Note Disclosure
A disclosure key proves what one of your notes holds — its amount and asset — to an auditor, a
counterparty or anyone else, without giving them any power to spend it. It is a short orbdisc:…
string you hand over yourself; nothing is published on chain.
Product and community material call this selective disclosure. These docs say note disclosure,
after the orbdisc: prefix. It is the same feature.
Create a disclosure key
- Open Shielded Pool and unlock the vault.
- In Notes, find the note and press the key icon in its Disclosure Key column.
- Share Note Disclosure opens with the note's Value, Commitment and Asset ID.
- Press Copy Key and send the key to the person who needs it.
Each key covers exactly one note. To disclose several notes, share one key per note.
Verify a disclosure key
Anyone can verify a key; it does not need your vault.
- Open Disclosure in the app sidebar. The Verify Disclosure page opens.
- Paste the key into Disclosure Key, or press Paste.
- Press Verify. The app recomputes the note's commitment from the key, then asks the chain whether the shielded pool holds that commitment ("Checking chain…").
- Press Reset to check another key.
| Result | Meaning |
|---|---|
| On chain at leaf N | The key matches its commitment and the pool holds that commitment: the note was created with that value and asset |
| Not found on chain | The key is well formed, but the pool does not hold its commitment, or the node could not be reached. Anyone can build such a key for any amount; do not treat it as proof of funds |
| Invalid disclosure key | The key is malformed or edited. Check that the whole key, including orbdisc:, was pasted |
A verified key shows the Note Contents: Value (raw) in planck, Asset ID, Commitment and Owner Public Key.
Verifying tells the node you ask which commitment you are checking. The key format and the check itself: Disclosure Key Format.
What a disclosure key reveals
| Reveals | Never reveals |
|---|---|
| The note's amount | Your spending key or viewing keys |
| The asset | The nullifier, so nobody can tell from the key whether the note is spent |
| The note's one-time owner public key | Your public account or your privacy address |
| The blinding that makes the commitment check work | Any other note you hold |
| The commitment | Who sent the note to you, or who you sent it to |
A valid key shows that whoever made it knew what the note holds. The sender of a note knows the same contents and can make the same key. It does not prove who owns the note now, or that it is unspent.
Anyone who has the key can check the note's contents. A key cannot be revoked once shared.
Related
- Disclosure Key Format — the format and the cryptographic check
- Keys & Identity — why a disclosure key cannot spend
- Viewing-only access — read access to all your notes, rather than proof of one
- Privacy Architecture — what stays private by default