Tokenomics
Privacy-first
emission.
No hard cap, no admin mint — a disinflationary curve governed only by time, split across the three things that keep the protocol private and alive.
The split
Three buckets. Privacy first.
Anonymity holding · users
Rewards for keeping value shielded and growing the anonymity set that protects everyone. Spend-on-claim: the reward is bound to how long you actually held. Live on testnet.
Relayer ops · operators
Pays relayers for the gasless exits they front — by verified work, per epoch, capped per relayer. Users pay no per-exit fee.
Treasury · protocol
Audits, circuit review, liquidity, integrations, and proving infrastructure. No LLM/useful-work pillar — unverifiable on-chain, so it's funded here if it ever matters.
The curve
Controlled early emission. Disinflationary by design.
Emission halves roughly every two years and never stops — a perpetual tail sustains the protocol without infinite dilution. The schedule is fixed in the controller: no role can accelerate it or mint outside it.
Supply policy
No hard cap. No owner switch. No arbitrary minting.
Controller-only mint
The token has no admin mint. Only the EmissionController can mint, and only up to what the schedule has unlocked for each bucket — a hard rate-limit on every reward manager.
Backed reward notes
Shielded rewards are minted into the pool as real CALIGO before the note is inserted, so the pool's outstanding balance is always fully backed.
Governance, time-locked
Mint-governing roles move to a Safe + Timelock at mainnet, with a delayed, reversible admin handover — no single hot key can rug or brick the protocol.
Shield CALIGO. Receive rewards privately.
Rewards arrive as private notes inside the pool.
Launch app →Testnet · proofs verified on-chain · audit pending