A dark venue asks for trust in exactly the place it refuses to show you. kn:ll answers with proofs and logs rather than promises. Everything on this page is checkable by anyone with a node.
Each round's reference midpoint is posted on-chain before the cross, from a price source kn:ll does not operate. If you fill, you know the price was the public mid and nothing else.
The committee publishes a proof that its fills are the unique pro-rata cross of the committed orders at that mid. The proof is verified by the pool contract before settlement can proceed.
Reveals are threshold-encrypted. Reading any order requires a quorum of committee members to jointly deviate, and the round log records every member's contribution.
The computation outputs fills only. Unfilled orders' plaintext never leaves the joint computation. There is no "delayed reveal"; there is no reveal.
Every settled fill is written on Robinhood Chain one round late. Volume is real, timestamped and auditable. You can reconcile total toll against total escrow movement.
kn:ll runs contracts and coordinates the committee. It holds no key, keeps no book and sees nothing a chain observer does not. It cannot trade against you because it does not know what you want.
The committee is a fixed set of independent operators running the threshold decryption and cross computation. Membership, keys and rotation schedule are on-chain. Members are paid from round fees and slashed for missing rounds or producing a proof that fails verification.
What a colluding quorum could do: read one round's orders. What it could not do: alter fills without failing the proof, or read past or future rounds. What you would see: the collusion itself, since the joint computation transcript is logged.
We consider this the honest limit of the design and say so plainly. If you need a guarantee against a colluding quorum, wait for the fully-proven MPC described in the docs roadmap, or trade smaller.
We do not claim perfect unlinkability: escrow amounts and timing leak upper bounds (see what leaks). We do not claim best execution: you get the mid, which may be worse than a lucky lit fill and better than an unlucky one. We do not claim the committee cannot collude; we claim collusion is detectable and bounded to one round.