Public
- Policy target, selector, limit, and expiry
- Action calldata, timing, and state change
- Deposit address, token, and amount
SECURITY & PRIVACY
Hide the operator.
Keep the rule visible.
BlackBox does not hide a public protocol action. It protects who holds and exercises a bounded permission, subject to STRK20 and relay assumptions.
Private boundary
- Private pass recipient
- Link from issuance to later use
- Holder sender separation when relayed
01
Contract boundaries
Only the configured pool invokes the Gatekeeper. Cairo checks target, selector, cap, expiry, and mode before forwarding the allowed action.
02
Fresh delivery
A pass must arrive from the pool in the same transaction that calls the Gatekeeper. A preloaded token cannot authorize a later action.
03
Verified Mainnet flow
The deployed policy privately issued one pass and exercised one fixed 0.01 STRK payment on Mainnet. Both transactions succeeded and were accepted on L2; the policy use count is now one.