Every payment you make is a confession.

Cash is being put down.

Your grandmother lived her whole financial life in privacy and nobody called her a criminal. She was paid in cash, shopped in cash, gave in cash, and no ledger anywhere recorded what she loved, feared, read, or believed. That world was not taken from us by vote. It was deprecated, quietly, in terms-of-service updates and card-only checkouts and the slow arithmetic of convenience.

Every year the share of transactions that pass through a surveilled intermediary grows. Not because surveillance won an argument, but because it won a default.

Surveillance is not the side effect. It is the product.

Your transaction history is the most honest document that exists about you. It doesn't record what you say you believe; it records what you actually funded. Processors sell it, brokers resell it, models are trained on it, and every party in the chain calls this "the cost of fraud prevention."

And the same pipe that watches can close. Merchants in lawful verticals, privacy tools, VPNs, hosting, journalism, harm reduction, anything a compliance department finds tiring, wake up to frozen accounts, 180-day holds, and termination letters that cite no rule and offer no appeal. The freeze is not a malfunction of the system. It is the system, working.

Every party that can touch your money will eventually be asked to.

This is not paranoia; it is institutional physics. Any entity holding your funds accumulates requests, subpoenas, sanctions lists, risk memos, quiet phone calls, and every request is easier to grant than to fight. Good intentions do not survive the tenth letter from a regulator. Architecture does.

So the goal was never to find a trustworthy custodian. The goal is to make custody brief. Measure your exposure to intermediaries in hours, and it stops mattering what they are eventually asked to do, by then there is nothing left to seize but a receipt.

Manifestos don't settle. Rails do.

Here is where declaring turns into a build plan, and where we're honest about what runs today versus what is in development.

Your customers will not install a wallet. Not this year, not for a decade. They pay with the cards in their pockets, and any privacy movement that requires them to change first is a movement that loses. So we take the transaction as the world makes it, card-shaped, surveilled on the buyer's end as it already was, and we change where it lands.

The design: buyer pays Visa, merchant receives Monero, at a subaddress derived from keys we never hold. The confession ends at the point of sale.

And the airlock has two doors. The same rail lets people, not only merchants, fund privately, carry a card that spends anywhere, and cash Monero back out to a bank. Merchants get paid in XMR today; the consumer side is on the roadmap, in development. See the card →

Yes, we get licensed. That is the whole trick.

A door out of the banking system only works if it stays open. Every unlicensed attempt at this exit has been welded shut, acquirer pulled, accounts closed, founders gone. Martyrdom is not a settlement layer.

So we do the unglamorous thing: registrations in every jurisdiction we operate, KYB on merchants, geo-fencing where the license doesn't exist, prohibited-use lists we actually enforce. Not because we love the paperwork, because we stand in front of it so ten thousand merchants don't have to. One entity absorbs the compliance surface; everyone behind it gets to be a business instead of a suspect.

Call it what it is: a legal airlock. The state gets one throat to choke, and that throat holds your money for two days and your keys never.

What we demand, and what we build instead of waiting.