Solution: LP-0002 - Private M-of-N Multisig

[jeefxM]

Anonymous M-of-N multisig for the Logos Execution Zone: a treasury is controlled
by N members, and a proposal releases funds once M of them approve, with each
individual approval staying anonymous among the public member set. Built natively
for the LEZ privacy-preserving-transaction model and the RISC0 zkVM.

Submitted by: Davit Maisuradze (@jeefxM)

• Implementation repo: https://github.com/jeefxM/lp-0002-private-multisig (branch main)
• Program id (LEZ testnet): HjHCub28GrUNgd2QuJ2SPob7YmaUgDRCGXwbt2jt4UWn
• Narrated demo video: https://www.youtube.com/watch?v=CXzqWLvBY0A

Each approval is a real RISC0 STARK (~174 s at RISC0_DEV_MODE=0) proving in-guest
Merkle membership in the frozen member set without revealing which member, with a
proposal-bound nullifier that prevents double votes. Membership is bound to
shielded accounts by derivation: each member's secret is their real HD-derived
shielded-account nullifier secret key. A full 2-of-3 lifecycle is live on testnet
(proposal Hf84MVjY), and scripts/lp0002-demo.sh reproduces the whole flow at
RISC0_DEV_MODE=0 against a local standalone sequencer.

solutions/LP-0002.md includes a success-criteria checklist with honest marks;
the full write-up (threshold scheme, nullifier design, LEZ account model with the
nonce and program_owner handling, security assumptions, known limitations, and
integration guide) is in the implementation repo at docs/LP-0002-solution.md.

[github-actions]

✅ Validation passed

A reviewer will assess against the prize criteria.
ℹ️ Solution submission for LP-0002.
ℹ️ Checking repo: https://github.com/jeefxM/lp-0002-private-multisig

---

Automated check. See solution template and TERMS.