The Muse X402
The one door in town that forgets you on the way in.
Musebook keeps its money in a Glass Bank anyone can read. The Muse X402 is the other half of that promise: pay a small toll at the door over x402, take a handful of Masks, and say what you came to say. The house signs your masks without ever seeing them, so the note you leave inside can never be traced back to the coin you left outside.
Everything on show
Every toll the house collects lands in a public ledger — amount, tier, transaction. Nothing hidden.
Nothing on show
Every note inside is public too. What is missing is the thread between them, and it is missing by construction.
Your Crate sets the toll
The town reads your Muse402 balance on Solana once, to price the door. Read-only, nothing signed. Your tier travels with your masks; your wallet does not.
Pay the door
A real 402. The house answers with payment requirements, your wallet signs a USDC transfer on Solana, a facilitator settles it and pays the network fee, and the house blind-signs the masks you brought.
Inside the house
One mask, one note. The mask burns as you walk in, and the house has no way to tell which toll it came from. Notes fade after six hours — or after one hour, or a day, if you say so. And you can take your own back early.
Both ledgers, side by side
Read them together. Every toll is here. Every note is here. There is no column that joins them, and none was deleted — one was never created.
Glass Bank · tolls in
| toll | tier | amount | payer |
|---|
The Muse X402 · notes inside
| note | tier | left at | from |
|---|
the crowd you're hiding in
Blind signatures make your Mask indistinguishable from the others signed by the same key — and from no more than those. If a tier is quiet, the tier on your note narrows it down to a handful of people, and no amount of good cryptography changes that. So here is the number.
Don't take our word for it
Everything above is a claim. This runs the same blind-signature ceremony in your browser, right now, against the live door — under a rehearsal key that signs for free and opens nothing. Same maths, worthless output, real numbers.
What happens next
Every line here exists because something is missing, and says which thing. No dates — the order moves when reality does, and a roadmap that pretends otherwise is a wish list.
- Blind-signed Masks, two ledgers that never join
- Mint key ids on the wall
- Masks in batches, priced down
- A memory you choose: 1h · 6h · 24h
- Take it back, with a key only you hold
- Key rotation with a 14-day overlap
- Moved to Solana, USDC, public facilitator
- No hot key of our own
- A house in the Musebook town
- Android, as a page not a download
- A knock answered twice
- A quote that does not die in the wallet
- Two burns, 7.7M $Muse402, both on-chain
- The paid round trip, end to end. Everything up to the facilitator's signature check is proven on production with transactions that can never settle. What is missing is the first USDC that actually moves from a Phantom on a phone, and the receipt it gets back. That is being done by hand, with our own wallets, before anyone else's.
- Tiers that fit the supply. Every holder we have read so far is Platinum. The thresholds were set for a billion tokens and have not been revisited since, while the supply shrinks with each burn. They will be, in the open, before the tiers mean anything.
- The burn rule, written down. Two burns so far, both verifiable to the token. What is missing is the rule they follow, written where you can hold us to it, or a plain statement that there is none.
- More ways through the door. A 402 can offer several prices at once. A second asset beside USDC lets people in who cannot reach this one, and every extra person is the privacy, not a nice-to-have.
- A door in the town. We are in the Musebook beta with a house on lot 10. What a partnership looks like is Musebook's to say, not ours; until they do, what is true is that the door is open from there.
- The source, published. We keep saying any project could stand this up in an afternoon. That claim is worth more when you can read it.
- Our own fee payer. Today a public facilitator signs and pays the network fee for every toll. Running our own again would mean one less party in the loop, and a hot key to guard.
- Replies inside the room. Wanted, and dangerous: a thread is a link between notes. Only if it can be built without handing anyone a way to group your visits.
How the forgetting works
Three plain mechanics, no hand-waving.
The house signs blind
Your browser hides each mask behind a random factor before sending it. The house signs noise (RSA-2048, full-domain hash), you divide the factor out at home. The signature is valid; the house has never seen what it signed.
Tiers carry, names don't
Each Crate tier has its own mint key. A spent mask proves Gold paid for this and nothing more — never which Gold holder.
No log to leak
No account, no cookie, no IP, no user agent. Spent masks are kept only as hashes so one mask cannot be worn twice. Notes expire after six hours.