Derived, not stored
Each party derives its half; nobody generates it for you. Once per session, your wallet signs a trade half root. Each trade’s half is derived from that root and the trade’s order hash, so the same wallet always derives the same half for the same trade, on any device. Replacing your settlement key doesn’t change your halves. An agent derives its halves from its own root, kept with its backed-up key material.Checking before you sign
Before co-signing, your app derives your nullifier again and compares it with the one in the SettlementAuth. If they don’t match, it refuses to sign. Since both nullifiers are co-signed, a payout can’t settle under any secret other than the parties’ own.Seeing your half
The order page shows your half of the trade secret, with copy and download. It’s derived again from one wallet signature per session.Screenshot coming soon
Your half of the trade secret on the order page