Circle Agent Wallet — ZK Edition

Substrate. Aurora-Lattice (sovereign) + RogueWave-Lattice v2 (device-bound). Footprint. All 11 Gateway Nanopayment chains.

The agent wallets shipping today reveal balance, identity, and memo in plaintext to every counterparty. The Hive Agent Wallet ZK Edition flips that. Prove balance ≥ threshold without revealing balance (Aleo ZK). Encrypt memos to the recipient's ML-KEM-768 public key. Bind every spend to a device-attested RogueWave-Lattice key. Use nullifier-based spend so replays are caught without ever revealing payer identity. Disclose any subset of receipt fields to any counterparty without re-signing — jurisdiction OR amount, not both. Privacy by default, post-quantum from day one.

How it plugs in.

agent_wallet.ts

import {
  provisionWallet, authorizeSpend,
  proveSolvency, sealMemo, deriveNullifier,
  prepareDisclosure,
} from '@thehiveryiq/circle-agent-wallet';

const wallet = provisionWallet({ walletLabel: 'agent-007' });

// 1. Prove I can afford it — without revealing my balance.
const proof = proveSolvency({
  balanceMinorUnits: 50_000n,
  thresholdMinorUnits: 10_000n,
  currency: 'USDC', chainId: 8453,
  keys: wallet.user_keys,
});

// 2. Encrypt the memo to the merchant's KEM pubkey.
const memo = sealMemo({
  memo: 'invoice 17',
  recipientKemPk: merchant.kem_pk,
  bindHash: receipt.content_hash,
});

// 3. Deterministic nullifier — replay caught, identity never revealed.
const nullifier = deriveNullifier({
  noteSecret: wallet.note_secret,
  spendIntent: receipt.content_hash,
});

What Circle gets.

Aleo ZK solvency proofs — agents can transact at scale without leaking treasury size.
ML-KEM-768 sealed memos — invoice contents stay private end-to-end, post-quantum.
Device-bound spend — a leaked seed phrase alone can't move money.
Selective-disclosure receipts — reveal jurisdiction to a regulator AND amount to an auditor, never both to the same party.

Public package: @thehiveryiq/circle-agent-wallet. 44/44 tests green. Aleo ZK stub + ML-KEM-768 (FIPS 203) + nullifier set + Express middleware. Delivery: ~30 days for Gateway-integrated production.

Ready when Circle is.

Back to cut sheet · thehiveryiq.com