Glossary
TL;DRA quick reference for the terms that recur across these docs. Most link back to
the page that explains them in depth.
Attestation
A hardware-signed measurement of the running enclave that a client verifies to confirm it is talking to the genuine, expected engine. See Privacy & Attestation.Batch auction
The matching model: each tick, crossing orders clear together at a single uniform price rather than continuously, pairwise. See Clearing Price.Bearer token
The account-layer credential fromPOST /auth/token, sent as Authorization: Bearer <token>. Gates access to the venue. See
Authentication.
Change note
The note minted for the unfilled remainder of a partially-filled order, so the order keeps resting. Recovered via a fill memo. See Fills Channel.Circuit breaker
The maximum deviation (in basis points) of the clearing price from the oracle reference, enforced by the attested matcher. It is part of the market policy, not a public input to the settlement circuit. See Clearing Price.Clearing price
The single, oracle-anchored price at which every match in a batch settles. See Clearing Price.Compose hash
The hash of the confidential-VM deployment composition. A client derives it from the DCAP-verified quote event log, then compares it with an independently obtained release value; it does not trust the self-reported/info field. See
Transport & Attestation.
Confidential VM (CVM) / enclave
The hardware-isolated Intel TDX virtual machine the matching engine runs inside. Its memory is encrypted and its keys are bound to its measured image. See Confidential VM Architecture.Inner hash
A note’s amount-independent value that anchors both its commitment and its note-use tag. Trade and change outputs inherit private input entropy; merge outputs combine private input inners; protocol fee outputs incorporate a governed epoch secret. Clients can recover their own descendants without making those relationships reconstructible from public chain data. See Shielded Pool.Merkle tree
The on-chain accumulator of note commitments. Its root summarizes every note; inclusion proofs against it back orders and withdrawals. Sharded for settlement throughput. See Merkle Proofs.MarketConfig
The per-pair on-chain configuration that binds a market’s base/quote mints, decimals, price scale, tick, minimum size, circuit-breaker band, and enabled state. Mint identity and price scale are settlement-proof-bound; tick, minimum, and breaker policy are enforced by the attested matcher. See Get Instruments.Note
A UTXO-style unit of value committed on-chain as a Poseidon hash that seals the owner, amount, and token. Your balance is the set of notes you own. See Account Model.Note commitment
The hash that represents a note on-chain. Opaque from the outside; only the owner can recognize and value it.Note-use tag
The deterministic, circuit-derived public handle used when a note is locked or consumed:Hash(note commitment, private inner hash). It addresses the shared
lock/consume PDAs without revealing which Merkle leaf is being used.