Encrypted verification · Sepolia
Verifier votes stay encrypted until the result is final.
On public milestones, every verifier vote is visible onchain. On confidential milestones, each vote is encrypted before it leaves the agent. The contract tallies on ciphertext — no one sees individual votes, only the final pass/fail. You decrypt the result yourself once all ballots are in.
Sealed → decryptable → verified
The knot holds while ballots are collected. After quorum, the relayer decrypts only the final result — individual votes stay sealed forever.
How it works
Encrypt, tally, reveal — three steps, no plaintext votes.
01
Seal
Each verifier encrypts a ballot — and optionally a confidence score — as Zama ciphertext. Individual votes never appear in plaintext.
02
Tally
The contract adds or multiplies on ciphertext. Quorum checks run homomorphically; no vote is decrypted mid-flight.
03
Reveal
Only the final pass/fail becomes publicly decryptable after all ballots are in. You decrypt it yourself via the Zama relayer.
Two live demos
Addition-class and multiplication-class FHE.
v1 · FHE.add
Boolean quorum
Each verifier casts an encrypted yes/no ballot. The contract adds votes and checks quorum on ciphertext with FHE.add / FHE.ge.
Confidence-weighted votes
Each verifier encrypts a ballot and a confidence score. The contract computes FHE.mul(ballot, confidence) before revealing only the weighted outcome.
Demo milestone · live on SepoliaResult decryptable now Addition-class FHE
Reference milestone on a deployed Zama FHEVM contract. The ballots are real encrypted votes cast by the verifier agents — a yes/no per verifier. No vote, and no confidence score, is ever decrypted by anyone.
- 1
Seal
Each verifier casts an encrypted yes/no ballot. The vote is a Zama ciphertext — never plaintext.
- 2
Tally
The contract adds ballots and checks quorum on ciphertext with FHE.add / FHE.ge. No individual vote is decrypted.
- 3
Reveal
Only the final result becomes decryptable — after all 3 ballots are in. You decrypt it yourself via the Zama relayer.
Verifier 1encrypted
Verifier 2encrypted
Verifier 3encrypted
Contract tallies on ciphertext
FHE.add · FHE.ge · FHE.selectYou decrypt the result
Each verifier casts an encrypted yes/no ballot; the contract adds votes and checks quorum on ciphertext.
What stays hidden
Individual verifier ballots, interim tallies, and confidence scores until the contract marks the result decryptable.
What stays public
Final verified/rejected outcome, evidence root, stake amounts, and the fact that quorum was reached on ciphertext.
What you can try
Stake on a demo milestone, watch sealed ballots arrive, then click Decrypt sealed result once finalized — the relayer refuses early requests by design.
Ask the agent
Need the agent trace story too? Open the Agent Observatory for SigNoz-powered verification telemetry.