The map of this bridge is generated inside a trusted execution environment and stored on Base as a single encrypted word. Nobody can read it — not the players, not the deployer, not a node operator with full access to chain state.
Players cross one at a time, over the same bridge. Every step permanently opens exactly one panel to everybody watching. So a death is not just an elimination — it is a gift to whoever is next in line.
Drawing a bridge costs one Inco fee (0.000001 ETH) no matter how long it is — the whole map is a single e.rand(). A one-player bridge is the solo gauntlet: cross it alone and take the jackpot.
e.rand() covers up to 256 steps, so a bridge costs a single Inco fee.ebool and nothing else. Win or lose, everyone behind you inherits it.e.allow — the enclave will not decrypt it for anybody else, ever.Why this needs a TEE. Put the panel map in plaintext storage and the game is over: anyone reads it and walks across perfectly, forever. Commit-reveal cannot help — it would have to open the whole bridge at once, and it hands the last revealer an abort. zk could prove a step was legal, but not give one specific player a live, private read of one specific panel.
Inco does all three at once: a secret nobody holds, a public reveal of exactly one bit, and a private grant to exactly one address.
Honest framing: Inco Lightning is TEE-based confidential compute (Intel TDX). Settlement is a covalidator attestation verified on-chain, not a zero-knowledge proof. Trust rests on the enclave and its signature. Testnet build — audit before real funds.