Proof of reserves for a confidential asset is the ability to demonstrate that the asset’s total supply is backed by the reserves held against it, without revealing who holds what. Because supply and reserves are aggregate facts while balances are individual, an issuer can prove backing to an auditor or regulator while every holder balance stays encrypted. In Ryle, this is handled through reconciliation between the confidential supply and the public-side reserves an asset is bound to.Documentation Index
Fetch the complete documentation index at: https://ryle.sh/docs/llms.txt
Use this file to discover all available pages before exploring further.
The problem proof of reserves solves
Issuers of stablecoins, tokenized funds, and other backed instruments must show that what they have issued is actually backed. On a transparent chain this is “solved” by exposing everything — which leaks holder data. With full anonymity it cannot be solved at all — there is no way to prove the aggregate. Confidential assets resolve the tension: the aggregate (supply, reserves) is provable; the individual (balances, counterparties) stays private.How reconciliation works
A confidential asset that spans a public/confidential boundary is minted against reserves and redeemed back against them:- Mint creates units of the confidential asset against reserves.
- Redeem removes units from circulation, reconciled against reserves.
- Reconciliation continuously compares confidential supply to the reserves the asset is bound to, surfacing divergence as an alert.
Disclosing reserves without exposing holders
When an auditor or regulator needs to verify backing, the issuer issues a selective disclosure scoped to reserve and supply figures — not to individual accounts. The recipient can verify the aggregate cryptographically; the disclosure itself is recorded in the audit log. Holder balances and transaction graphs are never part of that disclosure.What stays private vs what is provable
| Fact | Visibility |
|---|---|
| Total supply | Provable to authorized parties |
| Reserves / backing | Provable to authorized parties |
| Supply-vs-reserves reconciliation | Provable to authorized parties |
| Individual holder balances | Private by default |
| Counterparties and transaction graph | Private by default |
Related
- Compliance overview
- Regulatory frameworks
- Selective disclosure
- Confidential stablecoins
- How confidential assets work
FAQ
Can I prove reserves without revealing holder balances?
Can I prove reserves without revealing holder balances?
Yes. Supply and reserves are aggregate facts, so they can be reconciled and disclosed to an auditor or regulator while individual balances remain encrypted and private.
How is divergence between supply and reserves detected?
How is divergence between supply and reserves detected?
Reconciliation continuously compares confidential supply against the reserves the asset is bound to and surfaces divergence as an alert before it becomes a problem.
Is a reserve disclosure logged?
Is a reserve disclosure logged?
Yes. Like every selective disclosure, a reserve or supply disclosure is scoped, time-bounded, and recorded in the immutable audit log.