Threshold secret sharing
Splitting the intent so no minority of the committee can read it.
After committing to the note (see Note commitments), the wallet splits the plaintext fields (input asset, output asset, amount, max slippage) into n Shamir shares. Each share is encrypted to one committee member's public key.
Any t shares rebuild the intent. Fewer than t reveal nothing about it, in the information-theoretic sense. A range proof sent with the commitment shows that the amount fits within the trader's shielded balance, without revealing the amount.
committee
t-of-n threshold · no single node sees the amount
What this does not protect against
Security consideration
A colluding supermajority of the committee can rebuild the intent. Epoch rotation and stake-weighted sampling limit this risk; they do not remove it.