Sealed before it
exists anywhere.
-
A
It starts with one signature
You sign a single typed message that your wallet displays in full. That signature never becomes a transaction and never moves anything. It exists only to derive a key.
-
B
A mailbox key, separate from your money
The signature runs through a key derivation function to produce a dedicated X25519 keypair. It lives in your tab's memory, never on a server, and it is versioned, so a compromised key can actually be retired without destroying old mail.
-
C
Every message is sealed locally
Your text is encrypted with a fresh ephemeral key before the transaction is even built. Subject lines are sealed along with the body, and the payload commits to who it is from and where it is going, so a copied envelope cannot be replayed at anyone else.
-
D
The chain only ever carries ciphertext
Delivery is a public, verifiable fact. The contents are not. Anyone can prove a message arrived, and nobody can open it but the wallet it was addressed to.