Skip to content

QuantZK / Halborn Review Packet

Prepared for: Halborn (Rich + engineering)
Product: Verifiable API billing (billing_version: v2)
Production API: https://api.quantzk.com
Trust index: https://quantzk.com/trust
Repo baseline: main @ f67bf83
Packet version: 2026-05-28
Contact: Omar@quantzk.com

This folder is the scoped review package for Halborn. Read in order for a 30–60 minute technical session, or use individual sections as pre-read.


Packet contents

#DocumentPurpose
1One-page overviewExecutive summary: what we built, what we need reviewed, known limitations
2Production smoke evidenceRecorded production attest → verify → tamper run; artifact pins
3Operational readinessRelease gates, perf budget, MPC status, deploy readiness
4Trust surface scopeIn-scope / out-of-scope, key files, reviewer questions
5Pilot packetDesign-partner pilot: problem, workflow, integration, ROI
6ArchitectureBilling trust stack diagrams (Mermaid)

Quick start (reviewer)

bash
# Source repository — available on request (Omar@quantzk.com)
# After access: checkout baseline f67bf83

# Release gate (15/15)
cd verifier-api
DATABASE_URL="postgresql://zkcaptcha:development@localhost:5432/zkcaptcha" \
REDIS_ENABLED="false" REDIS_DISABLED="true" NODE_ENV=test DB_SSL=false \
npm run test:billing-pilot

# Live health (no secret)
curl -sS https://api.quantzk.com/health | jq .

# Live smoke (secret on request)
API=https://api.quantzk.com VDI_ATTEST_SECRET=<secret> bash scripts/smoke-billing-phase2.sh

DocumentAccess
External validation packetAvailable on request — Omar@quantzk.com
Full pilot packet (PDF)Available on request — Omar@quantzk.com
Trusted setup + MPC/docs/trusted-setup-mpc
NCC review entry/docs/ncc-review
Offline verifierhttps://quantzk.com/protocol/verify.html

Suggested call agenda (30 min)

  1. Overview (5 min) — §1 one-pager; two-call surface
  2. Live demo (10 min) — smoke script or /vdi-billing UI
  3. Trust surface scope (10 min) — §4 in/out of scope; Phase-2 binding + verifiable receipts track
  4. Q&A + next steps (5 min) — findings format; independent-host MPC path

Verification keys are embedded in attestations. The verifier is open source.