Special Council Candidate Miguel Tavares

Introduction

My name is Miguel Tavares, and I am applying for a seat on the Horizen Special Council.

I live in Portugal and have held ZEN since the ZenCash era. I have followed Horizen through several substantial changes, including decisions that were not always easy for long-term holders. I believe its current direction creates a credible opportunity to give ZEN a useful role within a modern, privacy-oriented application ecosystem.

Until now, I have participated mainly as a holder and technical observer rather than as a visible contributor to recent governance discussions. I do not want to suggest otherwise. If elected, I would commit to active participation, clear reasoning and public accountability.

Professional and technical background

I am a hands-on technology builder, former CTO and founder of Kotav Labs, where I work on AI-assisted cybersecurity and application-security systems.

My experience covers software architecture, applied cryptography, blockchain systems, AI agents and security engineering.

My most relevant Web3 work is SOS, where I was the architect and lead engineer. SOS is a public pre-mainnet research implementation created to explore what a blockchain designed for the post-quantum era could look like in practice. Its architecture includes ML-DSA-65 signatures, ML-KEM-1024 encrypted notes, opt-in shielded transactions, transparent STARK-based proofs and a proof-based, non-custodial bridge to Ethereum.

Building SOS required more than selecting cryptographic primitives. It meant defining trust boundaries, separating native post-quantum guarantees from the limitations of external chains, and considering how privacy, interoperability, governance and operational security interact in a working system. Development is currently halted, and I am no longer actively working on its implementation.

My other Web3 work has included contributions to AdamantFi, a privacy-oriented project on Secret Network, Veil—an experimental prediction-market prototype designed for Aztec that did not reach mainnet—and Veil11, an NFT-based fantasy football project on Sui. Together, these projects gave me practical exposure to different execution models, privacy technologies, bridge designs and developer environments.

That experience shapes how I evaluate technical proposals: by examining what the architecture actually guarantees, which assumptions it depends on, how it can fail and who remains accountable when theory becomes an operating system.

Experience with Horizen

My relationship with Horizen began as a ZEN holder during the ZenCash period. What kept my attention was the project’s continuing interest in privacy, security and useful infrastructure, even as its architecture and market position evolved.

Horizen is now operating in a different environment. Its move towards an EVM-compatible system on Base lowers some barriers for developers, while Vela and the wider work around confidential computation introduce important questions about privacy guarantees, infrastructure dependencies and trust assumptions.

The Special Council should be capable of examining those questions without reducing governance to either technical theatre or marketing. The community needs clear explanations of what a system protects, what it assumes and where its guarantees end.

Why I am applying

The Special Council is a stewardship and oversight body. Its members must review proposals, protect the interests of the DAO and respond when security concerns require urgent attention.

I believe I can contribute most where governance meets technical reality.

A proposal can be well written and still depend on an unsafe bridge, an unexamined trusted party, an unrealistic implementation plan or a privacy claim that does not survive closer inspection. Conversely, a technically sound proposal can fail because nobody defined ownership, delivery milestones or what happens after its initial funding.

My background allows me to examine both sides of that problem.

What I would bring to the Special Council

When reviewing a ZenIP, EONIP or treasury-funded initiative, I would focus on questions such as:

  • Is the proposal technically coherent and sufficiently specified?
  • Are its security and privacy assumptions explicit?
  • What does the proposed system genuinely guarantee?
  • Does it introduce trusted operators or central points of failure?
  • Are external dependencies and bridge risks properly documented?
  • Can its budget, implementation plan and milestones be verified?
  • Who remains responsible after the initial delivery?
  • Does it create useful demand for ZEN, or merely attach the token to a product?
  • What happens if the system, supplier or integration fails?

I would also support clearer reporting for funded initiatives. A grant should not end with a launch announcement. Where appropriate, funding should be connected to observable milestones, working software, documentation and evidence of what was actually delivered.

During a security incident, I would favour a disciplined process: establish the known facts, separate confirmed impact from speculation, identify the available containment options and preserve the reasoning behind the final decision. Speed matters, but so does leaving a decision record that the community can later examine.

Priorities

Security-focused proposal review

Technical proposals should document their architecture, dependencies, trust assumptions, failure modes and security consequences before reaching a final vote.

Accountability for treasury-funded work

Funding decisions should define measurable deliverables and reporting expectations. The community should be able to distinguish completed work from activity that merely consumed a budget.

Precise privacy claims

Privacy and confidential-computing systems should explain what is protected, from whom it is protected, and which hardware, operators or network assumptions remain trusted.

Useful ZEN integration

Proposals involving ZEN should explain why the token is technically or economically necessary. Adding a token to a design does not automatically create sustainable utility.

Understandable governance communication

Council reasoning should be accessible to holders who are not protocol engineers. Technical accuracy should not require inaccessible language.

Community participation

I have not been one of the most visible contributors in recent Horizen governance discussions. That is a fair weakness in my candidacy.

My intention is not to appear during an election and then disappear. If elected, I would participate in proposal discussions, explain my decisions and remain available to the community throughout the term.

I would also try to make technically complex proposals easier to evaluate without oversimplifying them. Tokenholders should not need to trust a proposal merely because its authors understand the technology better than they do.

Disclosure regarding SOS

I previously served as the architect and lead engineer of SOS. The project is currently halted, and I am not actively developing or operating it.

SOS was created as an independent research and engineering exercise. It is not currently operating as a commercial blockchain network.

It may eventually progress to mainnet. If development resumes, the intended direction is for the project to move towards community governance through a DAO rather than remain under my control. I would not lead its future operations; my role was in the original architecture and engineering implementation.

I am disclosing SOS because it is relevant to my technical background and because the Horizen community should be able to assess any potential conflict openly. If its status or my involvement changes materially during a Council term, I would disclose that change and recuse myself from any decision where a conflict exists.

I am also the founder of Kotav Labs, a cybersecurity company developing technology for authorised security assessments. Kotav Labs is not affiliated with the Horizen Foundation and currently has no commercial relationship with Horizen.

Availability and commitment

I can attend the Council’s regular meetings, review proposals between meetings and participate in urgent security discussions when required.

I would approach the position as a stewardship responsibility, not as an operational role inside the Foundation. The Council should question, review and protect the DAO’s interests while respecting the authority of tokenholders.

Where confidentiality is required for legal, commercial or security reasons, I would respect it. In every other case, I would favour explaining my reasoning publicly, including when a decision is difficult or unpopular.

Country of residence

Portugal.

2 Likes

Love seeing community OG’s stepping up in ecosystem governance. Also nice to see someone with strong technical background.

Thank you, finpunk. I appreciate the kind words.

I have been around since the ZenCash days, but I also said openly in my application that I have not been one of the most visible contributors lately. I wanted to back up my commitment with something people could use and test. So, after a community discussion about a public/private ZEN wallet, I started building one.

The PoC now runs on Horizen mainnet. It gives the user one wallet and one address, with public and private balances. We completed the full flow between two wallets: Wallet A shielded ZEN, sent it privately to Wallet B, and Wallet B partially unshielded and claimed it. Shield and unshield amounts remain public on chain, while the amount and recipient of the private transfer were encrypted. Each operation needs one user confirmation; the app handles the technical steps and records enough state to continue after an interruption.

This is still an experimental pilot. Vela Nova currently runs on infrastructure I control, without hardware attestation, so I capped private funds at 1 ZEN. The next security milestone is to run the confidential service inside supported, attested hardware, where the operator does not have access to the plaintext private state.

From there, I want to turn it into a focused mobile wallet for public and private ZEN: simpler onboarding, biometric unlock, keys protected on the device, tested recovery, reliable progress when an operation is interrupted, and sponsored gas for supported flows. Where sponsorship is unavailable, public ETH would pay the gas.

After the core payment experience, the roadmap is to add the other live assets on Horizen, starting with ETH, USDC.e and cbBTC as the privacy infrastructure becomes available. I also want to explore private ownership for NFTs and tokenised assets, and integrate Horizen applications such as ZENDEX and Amaanah through their supported interfaces. Work on ZENDEX estimates and app connectivity has already started in the development build, although trading is not enabled yet.

The screenshots below use the actual wallet UI with local demonstration data, so no real keys or balances are exposed. The completed mainnet transactions, visibility analysis and video walkthrough are available here:

A follow-up to the wallet I shared here on 14 September. I said I wanted to back up my commitment with software people could inspect and test. Horizen Wallet v0.7 is now live, with mobile and desktop layouts for Horizen and Base:

On Horizen, the wallet shows separate public and private balances for ZEN, native ETH, USDC.e and cbBTC. It also supports public ZEN staking. We completed the private flow with real funds on Horizen mainnet for both ZEN and native ETH: shield in Wallet A, send privately to Wallet B, partially unshield, then claim. ETH does not need wrapping. USDC.e and cbBTC are enabled in the capped pilot, but I have not completed the same real-fund cycle for those two assets yet.

Base now has public swaps and pools through Aerodrome, AERO rewards, and Aave supply and borrow for ETH, USDC and cbBTC. The wallet can also bridge ZEN, USDC and cbBTC between Base and Horizen, with an option to include ETH for gas on arrival. Native ETH deposits from Base to Horizen are supported. Those newer DeFi and bridge execution paths passed tests on isolated mainnet forks; a fresh real-fund test of them, including bridge delivery, is still to do.

The Android 0.7.0 beta passed four emulator tests covering recovery, locking, network selection and the private-state connections. This remains an experimental pilot: private operations run on my trusted server without hardware attestation, with a shared 1 ZEN custody cap. Base transactions are public. Gas sponsorship is not active, so public ETH is needed for fees. Horizen swaps and pools still say “Coming soon” until ZENDEX provides supported integration interfaces.

Next I want to test the new public paths with small real amounts, improve mobile onboarding and move the private service to supported attested hardware. Deeper ZENDEX and Amaanah integrations depend on interfaces those teams make available.

The screenshots below were captured from the live v0.7 interface in a browser without a wallet loaded. Dashes are unknown balances, and the displayed rates and quotes are point-in-time reads. My aim is to keep publishing the evidence I would expect from any funded build: working software, tested paths and a clear account of the gaps. I would especially welcome feedback on the mobile flow and what feels awkward to use.