flowchart LR
A["Encrypted payroll or bonus manifest"] --> B["Manifest URI + hashes"]
B --> C["configure_confidential_payout_plan"]
C --> D["Proposal-bound payout plan PDA"]
D --> E["Commit / Reveal / Finalize"]
E --> F["Timelock clears"]
F --> G["execute_confidential_payout_plan"]
G --> H["Treasury releases aggregate batch"]
H --> I["Settlement wallet distributes off-chain against encrypted manifest"]
- The encrypted manifest stays off-chain.
- The proposal-bound payout plan PDA becomes the immutable on-chain reference.
- Governance approves the aggregate batch through the standard lifecycle.
- The treasury releases only the aggregate amount to the settlement recipient.
The model keeps compensation operations:
- reviewable
- proposal-scoped
- timelocked
- replay-resistant
without forcing the DAO to publish the full payroll sheet on-chain.