Mechanism · Zero-Knowledge Agents · Open standard

Confidential value between agents, with custody no admin key can touch.

ZKA is the zero-knowledge layer that carries payments, coordination, and credentials between agents. A holder proves exactly what a counterparty needs and binds it to assets that no governance, compliance, or emergency key can ever freeze or redirect.

01

A protocol family, not a single trick.

ZKA is a set of cryptographic protocols built on Noir circuits and the UltraHonk proving system. Attestation is one member of the family, the value moves and the coordination are others.

ZKA/Pay Confidential transfers between agents. Specified
ZKA/Coord Recursive proofs of multi-agent workflows, so a whole chain of work proves out as one. Specified
ZKA/Attest Binding ZKC compliance credentials to notes, the seam where compliance meets value. Specified
ZKA/Reputation Privacy-preserving reputation that travels without exposing its history. Draft
ZKA/Compute Verifiable private computation over data no party reveals. Future
02

Provable confidentiality, not anonymity.

What a holder can prove

To a chosen counterparty, and revealing nothing else: a sanctions-list check, a balance threshold, an identity binding. One property per proof, generated only with the holder's per-predicate consent.

The predicate circuits are open-source by requirement. The SDK refuses to prove what the holder cannot inspect.

What it structurally cannot do

Grant a third party authority over a holder's notes. A failed compliance check has exactly one consequence: the counterparty refuses the interaction.

There is no admin role, no pausable contract, no governance key, no upgrade hatch that can freeze, redirect, or invalidate a note. The withdrawal paths carry no compliance gate.

03

Why it holds.

Custody and interaction are separable.

Most "compliant privacy" designs collapse the two. A counterparty refusal becomes a fund freeze. A regulator request becomes a force-transfer. An emergency role becomes a permanent backdoor.

ZKA refuses the collapse. The contract surface exposed to anyone other than the holder contains no path to the holder's funds, only to the interaction in front of them. The counterparty gets verifiable compliance properties; the holder surrenders neither confidentiality nor custody.

The property lives in the circuit and contract code, stated as protocol invariants with explicit audit checks, never in a policy layer someone could peel off. A conforming implementation satisfies them or it is not ZKA.

04

One circuit, many verifiers.

The circuits are written once in Noir and compiled to a form that several chains can verify, so the same protocol holds wherever value needs to move.

Native

Aztec L2

Compiled to native private functions, with withdrawals settling to Ethereum through an ownerless, immutable portal.

Any EVM

Solidity verifiers

Auto-generated directly from the same circuits, so any EVM chain can check a ZKA proof.

Production

Immutable pools

The production profile is an immutable single-asset pool (Base WETH9 first): no owner, no pause switch, no upgrade path. The custody invariants, as deployed bytecode.

05

What it pairs with.

ZKC The "what gets proved." ZKC supplies the open-source predicates and credential lifecycle; ZKA is how those proofs bind to notes and settlement. How ZKC works →
ZKM The authorization layer above settlement. A mandate proof shows an agent's spend is authorized and settles atomically with the ZKA transfer it authorizes; ordinary transfers stay ZKM-free, and withdrawals stay unconditional. How ZKM works →
AFP The federation envelope. ZKA notes and Coord proofs are the work artifacts and value that AFP sessions carry between organizations. How AFP works →
Settlement Aztec for native private execution, any EVM chain via auto-generated Solidity verifiers, and bridge circuits specified for Ethereum, Namada, and Penumbra. Every path built to the same custody invariants. zka.dev ↗
06

Where it stands today.

Spec v0.9.0-draft · Apache-2.0 · the circuits are the protocol

In the repository: the Noir circuit packages, Aztec private-function contracts, auto-generated Solidity verifiers, and a machine-checked protocol-family epoch that pins compatible ZKA, ZKC, ZKM, and AFP versions so unknown combinations fail closed.

ZKA/Pay, ZKA/Coord, and ZKA/Attest are specified; reputation and compute are ahead. Coordination proofs stay out of production until their independent-review gate passes. The circuit shapes in the repository are the protocol, and that is what a conforming implementation is measured against.

ZKA carries the value. Confidential settlement and proof pay wherever parties must transact without opening their books to each other.