Deposit Screening - Veilify

Veilify screens funds at the door. A deposit is not credited when it is sent. It waits as pending until the gatekeeper has checked the depositing address.

Flow

What the gatekeeper can and cannot do

The gatekeeper can	The gatekeeper cannot
Approve a pending deposit	Change a deposit’s amount, token, recipient or depositor. The contract checks the stored hash.
Reject and refund a pending deposit	Keep more than the gas it used, plus a check cost ≤ 1%
Pull an ERC-20 deposit against the depositor’s signed intent	Pull without a valid, unexpired, unused `PullIntent` signature
Pause deposits, transfers and swaps	Pause withdrawals (admin only)
-	Spend any note, or move any pooled funds
-	Stop a depositor from reclaiming a pending deposit

Retrospective taint recovery

Screening at the door can miss funds that are flagged later. For that case, every approved deposit carries a trace key chosen by the gatekeeper. See Trace Keys.

Robinhood Chain context

Robinhood Chain also screens at the sequencer level. The Veilify gatekeeper is a separate, protocol-level control. It applies to deposits into the pool, whatever the chain admits.