The HelixKey package on Sui mainnet ships four Move modules, each with a single responsibility. No admin backdoors. No hidden state. Everything public.
Every function public. Every capability guarded. Every mutation gated by a signed intent from the current key.
Sui's native zkLogin gives us zero-knowledge-friendly signing without bolting on a separate proving system. The fuzzy-extractor output plugs directly into zkLogin as a private input.
One opaque burn function is a black box. HelixKey exposes six semantic burns — each on-chain destruction records its cause.
The Move source, the ABI, the audit report, and the whitepaper are all published. There is no secret sauce.