@Tim Bouma pushed three NIPs to close the full NSP stack – derivation (PR
#2355 https://github.com/nostr-protocol/nips/pull/2355), receipt notifications (PR
#2362 https://github.com/nostr-protocol/nips/pull/2362), and a Silent Wallet Connect NIP modeled on NIP-47 (PR
#2369 https://github.com/nostr-protocol/nips/pull/2369).
The stack handles on-chain privacy cleanly but the wallet service is still a surveillance point – a third-party operator accumulates a complete payment graph regardless of what BIP-352 does on-chain. Posted a design note on splitting the wallet service into two blind TEE-attested components so neither operator can reconstruct who paid whom.
The TEE guarantee is probabilistic not mathematical and doesn’t touch amount privacy or timing correlation – but it closes the operator surveillance gap. Curious if this maps to anything you’ve been thinking about on the OpenETR side.
https://gist.github.com/silentius-satoshi/fd4a4e479f8b9540436b9058b7b158bd