Summary. We ask for USD 18,000 in three milestones, each paid only after the committee accepts the delivery. 1) Measure scanning and proof generation in the browser of real phones, with an independent design review chosen by ZCG. 2) Build new vaults where the viewing key is created and kept only on the members’ devices. 3) Upgrade existing vaults to that model where possible and publish the pattern. Today the participants’ devices sign; scanning, balances and building and proving the transaction run in our hosted service, which holds each vault’s viewing key. This grant does not change that the coordinator still stores member names and proposals until issue 601. Nothing here is retroactive.
Hi everyone. I am Daniel Gorgonha, co-founder of DeegaLabs and technical lead of Konclave. I am writing this topic alongside my co-founder, Dayane Bismark, who had the original idea of the project and leads the product, narrative and communications fronts. This is our first application for a Zcash Community Grants grant, and we want to present the proposal clearly.
Konclave was born at ZecHub Hackathon 3.0 with a clear goal: to create a human layer over the Zcash Foundation’s threshold tools, removing the need to use command lines and paste hexadecimal codes by hand. We built a treasury solution for groups that move ZEC, such as companies, communities, nonprofits and grant-funded teams.
In Konclave, any member proposes a payment or a payroll, the others approve and the devices sign together using FROST. A payment needs the approval of t of n members, and each member’s device checks the payment before it adds its signature. A payroll serves several beneficiaries in a single shielded transaction, accompanied by encrypted payslips in the memos. For those watching the network from outside, each payment is an ordinary shielded transaction; for the group’s members, all the proposals, votes and ledgers are transparent. The platform runs directly in the phone’s browser and is already in operation on mainnet with 20 validated transactions (the most recent, a payroll in production carried out on 2026-10-04). Zcash Brasil acts as our pilot group.
We have an important privacy bottleneck that we want to solve before organizations trust larger treasuries to Konclave. Today, to scan the blockchain and display balances, our coordinator needs to hold the full viewing key of every vault. This means the server can read the history of all groups. It holds no share of any key. Until issue 567 is fixed, a payment signed by the quorum is only as safe as the coordinator itself. For that reason, our security notes recommend not keeping significant funds in the app yet.
This application requests $18,000 split into three milestones, paid only after the acceptance of each deliverable:
- Measure the scanning and proof generation costs in the browser of real phones and have the architectural design reviewed by an independent specialist chosen by ZCG.
- Build support for new vaults, where the viewing key is created and kept only on the members’ devices.
- Upgrade the existing vaults to that model, in place where possible, and publish the specification of the pattern to guide other Zcash teams that keep viewing keys on servers.
What this grant does not change: the coordinator still stores the members’ names and every proposal, with its destination, amount and memo, until a later step that seals them (issue 601).
We emphasize that no part of this request is retroactive. Everything we have delivered to date was financed with our own time and resources. Our commitment to the ecosystem is long term, which means we will keep building Konclave regardless of the approval of this funding. The grant will cover specifically the engineering hours needed to execute these three milestones, allowing us to focus fully on this solution so that it reaches the community sooner.
All the security defects and limits that we have publicly disclosed were found by our own reviews (including issues of privacy, denial of service, malleability and key storage in the browser, tracked in their respective issues in the repository). It is precisely because we recognize the limits of the view of those who build that we insist that the review of this grant be conducted independently and published in full.
Konclave is built on the Zcash Foundation’s infrastructure. We credit projects such as Zkool, Zafu and CYZE, which, by their own descriptions, already keep the viewing key on the device. What we add to this ecosystem is the governance and treasury structure. If you maintain WebZjs, operate wallets with keys on servers, or already have measurements of scanning and Halo 2 proofs on mobile devices, we would love to hear your impressions and contributions in this topic.
Transparency statement: Our pilot group, Zcash Brasil, has an approved ZCG grant (ZCG issue 155). Neither the organization nor its leader receives any fraction of the resources of this request. Konclave is also entered in the Zcash track of Colosseum’s Crypto World’s Fair, an event funded by ZCG.
Thank you for reading, and we are available on the forum to answer any questions.
Daniel Gorgonha, DeegaLabs