graph TB
    subgraph User
        FE["Frontend<br/>Next.js + RainbowKit + Phantom"]
    end

    subgraph "Base EVM"
        CB["ConfidentialBridge<br/>Encrypted burn and mint"]
        CT["ConfidentialCrossChainERC20<br/>All balances as euint256 handles"]
        BR["Bridge<br/>MMR messaging + Twin proxies"]
    end

    subgraph "Solana SVM"
        SP["Bridge Program<br/>Anchor and Rust"]
        CV["ConfidentialVault<br/>Encrypted balance per user"]
    end

    subgraph "Off Chain"
        PR["Privacy Relayer<br/>Hono HTTP on port 3001<br/>Decrypt, Re-encrypt, Relay"]
    end

    subgraph "Inco TEE"
        TEE["Secure Enclave<br/>Arithmetic on encrypted values<br/>Attestation proofs"]
    end

    FE --> CB
    FE --> SP
    CB --> CT
    CB --> BR
    PR --> CB
    PR --> SP
    PR <--> TEE
    CB <--> TEE
    CT <--> TEE
    SP --> CV
    SP <--> TEE

graph LR
    subgraph "Tier 1: Amount Privacy"
        A["Amounts encrypted as TEE handles<br/>On-chain observers see opaque bytes only"]
    end

    subgraph "Tier 2: Sender Privacy"
        B["User signs off-chain via EIP-712<br/>Relayer submits TX, only relayer address visible"]
    end

    subgraph "Tier 3: Receiver Privacy"
        C["Commitment hash published on-chain<br/>Recipient claims later with secret pre-image"]
    end

sequenceDiagram
    participant User
    participant Base as Base Contract
    participant Inco as Inco TEE
    participant Relayer
    participant Solana as Solana Program

    User->>Base: Bridge with encrypted amount
    Base->>Inco: Verify balance >= amount (encrypted comparison)
    Base->>Inco: Deduct from encrypted balance
    Base-->>Base: Emit event with encrypted handle

    Relayer->>Base: Detect event
    Relayer->>Inco: Decrypt handle
    Relayer->>Inco: Re-encrypt for Solana
    Relayer->>Solana: Relay encrypted amount to vault
    Solana->>Inco: Add to vault encrypted balance

sequenceDiagram
    participant User
    participant Solana as Solana Program
    participant Inco as Inco TEE
    participant Relayer
    participant Base as Base Contract

    User->>Solana: Bridge out with encrypted amount
    Solana->>Inco: Verify balance >= amount (encrypted comparison)
    Solana->>Inco: Deduct from vault encrypted balance
    Solana-->>Solana: Emit event with encrypted handle

    Relayer->>Solana: Detect event
    Relayer->>Inco: Decrypt handle
    Relayer->>Inco: Re-encrypt for EVM
    Relayer->>Base: Mint encrypted tokens to recipient
    Base->>Inco: Add to recipient encrypted balance

graph TD
    TEE["Inco TEE Hardware<br/>Intel SGX/TDX attestation<br/>Plaintext only exists here"]
    INCO["Inco Covalidator Network<br/>Multi-validator signed attestations"]
    REL["Privacy Relayer<br/>Sees plaintext during re-encryption<br/>Should run inside TEE in production"]
    SC["Smart Contracts<br/>Reentrancy guards, Role-based access<br/>Handle verification, Nonce replay protection"]

    TEE --> INCO
    INCO --> SC
    REL -. "should run inside" .-> TEE