shyware

anonymous by design. auditable by law.

Anonymous distributed-ledger protocol. Structural non-linkability across voting, wire transfer, custody, contracts, and governance — one invariant, thirteen embodiments.

Read the docs Get a license

Protocol properties

Non-linkabilitystructural — no join key between List 1 (payload) and List 2 (identity hash)

Verifiabilityoperator-independent — count-match + HSM-signed disjoint Merkle roots

Recoverycredential-free — biometric re-derivation, no seed phrase or password

Authority model3–4 structurally separated parties; dual co-authorization enforced at validation layer

Latency1–6 s block finality (Hyperledger Fabric / CometBFT BFT, no proof overhead)

GDPR379/379 assertions pass on web, iOS, and Android stacks

Embodiment examples

13 contract variants. Each is a reference implementation — build your own on any variant.

shyvoting-v1Elections

Coercion-resistant anonymous ballots. Write-only posture on attested device. Hostile-regime ready.

shyvoting-v1Civic Referenda

Anonymous civic votes with operator-independent HSM-attested tally.

shywire-v1Private Value Transfer

Conservation-auditable stablecoin transfers. Amount and sender unlinked in canonical state.

shycustody-v1Commodity Custody

Warehouse receipt system. Holder identity absent from canonical lot records.

shycontracts-v1Anonymous Smart Contracts

Arbitrary anonymous bilateral contracts. Party identity non-derivable from canonical state. RBF is one contractType.

shyshares-v1DAO Governance

Wallet-weighted anonymous proposals. Delegation mapping structurally non-enumerable.

shychat-v1Private Messaging

Anonymous dispatch. Sender identity structurally absent from canonical payload records.

Install

npm install @shyware/sdk

⬡ ShywareLLC/sdk JavaScript ⬡ ShywareLLC/sdk-ios Swift ⬡ ShywareLLC/sdk-android Kotlin

How it works

// Submission: two unlinked atomic writes
//   List 1 (payload record)     — no identity
//   List 2 (participant record) — no payload, no submission ID
//
// Count-match invariant at period close:
//   |L1(S)| === |L2(S)|   ← verifiable by arithmetic
//
// HSM-backed period-close attestation:
//   σ = Sign_KMS( H(root_L1 ‖ root_L2 ‖ N ‖ domain_aggregate) )
//   Verifiable by any party with the HSM public key