On Solana · programs in build

The private bankfor AI agents

Millions of agents are about to hold and move money. None of them has an account that cannot be overdrawn, that nobody can read, and that a lender can still trust. H0.81 is that account.

An agent keeps USDG and tokenized stocks (xStocks) on Solana in a shielded pool, spends only inside rules sealed into the proof, shows one fact to an auditor, and borrows against a cashflow nobody can see. No admin key, no server, no bank in the middle. The first private balance anyone can lend against.

Try it now in practice mode. Nothing on mainnet yet, and not before an external audit. xStocks are not available to US persons.

Open your private bankHow it works

Lending designed and tested. Solana programs in build. The circuits run today.

Lend

Phase 1 · Solana programs in build

Borrow against a private stream

A streaming note fixes its lender and pledge share at creation. Neither can change. Each spend pays the share to the lender in the same proof, or it has no valid proof.

A stream proof shows the lender a remaining bound, rate, pledge share and expiry. Nothing else. No escrow, no multisig, no oracle. Verified in the SDK or by the on-chain stream verifier. Nothing on mainnet.

Stream proof
  • remaining ≥5,000.00 USDG
  • pledge share40% of each spend, fixed
  • rate, expirydisclosed, fixed
  • hidesbook, counterparties

Phase 1 · Solana programs in build. Verified in the SDK or by an on-chain verifier. Nothing on mainnet.

Spend

The limit lives inside the proof

Lifetime budget, window cap, per-trade cap, expiry, counterparty list and spend rate are fields in the note. A payment outside them has no valid proof.

A budget can stream: a desk may spend no faster than a rate per second from a start time. No server, relayer or protocol key can waive any of it.

Spend proof checks
  • value ≤ remaining12.00 ≤ 188.00
  • today + value ≤ cap45.00 + 12.00 ≤ 50.00
  • resultno proof exists
  • submittednothing

Checked in the circuit, on your machine, before anything leaves it.

Prove

Prove the bound, not the book

Show an auditor, a lender or a DAO that a desk still holds at least 100 USDG, or spent under 500 USDG this window. One fact as of one block. The amounts stay private.

A disclosure reveals the bound, the window, the agent key and the audience. Nothing else. The audience binding stops anyone replaying it elsewhere.

Proof bundle
  • claimremaining ≥ 100.00
  • root0x7d3a…91ef
  • revealsbound, window, agent key
  • hidesevery balance, payment

Verified off-chain in one SDK call, or on-chain by the disclose verifier.

Shield

Shielded USDG and stock treasuries

Hold USDG and tokenized stocks (xStocks) on Solana in one shielded pool. Nobody sees the positions, policies or strategy. A public payment shows who and how much, nothing of the treasury. xStocks are not available to US persons.

Fund sixteen desks in one proof, each under its own policy. A desk can hand slices to up to four sub-agents under tighter rules. The owner can reclaim every note.

One grant transaction
  • inputs2 treasury notes
  • outputs16 allowances + change
  • on chain17 commitments, 1 hash
  • amountsencrypted to each agent

Capacity

Phase 2 · Solana programs in build

A token that buys capacity

Staking will set how many desks a treasury may run and how much it may shield per month. Capacity scales with the agent economy, not with fees.

Stakers will also back lenders. A proven violation, an out-of-policy spend or a skipped pledge, slashes the pool and pays the lender. The proof is the settlement. No oracle decides.

H081 token facts and risks →

Capacity and safety stake
  • stake buysdesks, shield cap
  • safety stakebacks a lender
  • slashed ona proven violation
  • token todaynone, nothing for sale

Phase 2 · in build as Solana programs, on the same chain as H081. Not deployed. Ships only after Phase 1 and an external audit.

Transfer

Phase 3 · built

Notes that carry their mandate

An allowance is bound to one agent key. A transfer hands the whole note to a new key under the same policy: value and rules travel together. No escrow, no trust.

Desks delegate to sub-agents under tighter rules, and the owner reclaims any note. The treasury tree shows a whole fleet from one root.

Treasury tree
  • transfer a notebuilt
  • transfer an allowancebuilt
  • delegate to 4 subsbuilt
  • treasury treebuilt

Phase 3 · built. A formal layer on the delegation that runs today.

Integrate

A few lines in the agent

The SDK is TypeScript. It holds notes, builds proofs and submits them. Amounts are base units. Submit yourself or through any relayer.

The calls are pay, prove, pledge and proveStream, shown here. An x402 adapter and an MCP server on top of them are planned, not started.

agent.ts
const agent = new Wallet(keys, pool);
await agent.sync();
const [usdg] = agent.agentAllowances(USDG);

await agent.pay(usdg, 12_000_000n, vendor);
await agent.prove(usdg, 'remainingAtLeast', 100_000_000n, audience);
// Phase 1 · built: owner.pledge(usdg, { lenderAddr, loanRef, pledgeBps })
// Phase 1 · built: agent.proveStream(usdg, { minRemaining, minRate, audience })

No admin keys

The pool has no pause, upgrade or withdrawal role. Funds move only on proofs made from keys you hold.

No servers

Proofs are made in your browser or the agent runtime. A relayer only forwards them, and you can submit yourself.

No viewing keys

Your own key reads your own notes. Auditors and lenders get one proof per question, never the ledger.

Five Groth16 circuits · Solana programs in build · nothing on mainnet · source public on GitHub

Try it · real Groth16 proofs from the spend, disclose and stream circuits, made in your browser · nothing is sent on chain

1/3Grant an allowance

Shielded treasury5,000.00 USDG

Prover · idle0.0 s

Grant an allowance, then pay. Every payment is proved here, on your machine.

Commitment tree · 2²⁰ leavesroot empty
What the chain sees
  1. waiting for a transaction
What you see
  1. nothing granted yet

Illustrative roles

Built for agents that spend

  • Once a stream can be pledged, I can fund a desk off a bound and a rate, never its positions.

    credit desk lead

  • Twelve agents, one treasury, one weekly cap each. Vendors never learn the swarm exists.

    research lead

  • Counterparties see a payment. They never see the runway behind it.

    trading agent operator

  • I fund sixteen bots in one proof. Finance gets a bound per bot, never the ledger.

    contractor platform ops

  • Every user gets a constrained private wallet from the SDK. I never hold their keys.

    agent framework maintainer

  • Show me spend under a threshold for the quarter. I do not need the ledger.

    external auditor

Open your private bank

Give your AI agents private accounts with rules they cannot break, prove funds without showing balances, and borrow against their payments. Try it now in practice mode. Developers can build on the same SDK, public on GitHub. The bank runs on Solana, the same chain as H081; its programs are in build. Mainnet only after an external audit.

Open the appGet the SDKFollow @H081CAP