ShadowOS

What is ShadowOS?

ShadowOS ($SOS) is a privacy-first payment fabric that proves what happened without revealing who it happened to. Transactions remain invisible, while trust is measurable and provable.

• x402 Stealth Payments — per-use charges & redacted receipts.
• AI-Pseudonym Reputation — reputation over identification.
• Private Merchant Bridge — policy-aware settlement with ZK checks.

Principles

• Privacy by default, disclosure by choice.
• Proofs not profiles; attest from behavior, not identity.
• Layer-agnostic across EVM, Solana, and more.
• Developer-first headers, receipts, and SDKs.

HTTP 402 is enforced for agent/API access with cryptographic receipts and ZK attestations.

1) Install

bashCopynpm i @shadowos/sdk

2) Initialize

jsCopyimport { ShadowOS } from "@shadowos/sdk";

const sos = new ShadowOS({
  network: "solana",         // "ethereum" | "polygon" | "bsc" | "arbitrum" ...
  endpoint: "https://api.shadowos.xyz",
  wallet: window.solana      // or window.ethereum (MetaMask)
});

await sos.connect();

3) Pay-per-Use (x402)

jsCopy// Request a protected resource via x402
const res = await fetch("https://api.example/data", {
  headers: { "x402-intent": "read:data", "x402-ttl": "60s" }
});

if (res.status === 402) {
  const quote  = await res.json();           // { receiver, amount, ttl, nonce, network }
  const proof  = await sos.pay(quote);       // signs/sends payment
  const retry  = await fetch("https://api.example/data", {
    headers: { "x402-proof": proof }
  });
  const data = await retry.json();
}

4) Verify

jsCopyconst receipt = await sos.lastReceipt();  // zk (redacted)
const ok = await sos.verify(receipt);       // local/remote verify
console.log("verified:", ok);

ZK Transaction Core

Generates, batches, and verifies x402 proofs; prevents double-spend while keeping amounts and counterparties redacted.

• SNARK-friendly proof system.
• Nonce + TTL replay protection.
• Receipt commitments & verifiable ledgers.

AI Identity Layer

Pseudonymous “shadows” with encrypted behavioral learning and attestations (reputation over identification).

• Federated learning & selective disclosure.
• Proof-of-personhood without deanonymization.

Bridge Interface Layer

SDKs/APIs for wallets, dApps, and merchants to integrate stealth payments & pseudonym features.

• Wallet adapters (Phantom/MetaMask).
• Merchant REST & webhooks.
• Cross-chain settlement policies.

x402 Stealth Payments

402 prompts, quotes, and zk-receipts; server never sees balances or other identities.

httpCopyGET /resource
← 402 Payment Required
{
  "x402": { "receiver":"SoS..abc", "amount":"0.001", "ttl":"60s", "nonce":"k49f..", "network":"solana" }
}

AI-Pseudonym Reputation

Attestations like paid-on-time or delivery-score without revealing identity.

jsonCopy{
  "shadow": "psdnym:9f2d..",
  "attestation": { "type": "on_time_payments", "score": 0.98 },
  "zkProof": "0x9a.."
}

Private Merchant Bridge

Anonymous settlement with policy controls and ZK compliance checks.

bashCopycurl -X POST https://bridge.shadowos.xyz/settle \
  -H "Authorization: Bearer <merchant-key>" \
  -d '{ "receipt": "<zk-receipt>" }'

Compliance & Disclosures

Selective facts (amount range, jurisdiction) without revealing raw data.

jsCopyconst proof = await sos.compliance.prove({
  kind: "amount_range", min: "0.00", max: "100.00"
});

Wallet Integration

jsCopy// Phantom (Solana)
await window.solana.connect();
const sos = new ShadowOS({ network:"solana", wallet: window.solana });

// MetaMask (EVM)
await window.ethereum.request({ method: "eth_requestAccounts" });
const sosEvm = new ShadowOS({ network:"ethereum", wallet: window.ethereum });

Merchant Server

nodeCopyimport express from "express";
import { verifyReceipt } from "@shadowos/server";
const app = express(); app.use(express.json());

app.post("/webhook/settled", async (req,res) => {
  const ok = await verifyReceipt(req.body.receipt);
  if(!ok) return res.status(400).json({error:"invalid"});
  res.json({ok:true});
});
app.listen(8080);

Threat Model

• Hide payer identity, counterparty, and clear amounts.
• Prevent replay via TTL + nonce bound to resource.
• Verify settlement with SNARK-friendly receipts.

Pseudocode

pseudoCopyserver.onRequest(r):
  if !r.headers["x402-proof"]:
     return 402 with quote
  if !verifyProof(r.headers["x402-proof"], r.resource, ttl, nonce):
     return 401
  return 200 resource