Roadmap
Seven eras, from a shielded pool on Robinhood Chain to private markets in every pocket. Each one ships when the code earns it. Four of them already have.
Read the docsPrivate on day one. Stronger every day after.
What you hold in the shielded pool, who you pay, how you split revenue. Hidden by the math itself, so it works on your first transaction. You are not waiting on a crowd to show up.
Every person who shields makes the whole pool harder to read. Privacy here is not a fixed setting you switch on. It grows with the network, and it keeps growing after the code is done.
Built to hide your edge from the crowd, not from the law. Every era below pushes on both halves of that at once.
Every era pushes some mix of these.
The cryptographic core: circuits, contracts, the shielded pool.
How you reach it. CLI first, then web, then an SDK, then mobile.
Growing the crowd. The lever that compounds with every person who joins.
Selective disclosure and auditor-scoped view keys.
$COWL routed through the fee model and the relayer network.
Foundation
The groundwork is real and on chain. Not a diagram.
The full private flow live on Robinhood Chain, mainnet and testnet both. Shield, private send, private trade, unshield.
Note cryptography locked: Poseidon2 over BN254, UltraHonk proofs.
One immutable mainnet release. Deployed once, never redeployed, and the addresses are final.
$COWL live on mainnet with a working market and fee revenue.
The Private Ledger
The flagship. The protocol stopped living in a terminal, and went private for the very first user, not the thousandth.
Private send, receive, shield, unshield and swap from the web app. No install, no toolchain.
Proofs generated in your own browser, from keys derived by a single wallet signature.
Hidden balances. What sits in your shielded portfolio is yours alone.
Compliant Disclosure
Privacy you can defend in a meeting. Show exactly what you choose, to exactly who you choose, and nothing past it.
Auditor-scoped view keys: time-boxed and revocable.
Per-note and per-token disclosure bundles.
Proof you can hand an auditor, scoped exactly how you want it.
Read-only view keys already ship in the CLI. The scoping and the console are what land here.
The Crowd
The crowd is the asset that compounds, so it took priority over the era numbered before it.
Gasless relayer network, live on both chains and the default door on every spend.
Shared denomination sizes, so amounts stop working as fingerprints.
Self-paid as a first-class alternative everywhere, so a relayer is never a chokepoint.
The first cohort onboarded by private send, with no deposit trace at all.
Private Execution
Touch public liquidity without handing front-runners the trade before it lands.
Atomic trade adapter: shielded funds route out through public liquidity and come back inside one transaction.
Quotes scan every fee tier and take the best executable fill.
Token to token routes itself through the native asset as two private legs, so nothing unshields in between.
Front-run protection built into the execution path, not bolted on after the fact.
The Network
Cowl stops being an app and turns into infrastructure other people build on.
Decentralized relayer set, with trust handed off in stages.
Cross-chain reach, plus an SDK so any app can embed Cowl privacy.
An agent-facing surface, so automation can trade under keys it never holds.
The full $COWL fee routing comes online here.
The protocol is mature enough to carry a mainstream crowd.
Everywhere
The mainstream push. A big deliberate build, saved for last on purpose, because it only pays off once there is a real protocol and a real crowd behind it.
Native mobile app, private by default for holdings and transfers.
Onboarding built for people who do not live in a terminal.
It only ever gets stronger.
Privacy here scales with the number of real people inside the pool. It is not a setting you switch on and forget. It is something the network builds together, and it compounds with every person who joins.
Which means the shield you get on your first day is the weakest it will ever be. Every new person makes it stronger for everyone already inside. Including you.
Value accrues through use, not a supply chart. As the protocol matures, $COWL utility routes through the fee model and the relayer network. The more the pool gets used, the more the token does.