ActionHandling
- ResultVisibility
Open the receiptMoney and tokens, never content
Example data| Data | Handling | Visibility |
|---|---|---|
| Prompts and replies of calls | Not stored | Nobody |
| Use conversations | This browser only | You |
| Receipts | Kept | Public by id; yours in Console |
| Caller identity | HMAC of the key id in the leaf | Nobody |
| Endpoint prompt and files | Encrypted at rest | Launcher only; hashes public |
| API key secrets | SHA-256 only | Shown once to you |
| Creator fee split, burns, receipt roots | On chain | Public |
Endpoint prompts
- ScreenPrompt
- ActionEncrypted
- ResultHash public
Add the prompt and filesOnly hashes become public
Example dataLauncher prompts are decrypted only in gateway memory and returned only to the launcher. A jailbreak can still pull a prompt out of a model, so do not put secrets in one.