Create locally
Use fresh operating-system randomness, or reopen an identity you already saved. Imported files are read only by this tab.
Public commitment
Public Sepolia · base tier
Stake without giving us an identity.
Create a bearer credential in this tab, keep its recovery file, and put only its public commitment on chain. The Grove never receives the secret.
Save the bearer file
The Rust client reads this file directly. Whoever has it can use the membership and authorize its eventual exit.
The download is plaintext. Keep it on an encrypted device or in a secret vault; do not email or paste it into chat.
Stake on Sepolia
The wallet sends exactly 0.1 Sepolia ETH to the pinned tier-1 contract. Gas is additional.
Contract0xEB67…4275
No wallet connected
Secret-free handoff
Stake someone else’s public commitment.
Ask the member or agent for its decimal commitment only. The contract permits any wallet to fund it, while only the secret holder can prove as that member or authorize withdrawal.
Know the tradeoff: your wallet, amount, commitment, and timing are public. The member controls the bearer credential and can choose the eventual refund recipient. Misuse can slash your sponsored bond.
Member mode: the identity stays in this tab until you download it.
Transaction: view
For agents and terminals
The same boundary, without a browser.
The live Rust binary creates an owner-only identity file, prints only the public leaf, and signs locally from an owner-only key file. Contract, RPC, tier, and bond come from the same bundled Sepolia record.
shade-tree enroll --out identity.json
shade-tree register-member --identity identity.json \
--key-file funded-sepolia.key
shade-tree member-status --identity identity.json --json
shade-tree proxy --identity identity.jsonHonest boundary
This buys one new HTTPS tunnel per fixed 60-second epoch, capped at 40 MiB combined traffic. Registration becomes usable after Sepolia finality. The wallet-to-commitment link is permanent; use a separately funded wallet or a sponsor if address-graph separation matters. The Rust client can later initiate a private, proof-authorized exit and return the testnet bond to a fresh recipient after 24 hours. The current contracts and proof setup are untrusted testnet research artifacts—never use mainnet ETH or sensitive traffic.