News · Learn · November 13, 2026
What goes on a chain, and what never does
Ghostdrive records fingerprints and proofs on two chains, never your files. What each chain holds, the problems it solves, and who sees what.
DRIVE 369 DAO · 3 min read
Ghostdrive uses blockchains mainly to let anyone check something without trusting us, and for the wallet, test DRIVE and DAO votes. It never uses them to store your files. This page maps what sits on which chain, which problem each record solves, and what an observer of a chain can learn. Everything described is on testnets today.
The rule
Ghostdrive's records on a chain are fingerprints, deals and proofs. It never puts a file, a message, a note or an entry of your use log there. Some things are public by design: a DAO proposal's title and text, and a registered name with its Ghost ID, are written in plain form on Base Sepolia. Your content is sealed on your device before anything leaves it, and nodes see ciphertext.
Two chains, different jobs
| Base Sepolia | 369 Ledger | |
|---|---|---|
| Kind | Public testnet, anyone can read and check | Private, permissioned (Hyperledger Besu, QBFT) |
| Who writes | Anyone with a wallet | Admitted accounts only. For Proof of Origin people need no gas or account; a vault seal needs an admitted node |
| Cost | Testnet fee, test DRIVE has no value | Zero gas, no native coin |
| Holds | Storage deals and proofs, Proof of Origin checkpoints, the wallet, DRIVE and the DAO | Proof of Origin checkpoints, vault seals |
| Run by | Base network | Five validators run by the 369 team (pilot) |
369 Ledger and its explorer describes the private one.
Problems it solves
| You want to know | What proves it | Where | Page |
|---|---|---|---|
| Is my file still held by the node I paid? | Random challenges answered with small proofs, paid only when proven | Base Sepolia | Check that your files are kept |
| Who registered this file no later than a given time, and in what order? (not who made it) | A signed fingerprint in a hash-chained log with checkpoints on a chain | Base Sepolia and 369 Ledger | Proof of Origin |
| Was the record of what an AI used rewritten? (opt-in, needs a node admitted to the ledger) | The log's fingerprint, sealed on a chain | 369 Ledger | 369 Ledger |
| Did my AI keep my memory when I switched? | Not a chain: memory is encrypted on your node | None | Switch AI, keep memory |
What an observer of a chain can learn
From the project's threat model (docs/THREAT-MODEL.md), for someone who only reads the public chain:
- File content: no. Proofs use segments of an encrypted copy.
- Sizes and timing: partly. Sizes are padded to buckets and terms rounded, and deals of one file open 10 to 120 minutes apart, but the funding graph and timing within those windows stay visible.
- Names: partly. A registered name points to its Ghost ID.
- Who talks to whom: not documented for the chain.
The model also lists what we do not claim: hiding the funding graph of deal wallets, protecting a vault from malware while it is unlocked, and removing a deleted file's influence on shared model weights.
What a chain cannot do
It cannot make a claim true. A signed fingerprint shows who signed what and when, not who made the file. It cannot hide metadata that you put on it. And a private chain run by one team is only as independent as its validators, which is why 369 Ledger writes checkpoints to a public chain too.
Status
Both chains are testnet-stage. The contracts on Base Sepolia have an audit pending, CertiK's 2025 audit of DRIVE369 does not cover them, and mainnet is planned for 6 March 2027 after an external audit (security and audits).
Open the explorer · How storage proofs work · Why Ghostdrive exists
Questions
- Does Ghostdrive put my files on a blockchain?
- No. Files are encrypted and cut into sealed blocks on your device, and storage nodes hold ciphertext. Ghostdrive records fingerprints, storage deals and proofs on chains. A DAO proposal's text and a registered name are public there by design.
- Why two chains?
- Base Sepolia is public, so anyone can check a record. 369 Ledger is private, with named validators, zero gas and no native coin, for teams that want a record under validators they know. Both are testnet-stage.
- What can someone watching the chain learn?
- Not file content. Today they can see deal timing and a funding graph, and a registered name points to its Ghost ID. The threat model lists each limit.