Roadmap
Built in weeks. Shipping in public.
Token live, dapp live on Robinhood Chain, docs live, five open-source repos live — all in the first month. Everything on this page is either running today or honestly marked as next. Real data and real execution first; the shielded pool follows once the contracts are audited.
Shipped
Live today. Real Robinhood Chain data, real Uniswap execution, real token — no mocks, no waitlist.
$INTEL is live on Uniswap
Sep 2026EcosystemFair launch on Robinhood Chain — no presale, no claim page, one verified contract (0xE331…88C8 · Intelena · INTEL · 9 decimals). Trade it, hold it, shield it.
The dapp runs on real Robinhood Chain data
Sep 2026AppChainlink midpoints, 24h price history, Uniswap v3 quotes and your actual wallet balances. Zero mocks — every number on screen comes from the chain.
Real execution: public swaps + on-chain sends
Sep 2026TradingApprove → swap on Uniswap v3 straight from your wallet, with slippage control and a Blockscout receipt. Confirmed trades flow into PnL, orders, tax export and audits.
#4Leak Score on every order + Route Lab
Sep 2026TradingSee the crossed / public split and a 0–100 Leak Score before you sign. Route Lab measures real Uniswap price impact at 0.25×–4× size and hands you three presets.
#5#6Full private-order builder
Sep 2026TradingLimit, stop-loss / take-profit, trailing stop, TWAP / DCA with jittered schedules and expiry — triggers stay encrypted until they fill (pool simulation until the contracts land).
#7#8#9Identity hygiene, built in
Sep 2026PrivacyExposure scan shows how tracked a wallet already is. A fresh address per dapp. Wallet reads proxied so your IP is never tied to your address.
#14#15#23Viewing keys + Audit portal
Sep 2026ComplianceScope a key to one asset or one quarter; your auditor opens dapp.intelena.app/audit and sees exactly that slice. Tax CSV generated on your device.
#17#18#19Alerts, Markets, Notifications
Sep 2026AppPrice alerts on every oracle refresh, a watchlist with sparklines and 24h change, one grouped feed for fills, funds and security events.
AI assistant, agents and an MCP server
Sep 2026AgentsA Claude assistant grounded in the whitepaper, server-side agents with tool use and schedules, and an MCP server that hands live Intelena data to any AI agent.
#22Five open-source repos, day one
Sep 2026Developersleak-score, agent-kit, shielded-notes, association-set, viewing-keys — MIT, with specs, tests and CI. The protocol's building blocks are public before the pool is.
Docs
Sep 2026DevelopersConcepts, the app guide, public data endpoints, threat model, glossary — plain English first.
Building
Underway now. The protocol pieces are already modelled and tested in the open-source repos — contracts, circuits and the relayer network are what turns simulation into settlement.
Shielded pool contracts
ProtocolNotes, commitments, nullifiers and the Merkle tree from shielded-notes go on-chain. The moment they do, deposits, withdrawals and private transfers flip from simulation to real — the app is already wired for it.
#1#10#12#13Spend circuit + proof of innocence
ComplianceEvery spend proves in zero knowledge that its funds descend from approved deposits. Privacy that compliance can sign off on.
#16Dark crossing engine
TradingEncrypted intents matched at the Chainlink midpoint and settled note-for-note inside the pool. No spread, no impact, no footprint.
#3Relayer network + one-time addresses
ProtocolPublic pieces leave from fresh addresses, gas is paid from the shielded balance, deposits enter in batches. The last link between you and your trades disappears.
#4#12#13Cryptographic viewing keys in the app
ComplianceThe audit portal switches from same-device simulation to the real per-asset / per-day key derivation from viewing-keys — disclosure that is mathematically scoped, not policy-scoped.
#17Pool testnet + public bug bounty
SecurityThe contracts and circuits run on a public test deployment with rewards for anyone who breaks them, before a single mainnet deposit.
Private orders executed by the pool
TradingLimit, stop, TWAP and DCA triggers move from the in-browser engine to encrypted intents the crossing engine fills on its own.
#7#8#9Association-set curation, published
ComplianceThe first policy (deny lists, screening, minimum age) published as a reproducible snapshot anyone can rebuild and verify.
#16Agent backend for agent-kit
AgentsIntelenaBackend: encrypted intents through the relayer network with spending limits enforced by the spending proof itself. Bots that can't overspend and can't be copied.
#22MCP tools for trading
DevelopersThe MCP server grows from read-only data to plan / submit tools with the same limits an agent gets — any AI assistant can route a private order.
#22Mobile-first PWA
AppInstallable on iOS and Android, wallet deep links, push for fills and alerts. Every page already works at 400px; this makes it feel native.
Next
Once the pool is live and audited. Thirty-plus items, none with a date — we announce when it ships. Custody first, then everything that builds on it.
Independent audits
SecurityContracts and circuits reviewed by outside firms before mainnet pool deposits open. Reports published in full.
Formal verification of the spend circuit
SecurityMachine-checked proofs for the constraints that guard custody: membership, ownership, nullifier derivation, value conservation.
Shielded team vaults on-chain
TradingMulti-member approval enforced by the pool itself. A treasury that isn't a public feed.
#21ZK PnL proofs
PrivacyProve your return or a holdings range for calls and leaderboards — without ever revealing the wallet behind it.
#20Private payment links
TradingGet paid in USDG with a link; the payer never learns your balance or your main wallet.
#11Association-set decentralisation
ComplianceThe curation policy goes public and the operator role leaves a single party's hands.
#16Multiple association sets
ComplianceChoose the set you prove against — a strict institutional set or a broad public one — per deposit, with the policy visible before you commit.
Uniswap v4 hooks for the fallback leg
TradingRoute the public remainder through v4 pools with hooks that reject sandwiching, on top of v2/v3.
#4Multi-input spends
ProtocolSpend several notes in one proof, so a large order doesn't need a chain of small ones.
Note consolidation in the background
ProtocolSmall change notes are quietly merged over time so wallets stay fast and spends stay cheap.
Decentralised relayer set
ProtocolAnyone can run a relayer; the app picks by uptime and price, and the emergency exit keeps working without any of them.
#24Relayer staking and slashing
ProtocolRelayers post a bond and lose it for censorship or delay, so convenience never becomes leverage.
Cross-chain shielding
EcosystemBridge into the pool from Arbitrum One and Ethereum in one step, so funds land shielded rather than sitting in a public wallet first.
#13More stock tokens as Robinhood lists them
EcosystemEvery new stock token on Robinhood Chain with a Chainlink feed becomes shieldable and crossable.
USDG on-ramp inside the app
EcosystemBuy USDG and shield it in the same flow, so the first deposit never sits exposed.
Robinhood Wallet integration
EcosystemFirst-class connect, deep links and signing flows for the wallet most Robinhood Chain users already have.
Hardware wallet support
AppLedger and Trezor for pool keys as well as public swaps, including clear-signing of encrypted intents.
Watch-only mode
AppImport a viewing key or an address and follow a portfolio without any spending authority on the device.
Native mobile apps
AppiOS and Android with biometric unlock for the note store and push for fills, alerts and vault approvals.
Encrypted note backup
AppNotes backed up to iCloud / Google Drive under a key only you hold; restore on a new device without the pool learning anything.
Alerts to Telegram
AppPrice and fill alerts delivered to a Telegram bot, without linking the chat to an address.
RFQ for large orders
TradingAsk market makers for a private quote on size the dark book can't absorb, settled inside the pool.
Portfolio rebalancing
TradingTarget weights across stock tokens, executed as a batch of dark-first orders with one Leak Score for the whole plan.
Tax packs for accountants
ComplianceExports in the formats tax tools already read, generated on your device from a viewing key.
Multi-client audit portal
ComplianceAccountants manage several clients' viewing keys in one place, each decrypted independently.
Agent adapters: Vercel AI SDK, LangChain, MCP
AgentsDrop-in tools so any agent framework can plan and submit private orders with agent-kit's limits.
#22Per-agent keys
AgentsA derived key per bot that can spend its allocation and nothing more, revocable without touching the owner key.
#22Public data SDK
DevelopersTyped client for /api/prices, /api/history and quotes, plus webhooks for fills and alerts.
Leak Score API
DevelopersScore any route or wallet exposure over HTTP, backed by the open leak-score model.
#6Explorer-safe activity export
PrivacyShare a trade summary that proves what happened without linking to the note or the address.
Per-dapp address rotation policies
PrivacyRotate the address you give a dapp on a schedule or after N interactions, automatically.
#14Docs in more languages
CommunityBahasa Indonesia first, then Chinese, Japanese and Spanish — the concepts, not just the UI strings.
Brand and press kit
CommunityLogos, banners, screenshots and a one-pager anyone can use to write about Intelena.
Public metrics dashboard
CommunityAggregate pool flows, crossed share and relayer uptime — the numbers that are safe to publish, published.
Security council
SecurityA multisig with a published charter for pausing the pool and upgrading circuits, with time locks users can see.
Utility numbers (#1–#25) refer to the whitepaper. Dates are when an item went live. Planned items carry no date on purpose — we announce when it ships, not before.
Most projects publish a roadmap. We publish what already runs.
Follow along — every item moves left as it ships.