run the full prove → aggregate → verify pipeline end-to-end

Enter inputs, the backend generates a real UltraHonk proof from them, batches it with 3 others (companions or live visitors), aggregates into one outer proof, and you sign + submit it on-chain via Freighter. Every byte you see is real.

freighter not installed · you can still run the pipeline up to step 04

install freighter →

01enter a private transfer

amountnickname

02proving inner (backend · UltraHonk)

03batch · you + 3 companions

04aggregating (backend · 4 → 1)

05submit to Stellar (your wallet · 1 tx)

·comparison

naive · 4 inner txs122,224 stroops

aggregated · 1 outer tx 136,009 stroops

projection

at N = 6414.4× cheaper

at N = 1024230× cheaper

run the pipeline on the left to see your own measured numbers here.

Mode 1 (solo) pads your proof with 3 pre-baked companions so the demo is fast and deterministic. Mode 2 (pool) waits up to 15s for other visitors to join; if none arrive, falls back to companions. Either way: the aggregated outer proof is REAL, the on-chain verification is REAL, your tx hash is REAL.