A room where every vote is counted and no voter is named.

BACKROW stages zero-knowledge governance as a seated auditorium. Scroll to move through it.

One seat per eligible holder. Not one seat per token.

Balances are read at a frozen block and published as a manifest anyone can rebuild. The room is filled before the vote opens.

Your identity secret never leaves the seat you sit in.

The browser derives a commitment and registers only that. The secret, and the path that proves it belongs, stay on the device.

Prove you belong in the room without saying which seat.

A Semaphore proof checks membership in the frozen Merkle root and derives a nullifier bound to this poll's scope.

The vote leaves the room. You stay seated.

A relayer pays gas and submits the proof, so the sending address says nothing about the voter. The nullifier is spent; a second vote is impossible.

Tallies are public. The people in the seats are not.

Choices, counts and the manifest are open to anyone. Linking a count back to a seat is what the proof makes impossible.