Standalone prover

Generate a proof.

Drop a proof package from an issuer, or use the baked demo input. The proof runs in your browser, no wallet, no account. Watch the witness, prove, and verify stages run on your own machine.

Demo proof · baked 8-leaf test tree

epoch 1 · amount 2,500 Testnet USDC

baked input
Load a different proof package
What this circuit proves

The PoolPass circuit proves four statements at once, revealing none of the private inputs:

  1. You know investor_id, cap, and investor_secret whose leaf Poseidon3(id, cap, secret) sits in the committed Merkle tree.
  2. The Merkle path of depth 3 hashes up to the public merkle_root.
  3. The public amount does not exceed your private cap.
  4. The public nullifier equals Poseidon2(secret, epoch), binding the proof to one subscription per epoch.

Read the full statement and a worked 8-leaf example in the mathematics section.