Questions with short answers.

The middle, not the edges. Your deposit is public and your withdrawal is public; the link between them is what disappears. Anyone can see that a fixed amount entered the vault and that a fixed amount later left it, but not which entry paid which exit.

Amounts are identifying. If you deposited 3.4172 SOL and 3.4172 SOL later left the vault, the arithmetic names you. Three fixed denominations make every deposit in a set look identical.

No. Connecting a wallet here reads your public address so the pages can open. The program is not deployed, so there is nothing to sign and no transaction to approve.

Nobody. Funds rest on a program derived address — a Solana address computed from the program itself, with no private key behind it. None was ever possible. There is nothing to steal, leak, seize or walk away with.

The funds stay sealed permanently. The note is the only claim on a deposit: there is no account, no backup copy, and no recovery path. That is the cost of having nobody hold anything for you.

A pause key can stop new deposits during the devnet phase, and it can never block an exit. The upgrade authority is revoked before mainnet, after which the code cannot be replaced by anyone, us included.

Every Solana transaction has a fee payer written into the chain in the clear. Pay it yourself and that wallet is the link you came here to remove; a fresh destination has no SOL to pay with at all. A relayer submits the proof and takes its fee from the withdrawal. It cannot change where the money goes.

No. Each note spends exactly once. The program records the spent marker and rejects any later proof carrying the same one, so a replay costs the attacker a transaction fee and nothing more.

No. It is per denomination. Ten SOL notes and 0.1 SOL notes are separate crowds, and a crowd is weakest the day it opens. Waiting increases the number of deposits your exit could belong to.

It opens the vault pages today, and its creator fees fund the rent Solana charges to store the program. That is the whole arrangement until the deploy: you hold, the treasury fills, the program goes up.

No. The token has no claim on anything inside the vault. Deposits are claimed by notes only, and the program has no concept of a token balance.