# Nullis

## Docs

- [CLI — @nullis/cli](https://docs.usenullis.xyz/build/cli.md): Validate policy manifests and render Privacy Receipts from the terminal.
- [Examples](https://docs.usenullis.xyz/build/examples.md): Two apps on one engine — remittance and RWA access — proving unlinkability in practice.
- [SDK — @nullis/sdk](https://docs.usenullis.xyz/build/sdk.md): Submit verify_and_execute to the on-chain contract in one call.
- [Architecture](https://docs.usenullis.xyz/concepts/architecture.md): One engine, five layers, one atomic call — the full shape of Nullis.
- [Claim-safety — what proves what](https://docs.usenullis.xyz/concepts/claim-safety.md): Privacy-critical statements live in the circuit. Public policy parameters are enforced by the contract. Never confuse the two.
- [The Privacy Receipt](https://docs.usenullis.xyz/concepts/privacy-receipt.md): Every decision — success and rejection — emits an inspectable artifact. That duality is the story.
- [The problem](https://docs.usenullis.xyz/concepts/problem.md): On-chain finance forces a false choice between compliance and privacy. Nullis is the missing middle.
- [verify_and_execute](https://docs.usenullis.xyz/concepts/verify-and-execute.md): The core primitive — proof to action, atomically, in one Soroban call.
- [The circuit](https://docs.usenullis.xyz/crypto/circuit.md): A small, fast Noir circuit that proves eligibility in zero knowledge — and is verified on-chain.
- [Cryptographic design](https://docs.usenullis.xyz/crypto/cryptographic-design.md): The canonical hashes, the nullifier, and the replay semantics — all consensus-critical.
- [Revocation](https://docs.usenullis.xyz/crypto/revocation.md): Rotate the approved root, and stale-version proofs are rejected on-chain — no identity involved.
- [Unlinkability — two apps, one engine](https://docs.usenullis.xyz/crypto/unlinkability.md): The same credential produces a different nullifier in every app. Reusable credentials, without a reusable tracking identifier.
- [Benchmarks](https://docs.usenullis.xyz/evidence/benchmarks.md): Measured, not estimated. Circuit size, proving time, and the real cost of on-chain ZK verification.
- [What's real vs mocked](https://docs.usenullis.xyz/evidence/honesty.md): An honest, line-by-line account of what actually runs today and what is a reference implementation or roadmap.
- [Threat model & security](https://docs.usenullis.xyz/evidence/security.md): What Nullis defends against, what it doesn't, and where the trust boundaries sit.
- [Live on Stellar testnet](https://docs.usenullis.xyz/evidence/testnet.md): Every claim is a real, clickable testnet transaction — or a one-command test run.
- [Nullis](https://docs.usenullis.xyz/index.md): Policy-as-code for private on-chain finance — prove you're allowed, execute the exact action, never expose the person.
- [Quickstart](https://docs.usenullis.xyz/quickstart.md): Run the whole system — contract, circuit, SDK, and evidence — with one command.

## Optional

- [GitHub](https://github.com/Enoch208/nullis)
- [Live app](https://www.usenullis.xyz/)
- [Live contract](https://stellar.expert/explorer/testnet/contract/CBVZ3XJQLDFFOOVW3445TFT3UJYFLMAXZTX3IP5PEFAKHXUMCIG7F5Y7)