Privacy & Encryption
GoDark is a dark pool. The book is not a public tape. The public market feed is aggregates — volume, open interest, funding — not bids, offers, or a trade tape.
What is private vs public
| Surface | What others see |
|---|---|
| Public market feed | Aggregates only |
| Solana | Collateral vault activity and checkpoint commitments — not a per-user fill ledger |
| Your account | Nothing — others do not see your orders, fills, or positions |
| Orders on the wire | HPKE-encrypted to the venue. The edge authenticates and forwards ciphertext; it does not decrypt trading payloads |
Fills do not move SPL. Trading balances live on the GoDark ledger. Withdrawals leave the collateral vault.
Encryption in transit
Use an official SDK. The SDKs handle login, session setup, and order encryption. That is the supported path.
On production sequencer builds, HPKE keys can be sealed in a TEE (AMD SEV-SNP). That protects key material at rest.
Settlement privacy
Solana records checkpoints against the collateral vault. It does not publish a readable per-user fill tape. See Settlement.