Pizza in Berlin
Delivered by facilitators you choose — and can verify.
Pizzeria Napoli
Who is in your set?
Napoli makes the pizza. A facilitator carries it and settles the sats. You decide who may carry your orders — never which one does. The order is opened to the whole set: the first member who proves membership becomes your counterparty, and your client never learns which one it was.
Your pinned trust set
Nothing names a winner up front, and the claimant's own claimed identity is ignored: a ring proof shows membership, not who sent it.
Verifying the claimant
Waiting for a member of your set to prove membership…
Pinned trust set
What was checked
Anonymity
Try to cheat (live)
Pay with bitcoin
Requesting a real invoice from the mint…
Invoice from the mint
BOLT11
This is a real, payable signet invoice issued by the mint the worker already settles against (cdk-a056e0f.cashu.exchange). Nothing is simulated: the mint's own state machine is what the badge above reads. No sats move until somebody pays it — the demo holds no signet funds, so the paid → issued path is real code you can exercise by paying the invoice.
Order —
Honest limitation: the ring proof says who may settle the order, not that the pizza arrives. Releasing sats on delivery — not on proof — is the part that protects you. In this demo the release is simulated.