The USDG sits in a contract you can read. No signup, no deposit, and no operator who can freeze your funds or walk off with them.
The page adds Robinhood Testnet and asks for USDG approval only when you open a trade.
Use two different Robinhood addresses and two different Pearl SimNet rprl1p addresses.
The page generates the secret, refund ladder, Pearl funding address, and trade ID in your browser.
Send SimNet PRL to the generated Pearl address. The measured enclave verifies it and arms the escrow.
The seller claims USDG and reveals the secret. The buyer then claims PRL. If the trade stalls, the buyer refunds after expiry.
You pay USDG and receive PRL. You escrow first; the seller then locks their PRL on Pearl. If they never do, you take your USDG back after the deadline, always and unconditionally.
rprl1p… SimNet address. We decode its public key in your browser;
no private key is ever involved. An HTLC address (rprl1z…) is rejected because nobody holds a key for it.You hold PRL and want USDG. The buyer escrows first - so before you lock anything, you should already see their USDG sitting in the contract.
Robinhood Chain cannot check whether something happened on Pearl. Normally you'd fix that with a light client, a contract that verifies Pearl's proof-of-work directly. That isn't possible here: Pearl's proof-of-work is a ~60 KB recursive STARK over the Goldilocks field, and the EVM has no precompile that can verify it. Verifying the enclave's own attestation document on-chain is possible (Base's audited verifier does it for about 13.8 million gas), but that only proves which code ran inside the enclave. The measured enclave's own light client verifies what happened on Pearl.
For this pair of chains, the enclave attester is structural. What the contract does guarantee is that authorising and paying are separate: the attester's signature moves nothing, only the seller can claim, and your refund after the deadline cannot be blocked by anyone. The realistic ceiling is several independent attesters, so that no single one can release funds. This is not trustless.