Special report · Private compute
The vault never opened. The answer came out proven.
Pay from a shielded ZEC note. Encrypt your question on your own device. Get back an answer and a sealed receipt that proves the model ran, without saying who asked.
Vol. I · No. 001
The newspaper of a locked room
Tuesday, 6 October 2026
Vault statusSealedOperator view: nothing
Hushroom
PairZZZ/VVV
Vault status: sealedPair ZZZ/VVV
Hushroom is a private AI network where the payment, the prompt and the person cannot be connected. You pay from a shielded ZEC note. Your prompt is encrypted on your device and sent straight into a GPU enclave: sealed hardware that even its operator cannot look inside.
What comes back is the answer, plus a sealed receipt. The receipt proves that the named model really ran inside a real enclave and was paid for. It does not show what you asked, or who paid.
Enclaves reduce who you have to trust. They do not remove it, and the threat model will say so plainly. Stake $ZZZ for daily compute, issued as blind notes. The pair is ZZZ/VVV.
Everything here is a demonstration. Nothing is live, nothing is advice, and no affiliation with any other project is implied.
The Quiet Ledger Illustrative feed
| Receipt | Model | State |
|---|---|---|
| a41f…c09e | sample-llm-7b | Sealed |
| 07be…5d31 | sample-llm-70b | Sealed |
| e92c…18a6 | sample-vision-3b | Sealed |
Placeholders:Stake $ZZZTrade ZZZ/VVVFollow on X
Forme empty · set a prompt
Fig. 1 — The chamber. Procedural render, sample.
Vol. I · No. 001NationalPage 2
NationalThe unlinking
Explainer · Three facts
On every other AI service, these three facts are one record.
Who paid, what was asked and what ran sit in the same row of someone else's database. Here they are cut apart before they ever meet.
Fig. 3 — one record, sampleCut along the dotted lines
Who paidwallet t1…
What was asked“is this mole…”
What ranmodel X on GPU Y
Paid
A shielded note was spent. The nullifier proves it was spent once, not by whom.
Asked
Encrypted on your device. Only the enclave can read it, and then it forgets.
Ran
The enclave signs which model ran and what it output, as a hash.
Vol. I · No. 001SciencePage 3
ScienceAnatomy of a sealed receipt
Plate 1 · Dissection
Anatomy of a sealed receipt
Every answer comes back with one of these. It proves the compute happened. It says nothing about who asked. Open it for one person and only that person can read it.
Disclosed viewvk-…
Opened for: Journalist
Prompt
“Draft a quiet resignation email”
Answer
Subject: Notice of resignation. Dear team, I am writing to let you know I will be leaving my role…
Output hash matches 0x1df3…4dd0. Payer: still hidden. Everyone else still sees SEALED.
Sealed receiptNo. 8C5F0E41 · sample
- model0x7f2a…c1d9
- quoteq-88c4e2…0120
- out0x1df3…4dd0
- nf0xf5e1…b0a0
- time2026-10-06T14:02:11Z
- disclosureSEALED
model The hash of the exact weights that ran. Change one weight and this changes.
quote The enclave's signed attestation. The hardware vouches for the build it runs.
out The hash of the answer. It proves this answer, without containing it.
nf The payment nullifier. It proves a note was spent once and cannot be traced to the payer.
time When the enclave signed. Outside the quote window, verification fails.
disclosure Who can read the prompt. By default, nobody. A viewing key changes that for one person.
Open it for one person
Sealed. A viewing key is generated on your device and shared with one person only.
Vol. I · No. 001Markets · stocks pagePage 4
MarketsThe Quiet Ledger
Stocks page · Receipts
Every answer on the network, none of them readable.
Illustrative feed
| No. | Model | Out hash | Time | Verified✓ |
|---|
You can count it. You can check it. You cannot read it. Click a row to recompute its hash.
Vol. I · No. 001MoneyPage 5
MoneyBlind compute notes
Staking · Intended model, not live
Stake once. Spend without a name.
Stake $ZZZ and the network mints you a handful of compute notes every day, issued blind. Spend one per request. The operator sees a valid nullifier. It never sees the staker.
Intended model not live · not advice
1,000 $ZZZ
Notes per day: 4. Illustrative ratio of one note per 250 $ZZZ. Not a promise, not a yield.
- I
Stake $ZZZ
Lock tokens once. There is no API key to leak and no account to link.
- II
Mint blind notes
Each day your stake mints notes, issued blind, so even the issuer cannot match note to staker.
- III
Spend one per request
The operator checks a nullifier: proof the note is unspent, not proof of who held it.
| Question | Keyed staking | Blind compute notes |
|---|---|---|
| Links your wallet to your usage | Yes. One API key. | No. Each note is unlinkable. |
| What the provider sees | Key, volume, timing. | A valid nullifier. |
| Revocation | Revoke the key. | Notes expire daily. |
Vol. I · No. 001ObituariesPage 6
ObituariesProvable forgetting
Memory · In memoriam
Memories that were allowed to die.
Chat memory is kept as encrypted notes that only your key opens. Burn the key and the enclave signs a tombstone: the notes cannot be decrypted there again, by anyone, including you.
Sample memories, written for this page.
- Trip plan, 3 daysaged 3 days
Day 1: arrive, walk the old town, book the ferry. Day 2: the museum, a long lunch…
- Draft letteraged 9 days
Dear Alex, I have been meaning to write about the flat, and what I would like to change…
- Symptom questionsaged 14 days
Is it normal that the headache comes back after coffee? Questions to ask at the appointment…
Key present. Notes readable by you.
In memoriam
Notices
None received. All keys present.
A tombstone proves the key was destroyed in the enclave and the notes cannot be decrypted there. It cannot prove you never took a screenshot.
Vol. I · No. 001Situations vacantPage 7
Situations vacantOperators wanted
Supply side · Written by us
Run an enclave. Get paid blind.
No. 01
Wanted: GPUs with sealed memory.
Confidential-computing capable cards, such as GPU TEEs. Paid per job in shielded ZEC. Apply with an attestation, not a CV.
No. 02
Operators: you will never see a prompt.
You verify attestation. You serve. You get paid. That is the whole job, and the whole point.
No. 03
No KYC for customers. None needed.
You only ever see nullifiers. There is no customer file to keep, lose or subpoena.
Intended model
Slashing notice.
Bad attestations forfeit stake. Not live. Described here so operators know the terms before there are any.
How operators get paid
- 1Note spentA customer spends a shielded ZEC note.
- 2Job runsYour enclave runs it. You see ciphertext.
- 3AttestThe receipt carries a quote and a nullifier.
- 4PaidShielded ZEC, per job. No name on either side.
Vol. I · No. 001ListingsPage 8
ListingsTonight's programmes
What you can run · Sample models
Tonight's programmes.
Every programme runs sealed. The names are samples; no real model list exists yet.
Channel 1 · Text
- 01sample-llm-7b7B · 32k ctx · textSealed
- 02sample-llm-70b70B · 128k ctx · textSealed
- 03sample-reason-34b34B · 64k ctx · text, slowSealed
Channel 2 · Sight and sound
- 04sample-vision-3b3B · 16k ctx · image + textSealed
- 05sample-speech-1b1B · audio in, text outSealed
Channel 3 · Utility
- 06sample-code-13b13B · 64k ctx · codeSealed
- 07sample-embed-1b1B · 8k ctx · vectorsSealed
Vol. I · No. 001Markets · commentaryPage 9
MarketsCommentary
Commentary · The token
What $ZZZ does (and doesn't).
Stake $ZZZ and you get blind compute notes: a daily allowance of private requests, issued so that the issuer cannot tell which staker received which note. That is the whole job of the token on this page. Access to private compute, paid in advance.
The pair is ZZZ/VVV. Customers pay each request from a shielded ZEC note. Fees flow to the operators who ran the job and, in the intended model, to a stake pool and a buyback. Nothing is live. There is no price, no pool and no contract here.
What it does not do: it does not make a model smarter, it does not remove the need to trust an enclave's hardware vendor, and it is not an investment recommendation. Any figure on this site is a sample.
No price. No pool. No contract. Only a demonstration.
The desk
Where a fee goes Intended model
- Customerspends a shielded ZEC note
- Request feepaid per sealed request
- Operatorsrun the job, paid blindStake poolfunds daily notesBuybackof $ZZZ on the pair
No split is stated because none is set. Not advice.
Vol. I · No. 001The fine printPage 10
The fine printThe threat model, stated plainly
Legal notices · Honest ones
What we hide. What we don't.
What we hide
Prompt content. Answer content. The payer. The link between a stake and its use.
What we don't
That you used the network at all. Timing is visible at your IP, so use Tor or a VPN. The size class of your request. The model you chose, because it is in the receipt.
Enclaves reduce trust. They do not remove it.
You trust the chip vendor's attestation and the published build. Side channels exist. Intended mitigations: pinned builds, reproducible measurements, rotating enclaves, slashing for bad attestations.
Correction
An earlier draft of this page said “anonymous”. The right word is unlinkable.
On screenshots
Nothing here can stop a person from copying what they can read. Provable forgetting covers the enclave, not your own screen.
Not live
No real enclave, payment or proof runs on this site. It is a demonstration. Not affiliated with Zcash, ECC or any AI provider. Not advice.
Vol. I · No. 001Back pagePage 11
Back pageColophon
Ask anything. Be no one.
Colophon
Printed by no one. Distributed blind. Hushroom Nº 001.
$ZZZ · pair ZZZ/VVV · CA: placeholder · X: placeholder
Ledger rows, models and figures shown are illustrative. Not live. Not advice. Not affiliated with Zcash, ECC, Venice or any AI provider. Enclaves reduce who you have to trust; they do not remove it.
Resealed
No one opened it.
Page 12 / 12