What is private and what is public
Which parts of your finances anyone can see, which only you and the agent can, and what the private pool adds.
What is public
Your vault, its balances by box and every transaction are public on Arc. Anyone who has the address of a vault can open it read-only, which is how an accountant or a partner can look without being able to change anything. Payment links reveal the receiving address and nothing else about you.
Where this is enforced: contracts/src/vault/BoxVault.sol, apps/app/src/app/[lang]/view/[vault]/page.tsx
What is sealed
What the agent knows about you, such as your country, your regime, your goals and its forecast, is kept sealed inside a confidential enclave of Chainlink CRE. It is not written to the chain or to a log. The app sends the agent only actions you signed, and the agent writes back only what it did.
Where this is enforced: workflows/agent/enclave/profile.ts, workflows/agent/enclave/signed.ts
The private pool
The shielded pool hides amounts, owners and which note a spend consumes, and its notes carry their own rules. It is off on mainnet because its contract has not had an audit. On testnet it works with test USDC.
Where this is enforced: contracts/src/pool/PolicyPool.sol, packages/pool/src/note.ts