ZynoExtension
Manifest V3. Holds the seed. Intercepts 402s.
Trust
Open source. Tested.
Here is every part that touches your money, what each one can see, and where to read the code. Read it before you fund a pocket.
Architecture
Your machine
Sinkhole
Self-hosted DNS. Blocks trackers and drainers. Peer swarm for scam flags.
Derived
Per-site addresses
One per origin, from the seed. Each with its own cap.
BudgetAccount
Your pocket. Enforces caps on chain. Created by BudgetAccountFactory.
Settlement
Facilitator
Submits x402 settlements and pays gas. Cannot exceed a cap.
Burn vault
Buys and burns PAYHOLE. Credits tiers to pockets.
Creators
Verifier
Reads TXT records and checks attestations. Never holds funds.
Registry
CreatorRegistry. Domain to wallet. Tips route here.
What a page can and cannot see
Can see
- The one address derived for its origin
- The payments that address made to it
- Whether a 402 was settled or declined
- That the payer is a Zyno pocket, if it looks
Cannot see
- Your seed, or any other site's address
- Your pocket balance or its cap
- Where else you have paid
- Your blocklist, your swarm peers, or your DNS queries
Contracts
NameAddressVerified
Owner
Every contract is owned by one Safe. Nothing upgrades without it.
Verifier signer
0x7Cf3852A9da0064cb22ca69F5726aDb16dFA34cB
Disclosure
Report anything you find through the repository's security contact. Please give us a chance to ship a fix before publishing.