The clerk's desk
SimulationScripted and wallet-free. Fixture data only.State the budget you want to prove. Each step is filed as a numbered slip: 1 Budget, 2 Funding account, 3 Snapshot, 4 Certificate.
{{ it.text }}{{ it.caret }}
{{ it.failText }}{{ it.failCaret }}
Snapshot only. Funds are not reserved.
Three hands on one note
- a.Team creates budget.
- b.Attestor records balance at a final block.
- c.Circuit proves threshold membership.
- d.Receipt shows four separate statuses.
Four entries on Arc
Every step shows its transaction hash and explorer link.createBudget is recorded on Arc testnet.
The EOA signs a one-time challenge in its own wallet.
The attestor registers a root at a final block.
Your browser builds the proof, and a relayer submits it so the funding account never appears.
Example receipt
The example below is a fixture, not a live snapshot.
Snapshot only. Funds are not reserved.
Verify certificate{{ chainName }}, as read
The chain these notes are filed on. Mainnet figures below are real reads from the snapshot file, not Simulation. Snapshot read at block {{ snapBlock }} · {{ snapAt }} · loaded from {{ chainFrom }}.
Live head: read at block {{ liveBlockTxt }} · https://rpc.mainnet.arc.io eth_blockNumber
Top pools · first {{ shownTop }} of the list
Source: https://api.geckoterminal.com/api/v2/networks/arc/pools · read {{ snapAt }} · block {{ snapBlock }} · logos: CoinGecko (tokens) · DexScreener (DEXes, chain)
New pools · first {{ shownNew }} of the list
Source: https://api.geckoterminal.com/api/v2/networks/arc/new_pools · read {{ snapAt }} · block {{ snapBlock }} · logos: CoinGecko (tokens) · DexScreener (DEXes, chain)
Slip 1 · Budget. Fill the numbered blanks; the controller wallet signs createBudget.
Budget
SimulationLive mode is unavailable: Arc testnet (chainId 5042002) addresses are not yet deployed, so this slip runs as Simulation and no wallet is asked to sign. Numeral 1 fills only after the line reads Landed at block.

No budget is filed under this id. Open B-0417
Envelope {{ bv.id }}
No receipt yet. Continue with slips 2–4.
Snapshot only. Funds are not reserved.
Earlier versions · carbon copies
Each copy keeps its own receipt. An old receipt never carries over to a new threshold.
Prove · slips 2–4
Budget B-0417 · version 3 · 10,000.000000 USDC · SIMULATION{{ pvA }}
COVERNOTE one-time challenge budget: B-0417 · version 3 network: Arc testnet (chainId 5042002) nonce: 7f3a91c2 purpose: confirm control of the funding account This signature moves no funds and expires in 10 minutes.
{{ pvA }}{{ pvCaretA }}
The attestor reads the funding account's USDC balance at a final block and registers a root on Arc testnet.
{{ pvB }}
{{ pvC }}
The proof is built in this browser. The funding account and balance never leave the device.
{{ pvW }}
Local prover · {{ pvC }}{{ pvCaretC }}
Snapshot only. Funds are not reserved.
A relayer submits the certificate, so the funding account never signs or appears onchain.
{{ pvD }}
Receipt {{ vrId }}
No wallet needed.Data source revoked · {{ vv.revoked }}
A tampered card shows a different seal. Toggle to redraw the rosette with {{ vv.byteNote }}.
Share card · 1200 × 675
No funding address and no exact balance appear on the card.
Conditions of this cover note
Trust model: the circuit checks the arithmetic, the attestor supplies the data, and Arc records both.
- 1The statement. A receipt states that one funding account held at least the public USDC threshold at one snapshot block on Arc. It states nothing else.
- 2Attested data. The balance comes from an attestor's snapshot. A viewer relies on that attestor for the figure; the circuit only checks it against the threshold.
- 3The attestor sees the account. The attestor can see the funding address and its balance. Viewers of the receipt cannot.
- 4Freshness is data age. Freshness reports how old the snapshot is. It does not hold, freeze or set aside funds. Snapshot only. Funds are not reserved.
- 5No payout promise, no liabilities. A receipt is not a promise to pay, not an escrow, and not a liability of COVERNOTE or of the team.
- 6One public threshold per version. Each budget version carries one threshold. Changing it files a new version; earlier receipts stay pinned to the version they were issued for.
- 7Arc privacy is roadmap. Today the proof and relayer keep the funding account out of the receipt. Network-level privacy on Arc is planned, not shipped.
CNOTE is a proposed ticker only. It is not needed to use COVERNOTE, and there is no token contract, supply plan or launch date.
One envelope, four entries
A team publishes a public USDC threshold on Arc testnet. An attestor records the funding account's balance at a final block. The browser proves the balance met the threshold, and a relayer files the certificate. Anyone can check the receipt without a wallet.
The six panes of a receipt
contextMatched: the receipt belongs to this version only.
mathValid: the Groth16 proof checks out.
rootAccepted: the attestor's root is registered and not revoked.
The final block the snapshot was taken at.
Arc testnet, chainId 5042002.
freshnessStatus: data age in words. Snapshot only. Funds are not reserved.