ZKRIPT / IMPLEMENTATION NOTES
Status: private project preview; community token not launched.
Product: a browser-local encrypted-note utility. Zkript is the selected project name.

IMPLEMENTED
- Message encryption and authenticated decryption using WebCrypto AES-GCM.
- A fresh random 32-byte key and 12-byte IV per note; 128-bit authentication tag.
- UTF-8 message limit: 4000 Unicode code points and 16000 bytes.
- Packet JSON limit: 30000 characters.
- Version 1 packet fields: version, format, algorithm, iv, ciphertext.
- Compatible version 1 format identifier: offrecord-note (retained for notes from the earlier preview); algorithm: A256GCM; base64url IV/ciphertext/key.
- Authenticated additional data: offrecord-note:v1:A256GCM.
- Packet and key are separately copied; downloaded packet JSON does not contain the key.
- Message, packet and key are not uploaded, stored in browser storage or placed in URLs.
- Clear workspace removes them from the UI's active state; this is not forensic memory erasure.
- The Verify tab executes fresh synthetic runtime/round-trip/wrong-key/tamper checks on demand.

NOT IMPLEMENTED / NOT CLAIMED
- Native Zcash shielded payments, zero-knowledge proofs, wallet custody or transfers.
- A launched community token, its contract, a live pool, fees, payouts or token-backed privacy.
- A third-party security audit, guaranteed bot rating, official partnership or endorsement.

PAIR CONTEXT
ZEC's Solana representation listed by Pump is the proposed pair target, via NEAR Omni Bridge.
Pair-asset mint: A7bdiYdS5GjqGFtxf17ppRHtDKPkkRqbKtR27dxvQXaS
This is not Zkript's token contract. Pairing is planned and does not confer Zcash shielding.
Reference: https://pump.fun/docs/custom-pairs

INSPECTION
vault.js: actual encryption/decryption and note UI.
verification.js: executable functional self-check; not a security audit.
app.js: local terminal commands and navigation.
build-manifest.json: SHA-256 hashes of shipped frontend files; inspect against the files yourself.
No server-side note API, user wallet integration or telemetry is present in this frontend.