What you are NOT seeing: who paid whom, how much, which note was spent. The pool publishes commitments, nullifiers and one running total — compliance visibility exists, but only as scoped, holder-initiated disclosure. No master key exists structurally.

Every vote is hash-based (LMS/HSS over SHAKE-256) under an SLH-DSA root — the consensus itself is post-quantum, not just the wallets. Epoch badges climb when a validator rotates its signing tree — automatic since v0.10.5; on testnet-1 all four seats rotated unattended on 2026-09-03 (heights 11,584–11,595). EXTERNAL marks a seat admitted on the running chain by a certificate from more than ⅔ of the current seats — the first one landed in block 72219 on 2026-09-05. The external-nodes row is the gateway's own live peer table (hk_getPeers, v0.15.2): every kit node bootstraps through it. These validators run on Google Cloud; the prover lives elsewhere entirely. Want a seat? Join as an observer now; seats follow.

Issuer-controlled, chain-enforced. An issuer registers an asset under an id only it can claim (H(issuer ‖ symbol)), then mints, burns, freezes an account or pauses the asset under a policy fixed at registration. Supply and burns sit inside the state commitment; conserved ✓ is this node's own check that Σ balances + escrow + pool = supply − burned. Every mint here is issuer-signed — attested (reserve-backed) minting is designed, not built.