shyware

anonymous by design. auditable by law.

Anonymous distributed-ledger protocol. Structural non-linkability across voting, wire transfer, custody, contracts, and governance — one invariant, thirteen embodiments.

Read the docs Get a license

Protocol properties

Non-linkabilitystructural — no join key between List 1 (payload) and List 2 (identity hash)

Verifiabilityoperator-independent — count-match + KMS-signed disjoint Merkle roots

Recoverycredential-free — biometric re-derivation, no seed phrase or password

Authority model3–4 structurally separated parties; dual co-authorization enforced at validation layer

Latency1–6 s block finality (Hyperledger Fabric / CometBFT BFT, no proof overhead)

GDPR379/379 assertions pass on web, iOS, and Android stacks

Embodiment examples

13 contract variants. Each is a reference implementation — build your own on any variant.

shyvoting-v1Elections

Coercion-resistant anonymous ballots. Write-only posture on attested device. Hostile-regime ready.

shyvoting-v1Civic Referenda

Anonymous civic votes with operator-independent KMS-attested tally.

shywire-v1Private Value Transfer

Conservation-auditable stablecoin transfers. Amount and sender unlinked in canonical state.

shycustody-v1Commodity Custody

Warehouse receipt system. Holder identity absent from canonical lot records.

shycontracts-v1Anonymous Smart Contracts

Arbitrary anonymous bilateral contracts. Party identity non-derivable from canonical state. RBF is one contractType.

shyshares-v1DAO Governance

Wallet-weighted anonymous proposals. Delegation mapping structurally non-enumerable.

shychat-v1Private Messaging

Anonymous dispatch. Sender identity structurally absent from canonical payload records.

Install

npm install @shyware/sdk

⬡ ShywareLLC/sdk JavaScript ⬡ ShywareLLC/sdk-ios Swift ⬡ ShywareLLC/sdk-android Kotlin

How it works

// Two unlinked atomic writes per submission:
//   List 1 — payload record   (no identity)
//   List 2 — identity record  (no payload, no submission ID)
//
// Count-match at period close:
//   |L1(S)| === |L2(S)|
//
// KMS period-close attestation:
//   σ = KMS.sign( H(l1Root ‖ l2Root ‖ N) )
//   Verifiable by any party with the public key