confidential
Configure scalar FHE guardrails and run confidential proposal/decryption flows.
Pre-alpha — not production ready
@aura-protocol/cli targets Solana devnet only. APIs and commands may change without notice. Do not use for real funds until a stable release and audit are published.
aura confidential deposit ensure
Ensure the configured agent wallet has an Encrypt deposit account.
aura confidential deposit ensure
aura confidential deposit ensure --dry-run$ aura confidential deposit ensure
⠋ Ensuring Encrypt deposit account...
✓ Encrypt deposit ready: 6bWz…Pn2Qaura confidential guardrails scalar
Encrypt and attach scalar FHE guardrail ciphertexts to a treasury.
aura confidential guardrails scalar \
--agent-id agent-1 \
--daily-limit 10000 \
--per-tx-limit 1000 \
--spent-today 0$ aura confidential guardrails scalar
⠋ Encrypting guardrail values via Ika Encrypt...
⠙ Waiting for ciphertexts to be verified on-chain...
⠸ Configuring scalar guardrails...
✓ Scalar guardrails configured: 3mKr…Ux7B| Flag | Description |
|---|---|
--agent-id <id> | Treasury agent ID |
--treasury <pda> | Treasury PDA |
--daily-limit <usd> | Daily limit in USD, auto-encrypted |
--per-tx-limit <usd> | Per-transaction limit in USD, auto-encrypted |
--spent-today <usd> | Current spent-today counter, default 0 |
--daily-limit-ciphertext <pubkey> | Use a pre-created daily limit ciphertext |
--per-tx-ciphertext <pubkey> | Use a pre-created per-tx ciphertext |
--spent-today-ciphertext <pubkey> | Use a pre-created spent-today ciphertext |
aura confidential status
Show configured scalar guardrails and the active confidential proposal.
aura confidential status --agent-id agent-1
aura confidential status --agent-id agent-1 --json$ aura confidential status
AURA :: Confidential: agent-1
┌──────────────────┬───────────┐
│ Confidential │ Value │
├──────────────────┼───────────┤
│ Daily limit ct │ 9pQs…Nt4V │
│ Per-tx limit ct │ 2rWx…Km8J │
│ Spent today ct │ 5hBn…Lc3F │
└──────────────────┴───────────┘aura confidential propose
Encrypt the amount, submit the scalar FHE policy graph, and create the pending proposal.
aura confidential propose \
--agent-id agent-1 \
--amount 250 \
--chain ethereum \
--recipient 0xdeadbeef... \
--wait$ aura confidential propose
⠋ Ensuring Encrypt deposit account...
⠙ Encrypting amount (250 USD) via Ika Encrypt...
⠸ Waiting for amount ciphertext to be verified on-chain...
⠼ Submitting confidential proposal...
⠴ Waiting for output ciphertext verification...
✓ Confidential proposal submitted: 4xGv…Rp9C
amount ciphertext: 7tNm…Qs2H
output ciphertext: 8pQr…Nt6V| Flag | Description |
|---|---|
--agent-id <id> | Treasury agent ID |
--treasury <pda> | Treasury PDA |
--amount <usd> | Amount in USD, auto-encrypted |
--chain <name|number> | Target chain |
--recipient <address> | Recipient address or contract |
--tx-type <type> | Transaction type |
--protocol-id <id> | Protocol ID |
--expected-output <usd> | Expected output for slippage check |
--actual-output <usd> | Actual output for slippage check |
--quote-age <secs> | Quote age in seconds |
--counterparty-risk <score> | Counterparty risk score 0-100 |
--amount-ciphertext <pubkey> | Use a pre-created verified amount ciphertext |
--policy-output-keypair <path> | Keypair path for the output ciphertext |
--wait | Wait until policy output ciphertext is verified |
aura confidential request-decryption
Request Ika Encrypt decryption for the pending scalar policy output.
aura confidential request-decryption --agent-id agent-1 --wait
aura confidential request-decryption --agent-id agent-1 --ciphertext <pubkey>$ aura confidential request-decryption
⠋ Ensuring Encrypt deposit account...
⠙ Submitting decryption request...
⠸ Waiting for decrypted plaintext...
✓ Policy decryption requested: 6wJk…Mv4L (request 3bYc…Xd7P)| Flag | Description |
|---|---|
--agent-id <id> | Treasury agent ID |
--treasury <pda> | Treasury PDA |
--ciphertext <pubkey> | Override the pending policy output ciphertext |
--request-keypair <path> | Keypair path for the decryption request account |
--wait | Wait until the plaintext is ready on-chain |
aura confidential confirm-decryption
Apply the decrypted violation code on-chain and print the approval/denial decision.
aura confidential confirm-decryption --agent-id agent-1
aura confidential confirm-decryption --agent-id agent-1 --request-account <pubkey>$ aura confidential confirm-decryption
⠋ Confirming policy decryption...
⠙ Reading decrypted policy result from Encrypt network...
✓ Policy decryption confirmed: 5nRt…Wz8K
result: approved ✓| Flag | Description |
|---|---|
--agent-id <id> | Treasury agent ID |
--treasury <pda> | Treasury PDA |
--request-account <pubkey> | Override the pending decryption request account |
Full Confidential Flow
aura confidential deposit ensure
aura confidential guardrails scalar --agent-id agent-1 --daily-limit 10000 --per-tx-limit 1000
aura confidential propose --agent-id agent-1 --amount 250 --chain ethereum --recipient 0xdeadbeef... --wait
aura confidential request-decryption --agent-id agent-1 --wait
aura confidential confirm-decryption --agent-id agent-1
aura execution execute --agent-id agent-1 --wait-signed
aura execution finalize --agent-id agent-1