Private contributor verification. Builders attest their track record on-chain; verifiers decrypt only what the builder chose to share.

Live at shipproof.lol on Arbitrum Sepolia.

ZK proofs let you prove a statement is true without revealing the data — but they only return a boolean. FHE lets the contract compute on encrypted data. A grants committee doesn't just learn "this builder passed." They see the actual score and tier the builder chose to share, without the underlying metrics or provider accounts ever being exposed.

Builder (Browser)
      ↓ connect wallet + OAuth providers
Oracle Service (Bun + Hono)
      ↓ fetch metrics → encrypt server-side (@cofhe/sdk/node) → sign (EIP-712)
Builder (Browser)
      ↓ submit signed envelope on-chain (5 auto-chained txs)
ShipProof.sol (Arbitrum Sepolia)
      ↓ store encrypted metrics → compute score (FHE) → pass/fail → mint badge
ShipProofBadge.sol (ERC-721, soulbound)
      ↓ non-transferable, tied to attestation
Selective Disclosure
      → builder grants per-address access to score or individual metrics
Verifier Portal (/verify)
      → verifier looks up wallet → decrypts shared score → sees tier

1. Connect — wallet (MetaMask) + identity providers (GitHub, X)
2. Link — EIP-191 signature binding wallet to provider identities
3. Attest — oracle fetches metrics, encrypts with CoFHE, signs envelope
4. Score — contract computes weighted score entirely on encrypted data
5. Mint — if encrypted score passes threshold, mint soulbound badge
6. Disclose — grant score/metric access to a specific verifier wallet
7. Verify — verifier decrypts shared score, sees tier

Deployed and verified on Arbitrum Sepolia:

• ShipProof — 0x682c26075cbfa9d097A856dc9d2Ab450F5D8179e
• ShipProofBadge — 0x376dF458691673adcD7D8dC166D278464bf79E7E

Core attestation contract. 50 FHE calls across 12 operation types.

Lifecycle: None → Submitted → ScoreComputed → PassComputed → DecryptRequested → BadgeMinted

Source-agnostic design: metrics stored as a flat array of up to 16 encrypted uint32 slots. The contract doesn't know what "GitHub commits" or "X followers" means — it computes on encrypted values with configurable caps and weights. New providers require no contract changes.

Soulbound ERC-721. Only mintable by ShipProof contract. Transfers blocked. Each token maps to an attestation ID.

Providers implement the MetricProvider interface. Adding a new provider requires no contract changes.

Ship posts detected by regex: "shipped", "launching", "released", "open sourced", GitHub URLs, commit SHAs.

ShipProof/
├── apps/
│   ├── server/              # Oracle service (Bun + Hono)
│   │   ├── src/
│   │   │   ├── routes/      # auth (OAuth), attest (envelope)
│   │   │   ├── providers/   # GitHub, X — pluggable MetricProvider interface
│   │   │   ├── attestation/ # pipeline, encrypt (@cofhe/sdk/node), sign (EIP-712)
│   │   │   ├── auth/        # wallet linking (EIP-191) + signature verification
│   │   │   └── session.ts   # signed cookie sessions
│   │   └── test/            # 36 tests
│   │
│   └── web/                 # Frontend (React 19 + Vite)
│       └── src/
│           ├── routes/      # / (landing), /attest, /verify, /verify/$attestationId, /badge/$id
│           ├── components/  # AttestationStepper, VerifyBadgeCard, SelectiveDisclosure,
│           │                # PermitGate, ConnectWallet, ProviderConnector, WalletLinker
│           ├── hooks/       # useDecryptScore (custom CoFHE decrypt)
│           └── lib/         # contracts, tier, errors, metrics-version, receipt
│
├── contracts/               # Solidity (Foundry)
│   ├── src/
│   │   ├── ShipProof.sol    # Core FHE attestation + scoring + disclosure
│   │   └── ShipProofBadge.sol  # Soulbound ERC-721
│   ├── test/                # 46 tests (CoFHE mock environment)
│   └── script/              # Deployment scripts
│
├── packages/
│   ├── env/                 # Zod-validated environment schemas (server + web)
│   ├── ui/                  # Shared shadcn/ui components
│   └── config/              # Shared TypeScript + Tailwind config
│
└── lib/                     # Git submodules
    ├── cofhe-contracts/     # Fhenix CoFHE v0.1.3
    ├── cofhe-mock-contracts/  # FHE mocks for local testing
    └── openzeppelin-contracts/  # OpenZeppelin v5.6.1

Frontend auto-chains all 5 with a single button click. Resumable from any step on error or page reload.

• The oracle sees plaintext metrics during collection — this is the trust boundary
• Once encrypted and submitted, the oracle cannot read or modify scores
• EIP-712 signature binds attestation to a whitelisted oracle address
• Weights and caps are supplied per attestation via the oracle envelope
• Scoring logic (normalization, aggregation, tier computation) is on-chain
• Identity supersession: identity hash from provider userIds + salt maps to latest attestation (new attestation supersedes old)
• Replay protection: oracle nonce prevents envelope reuse
• Expiration: attestation envelopes expire
• Soulbound badges: non-transferable
• Constant-time tier computation: computeTier uses 3x FHE.gte + 3x FHE.select, no branch leakage

• Bun 1.3+
• Foundry (forge, cast)

git clone https://github.com/Principursa/ShipProof.git
cd ShipProof
bun install
git submodule update --init --recursive

cd contracts
cp .env.example .env
# Fill in PRIVATE_KEY, ORACLE_ADDRESS, ARB_SEPOLIA_RPC_URL, ARBISCAN_API_KEY

forge test

source .env
forge script script/DeployShipProof.s.sol \
  --rpc-url $ARB_SEPOLIA_RPC_URL \
  --broadcast \
  --verify

cd apps/server
# Configure .env
bun run dev

cd apps/web
# Configure .env
bun run dev

# Smart contracts (46 tests)
cd contracts && forge test

# Server (36 tests)
bun test apps/server/

# Type check
bun run check-types

MIT