explaingit

anandh8x/quietpact

Analysis updated 2026-07-25

0TypeScriptAudience · developerComplexity · 4/5Setup · moderate

TLDR

QuietPact is a blockchain prototype for private business workflows on the Arc network, handling encrypted invoices and sealed-bid auctions where bids stay hidden until reveal time. It runs on a public testnet with browser-side encryption and wallet-based authentication.

Mindmap

mindmap
  root((repo))
    What it does
      Encrypted invoices
      Sealed-bid auctions
      Wallet authentication
    Tech stack
      TypeScript
      Node.js 22
      Foundry
      SQLite and Turso
    Use cases
      Private invoicing
      Hidden-bid procurement
      Bond withdrawals
    Audience
      Blockchain developers
      Privacy-focused teams
    Setup
      pnpm 11 required
      Vercel hosting optional
    Security
      Leakage tests
      Threat model included

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

What do people build with it?

USE CASE 1

Create encrypted invoices that only authorized parties can view, with a public proof that the record hasn't been altered.

USE CASE 2

Run sealed-bid auctions where bids stay hidden until a scheduled reveal, then automatically finalize a winner.

USE CASE 3

Test privacy guarantees with built-in leakage tests that confirm sensitive data doesn't appear in logs or transactions.

USE CASE 4

Deploy a private procurement workflow to Arc Testnet with full lifecycle support from bid creation through bond withdrawal.

What is it built with?

TypeScriptNode.js 22pnpm 11FoundrySQLiteTursoVercel

How does it compare?

anandh8x/quietpact0xkinno/astraea0xkinno/halcyon
Stars000
LanguageTypeScriptTypeScriptTypeScript
Setup difficultymoderatehardhard
Complexity4/54/54/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

How do you get it running?

Difficulty · moderate Time to first run · 30min

Requires Node.js 22, pnpm 11, and Foundry locally, hosted Vercel deployments need Turso database credentials or the app won't start.

In plain English

QuietPact is a prototype built for a blockchain network called Arc, focused on private business workflows. It handles two main tasks: encrypted invoices and sealed-bid procurement. The project is designed to plug into Arc's privacy features once those become publicly available. For now, it runs on a public test network, so payments are visible on-chain rather than hidden. The encrypted invoice system lets businesses create invoice records, share them only with authorized parties, and approve them through wallet-based authentication. A public commitment proves that a record has not been altered without exposing its actual contents. The sealed-bid auction system lets bidders submit bids that stay hidden until a scheduled reveal period. Once bids are opened, the contract finalizes a winner and handles bond withdrawals. The project emphasizes that invoice plaintext and raw authentication tokens are never stored, and it runs leakage tests to confirm that sensitive data does not appear in transaction inputs, logs, or database rows. Version 0.1.0 is a working testnet prototype with live contracts deployed on Arc Testnet. It includes browser-side encryption for invoice bodies, wallet authentication, and full auction lifecycle support from creation through bond withdrawal. State is stored using either SQLite for local development or Turso for hosted deployments on Vercel. The project ships with accessibility tests, real-chain lifecycle tests, a software bill of materials, and backup and restore tooling. Developers need Node.js 22, pnpm 11, and Foundry to run it locally. The browser test suite spins up isolated services, deploys fresh contracts, and cleans up its temporary database on exit. Local deployment uses a well-known development key that should never be used outside a disposable local chain. Hosted deployments on Vercel require Turso database credentials and will not start without them. Security documentation includes a threat model, an independent review scope, and a CycloneDX software bill of materials. The latest dependency audit reported no known vulnerabilities. The full README is longer than what was shown.

Copy-paste prompts

Prompt 1
Help me set up QuietPact locally with Node.js 22, pnpm 11, and Foundry. Walk me through cloning the repo, installing dependencies, and running the browser test suite that deploys fresh contracts on Arc Testnet.
Prompt 2
I want to extend QuietPact's encrypted invoice system to add a dispute resolution workflow. Help me modify the browser-side encryption logic and wallet authentication to support a third-party arbiter role.
Prompt 3
Explain how QuietPact's sealed-bid auction lifecycle works from creation through bond withdrawal, and help me write a test that submits multiple hidden bids, triggers the reveal period, and verifies the winner finalization.
Prompt 4
Help me configure QuietPact for a hosted Vercel deployment. I need to set up Turso database credentials and understand what environment variables are required for the app to start successfully.
Prompt 5
Walk me through QuietPact's security model. How do the leakage tests work, and how can I verify that invoice plaintext and authentication tokens are never stored in the database or transaction inputs?

Frequently asked questions

What is quietpact?

QuietPact is a blockchain prototype for private business workflows on the Arc network, handling encrypted invoices and sealed-bid auctions where bids stay hidden until reveal time. It runs on a public testnet with browser-side encryption and wallet-based authentication.

What language is quietpact written in?

Mainly TypeScript. The stack also includes TypeScript, Node.js 22, pnpm 11.

How hard is quietpact to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is quietpact for?

Mainly developer.

Open on GitHub → Explain another repo

This repo across BitVibe Labs

Verify against the repo before relying on details.