How the bridge works.

Proofs, custody rules and the two crossing routes. Eight graphics in Paper and Ink, with vector and PNG downloads.

Download file list Read How It Works

Every block carries its proof.

Pearl certificates, TEE verification, a vendor quorum and minting on Ethereum.

Every block carries its proof. Pearl certificates, TEE verification, a vendor quorum and minting on Ethereum. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
Every block carries its proof. Pearl certificates, TEE verification, a vendor quorum and minting on Ethereum. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

Two chains. Distinct checks.

Where work proofs, checkpoint signatures and transaction proofs are checked.

Two chains. Distinct checks. Where work proofs, checkpoint signatures and transaction proofs are checked. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
Two chains. Distinct checks. Where work proofs, checkpoint signatures and transaction proofs are checked. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

The vault has rules.

A capped withdrawal, a fixed payout list and a review window before payout.

The vault has rules. A capped withdrawal, a fixed payout list and a review window before payout. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
The vault has rules. A capped withdrawal, a fixed payout list and a review window before payout. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

A wrong batch goes back.

An independent watchtower can sweep an unexpected batch before the window closes.

A wrong batch goes back. An independent watchtower can sweep an unexpected batch before the window closes. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
A wrong batch goes back. An independent watchtower can sweep an unexpected batch before the window closes. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

New keys have to wait.

Delayed rekeying, a watchtower veto and the separate council recovery path.

New keys have to wait. Delayed rekeying, a watchtower veto and the separate council recovery path. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
New keys have to wait. Delayed rekeying, a watchtower veto and the separate council recovery path. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

Two directions. Five steps each.

The deposit and redemption routes, with the chain and custody steps identified.

Two directions. Five steps each. The deposit and redemption routes, with the chain and custody steps identified. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
Two directions. Five steps each. The deposit and redemption routes, with the chain and custody steps identified. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

Consensus, with proof behind it.

What TEE verification and covenant rules constrain, and what remains trusted.

Consensus, with proof behind it. What TEE verification and covenant rules constrain, and what remains trusted. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
Consensus, with proof behind it. What TEE verification and covenant rules constrain, and what remains trusted. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

The wait is part of the design.

Confirmations, caps, cancellation windows and pause behaviour.

The wait is part of the design. Confirmations, caps, cancellation windows and pause behaviour. Light · Paper
Light · Paper
PNG ↓SVG ↓Editable SVG ↓
The wait is part of the design. Confirmations, caps, cancellation windows and pause behaviour. Dark · Ink
Dark · Ink
PNG ↓SVG ↓Editable SVG ↓

Source: Pavilion Bridge

The proof path in motion.

Each stage receives a slow outline. The labels stay visible throughout. The SVG follows reduced motion preferences; every loop also has a static PNG.

Static proof pipeline in light mode
Light · Paper
Play loopFive proof stages highlighted in sequence
GIF ↓Animated SVG ↓Static PNG ↓
Static proof pipeline in dark mode
Dark · Ink
Play loopFive proof stages highlighted in sequence
GIF ↓Animated SVG ↓Static PNG ↓

Six seconds per loop at 1200 × 675. The loop explains a sequence; its duration is not a transfer estimate. Close “Play loop” to hide it.

Keep the checks distinct.

Use the mechanism and its trust assumptions together.

Work proofs and signatures

Attesters verify Pearl’s work certificates inside TEEs. Ethereum checks their checkpoint signatures and the deposit’s inclusion proof. Ethereum does not verify Pearl’s mining certificate directly.

Script rules and watchtowers

The covenant constrains funds. A watchtower checks whether the batch matches Ethereum and must act inside the window. The signer quorum, governance, correct code and independent chain data still matter.

D, D2 and DRekey are configured delays in blocks. Keep those symbols when no deployment parameters are supplied. The editable SVGs retain text; the display SVGs outline it for consistent rendering. Use the bundled Manrope and Geist Mono fonts to edit labels.