No witnesses.

shield

Sign once in this tab. Deposit ETH or USDG. It becomes an encrypted note only your keys can open. The deposit itself is still public. That is the frame everyone can see.

send

Pay an nvs1 address with a sealed memo, like “rent, october”. A relayer posts the proof. Your address does not touch that transaction.

unshield

Leave in a wave. Withdrawals go out together, shuffled, so timing is a worse clue. The recipient chooses when to step back into the light.

Peb is the tab. The pool is nullvisor. Peb does not hold funds.