Privacy should be the universal default, not a cypherpunk flag.
Every on-chain read and write leaks metadata to multiple observers: ISP, DNS, RPC, indexer, bundler, chain.
Hermetic is a modular playground for access-layer privacy. Still very alpha. A self-contained local binary that stacks privacy-preserving layers and exposes sound solutions, with stated tradeoffs, over simple APIs.
Today:
- Railgun shielding, unshielding, queries.
- Every egress request over an isolated Tor circuit, including DNS (next: DoH).
- Rust host + embedded Tor via Arti, no separate sidecar.
How:
- SDK code runs sandboxed in
@deno_land, stripped of most permissions.
- No fetch, no node:net, no host writes. Modules are cut off from the world. Untrusted.
- Every SDK network call crosses the Deno boundary, Hermetic intercepts and routes via Tor. No escape possible.
Doesn't yet defend against broadcaster trust, query-pattern inference, timing leaks, or mempool exposure.
Exploring:
- Aztec and other on-chain privacy backends.
- Wasm modules, light clients, messaging.
- Account isolation.
- Local, agent-friendly APIs.
Would appreciate help. DM if interested!