Tim Bouma (nprofile…un4l) pushed three NIPs to close the full NSP stack – derivation (PR #2355 https://github.com/nostr-protocol/nips/pull/2355), receipt notifications (PR #2362 https://github.com/nostr-protocol/nips/pull/2362), and a Silent Wallet Connect NIP modeled on NIP-47 (PR #2369 https://github.com/nostr-protocol/nips/pull/2369).
The stack handles on-chain privacy cleanly but the wallet service is still a surveillance point – a third-party operator accumulates a complete payment graph regardless of what BIP-352 does on-chain. Posted a design note on splitting the wallet service into two blind TEE-attested components so neither operator can reconstruct who paid whom.
The TEE guarantee is probabilistic not mathematical and doesn’t touch amount privacy or timing correlation – but it closes the operator surveillance gap. Curious if this maps to anything you’ve been thinking about on the OpenETR side.
https://gist.github.com/silentius-satoshi/fd4a4e479f8b9540436b9058b7b158bd
