# Midnight Armada

> The private command deck for fleets of AI agents on the Midnight network: fund them, give them orders, and prove every move without exposing enterprise data.

Midnight Armada is being prepared for service. A working wallet already runs on Midnight's preview network: an operator and three AI agents, each holding its own funds, with agent requests over their limits waiting for the operator's approval. The command deck described below is where the service is heading.

## The fleet

- **The Flagship** (Master wallet): Your corporate treasury, held under multi-signature command. Policies are written here, compliance keys live here, and no order reaches the fleet without the Flagship's seal.
- **The Flotilla** (Agent sub-wallets): Restricted wallets for clusters of agents: the marketing flotilla, the arbitrage flotilla, the procurement flotilla. Each sails under its own budget, its own whitelist and its own rules of engagement.
- **Safe Harbor** (Liquidity and staking vaults): Where idle assets rest between missions. Park treasury reserves to earn yield or stake on the Midnight network, and recall them to the fleet the moment an opportunity appears.
- **Cloaking Device** (Zero-knowledge shielding): Selective disclosure for every transaction. Your agents prove to auditors and regulators that they followed the rules, without revealing how much moved, where it went or who they are.

## A mission, watch by watch

- **Orders**: The Flagship sets the mission: its budget, its counterparties, its limits and its deadline.
- **Underway**: Flotillas execute in parallel. Every spend is checked against its orders before it is signed, and the chain checks it again.
- **Report**: Results return to the Flagship as proofs, not logs. Auditors see that the rules held; competitors see nothing.

## Proven compliant, never exposed

Most ledgers force a choice between transparency and privacy. Midnight's selective disclosure removes it: each transaction carries a proof that it met your policy, and the details stay sealed until you choose to open them.

## Rules of engagement

- **Quorums**: Large orders need several keys: two officers, or an officer and an agent that checks the work.
- **Caps and horizons**: Every agent carries a ceiling per trade, per day and per mission, enforced where no software can argue.
- **Blockades**: Counterparties the fleet may never pay, applied to every flotilla at once.
- **Recall**: One order halts a flotilla or the whole fleet. Assets sail home to the Flagship.

## Who takes command

- **Trading desks**: Run arbitrage agents across venues without broadcasting your positions to the market.
- **Enterprises**: Let procurement and finance agents pay suppliers inside approved budgets, with an audit trail regulators accept.
- **Studios and platforms**: Fund the agents that live in your worlds and marketplaces, and keep their economies fair.
- **Funds and DAOs**: Delegate treasury work to agents under quorum control, without publishing who holds which mandate.

## Course

- **Sea trials**: The fleet sails on Midnight's test networks: flagship, flotillas and cloak under real load.
- **First commission**: A handful of enterprises take command, with shared control for people and agents from day one.
- **Open waters**: Safe Harbor opens to staking and yield, and commanders sign in with Midnight Passport once it opens for integration.
- **Grand fleet**: Fleets of tens of thousands, cooperating across organisations, each still dark to the others.

## The technical course

Where each Midnight standard stands in the working wallet today, and what is still to come.

- **MIP-0014, Native unshielded token** (Live): One contract, many token types, minting restricted to the issuer by a hash-based secret.
- **MIP-0011, Native shielded token** (Live): With supply and derived-nonce extensions; the issuer's secret sits inside the nonce, so recipients stay private.
- **MIP-0004, Contract token with UTXO conversion** (Live, adapted): All four conversions on chain. Hash-based accounts, and supply kept in public state so the contract fits the block limits.
- **MIP-0002, Public contract log emission** (Approximated): emit needs ledger 9; today's networks run ledger 8. Events use the standard's types, stored in contract state until then.
- **MIP-0018, On-chain token metadata** (Approximated): The standard's payload and validation rules, stored in contract state and logged as a Misc event until ledger 9.
- **Passport, Midnight Passport** (Awaiting): Input Output's announced seedless wallet: sign-in without seed phrases for commanders. Not yet open for integration.

## Links

- [Homepage](https://midnightarmada.com/): the full page, with the commission form
- [Midnight network](https://midnight.network/): the data-protection blockchain Armada is built on
- [Midnight documentation](https://docs.midnight.network/)