Private Rooms · v17

Wallet-authenticated encrypted communications

Tezos identity root · WebRTC live transport · MLS/Double Ratchet group E2EE · DAL ciphertext checkpoints

Ultimate shell Advanced lab Architecture notes

Treasury-grade room primitive

Private rooms for signer coordination without turning DAL into a socket.

This module binds a whitelisted Tezos wallet to a local ephemeral device key, then uses WebRTC for live text, files, voice, video, and screen flows. Tezos remains the identity, membership, revocation, and receipt layer. DAL is reserved for encrypted availability checkpoints and evidence bundles.

IdentityWallet-signed session/device binding

EncryptionDevice keys + MLS / Double Ratchet

Real-timeWebRTC DataChannel + MediaStream

AvailabilityDAL ciphertext checkpoints only

1 · Wallet connect

Beacon/octez.connect obtains the active Tezos address and asks the wallet to sign the session statement.

↓ bind

2 · Device communication key

A local device key is generated and signed into the session proof. The wallet key is never used as the chat encryption key.

↓ authorize

3 · Allowlist + revocation

Room entry checks the Tezos allowlist contract or signed allowlist plus device revocation state.

↓ communicate

4 · WebRTC + MLS

Text, file control, media, and screen-share run live. MLS or Double Ratchet provides app-layer E2EE semantics.

↓ checkpoint

5 · DAL / Tezos receipts

Only encrypted blobs, transcript commitments, and evidence bundles are checkpointed for public availability or audit receipts.

Session binding input

Participants Privacy mode

Force SFU mode for larger room simulation

ready

Security boundary: this preview generates deterministic session and checkpoint artifacts. Production must wire wallet signature verification, WebRTC signaling, MLS state, TURN/SFU policy, and on-chain allowlist reads before live deployment.

Wallet/device binding

Authorization decision

Transport plan

DAL checkpoint artifact