The Fixr litepaper.

1. The problem we keep pretending not to have.

Solana's transparency is its greatest product and its most dangerous leak. Every wallet is a window. Every trade, every mint, every liquidation, every time you got rugged -- public forever. The price of censorship-resistance is a permanent public record that follows you into every airdrop, every partnership, every pool that checks whether you're the right kind of user.

Today, if you want to prove you're a whale, you also prove your losses. If you want to claim a reward for activity, you also hand over the routes you took. If you want to enter a private pool, you surrender the rest of the portfolio you would rather no one mapped back to you.

2. The darkroom.

A darkroom does not hide the photographer. It hides the negative. Under the red safelight, the photographer chooses which image to develop and which to leave as latent silver. Fixr is that red light for Solana. Selective disclosure, not obfuscation.

A Fixr proof is a selective disclosure: a zero-knowledge statement that a predicate about your on-chain state is true, emitted without revealing the inputs that made it true. “I hold more than 100 SOL.” “I traded in the last 30 days.” “I am not on the standard sanctions list.” The predicate is public. Everything else stays latent in the tray.

3. The chemistry.

Fixr combines two Solana-native pieces. First: SP1, Succinct's general-purpose zero-knowledge virtual machine. Arbitrary programs can emit succinct proofs, so the predicate library is extensible. Second: Token-2022 with the confidential transfer extension, which encrypts amounts on the native fungible standard Solana already ships.

The combined primitive lets a user prove facts about their wallet and simultaneously act on that proof with amounts nobody else can read. This is why Fixr is not a mixer. It is a primitive.

4. Why this is not a mixer.

Mixers pool and obscure. Fixr discloses, but only what the user chooses. A mixer hides origins. Fixr reveals a predicate and nothing else. Regulators looking for AML hooks will find them here: every Fixr proof can ship a compliance assertion alongside it, so protocols can gate on “not sanctioned” without ever handling a wallet.

5. Shape of the product.

A public Fixr UI at fixr.red. A developer SDK in TypeScript, with Rust and Python bindings shipping alongside. A proof registry that returns verifiable payloads by id. And a $FIXR token on Token-2022 that binds usage to the primitive: proof fees burn, stakers earn, holders govern the predicate library.

The shape is deliberately small. Fewer moving parts, fewer attack surfaces, fewer promises.

6. Competitive landscape.

Tornado mixes, Aztec is an L2, Nightfall operates at transaction level, Zcash and Monero live on their own chains outside the Solana DeFi stack. Fixr is the native Solana primitive for active, predicate-level selective disclosure -- closer in spirit to a verifiable credential than to a privacy chain.

7. Risks and the things we will not pretend to have solved.

The first release ships with a mocked SP1 layer. Real proof generation comes in the second cycle, once the circuit library has been reviewed. The confidential transfer extension remains niche; early Fixr uses it as a signal and a compatibility layer more than a high-throughput rail.

Privacy carries regulatory weight. We lean into selective disclosure and compliance predicates instead of pretending the question does not exist.