Architecture
Aegis runs on Sonic mainnet (chainId 146). Static clients (app, tge, this docs site) are hosted on Cloudflare Pages; settlement is always on-chain.
Layers
| Layer | Role |
|---|---|
| Wallet + browser | Holds keys; optional local Groth16 proving |
| Sonic RPC | Reads contract state; submits signed transactions |
| PrivateTokenContract | AGS ledger — visible balances + shielded commitments |
| VerifierFactory | On-chain Groth16 verifiers per circuit family |
| Module contracts | Staking, lending, pools, governance, auction, insurance, … |
| PrivacyEntryRouter | EIP-712 relay for shield / transfer / unshield when public entry is governed |
User flow
text
Sonic Gateway (Ethereum → Sonic)
↓
Visible balance (AGS / bridged assets)
↓
Shield → commitments (privacy set)
↓
DeFi modules (swap, lend, stake, govern, …)
↓
Unshield or selective disclosure (when needed)Trading stack (honest split)
| Mode | What explorers see |
|---|---|
| Public AMM | Reserves, swaps, LP positions — full transparency |
| Governed router | Routed swaps across allowlisted pools |
| Limit / RFQ | Transparent escrow and EIP-712 intents |
| PrivateAMM | Pool state remains public; proofs gate policy, not hidden reserves |
We do not market “private liquidity” where SonicScan can still read pool balances.
Authorization model
Only approved protocol modules can move shielded AGS. The app lists a module when it is live on Sonic mainnet.
Clients
| Client | Purpose |
|---|---|
| Web app | Primary DeFi UI |
| Token sale | Dutch auction TGE |
| Sovereign node | Self-hosted proving / ops profile |
| Sonic extension | Wallet companion (where published) |
Source and signed releases: GitHub — Aegis.