Private payments rely on a global uniqueness guarantee to prevent double-spends, making them incompatible with local-first architectures. This talk explores introducing trusted hardware to remove this requirement, enabling a design that is local-first, but still uses consensus as a fallback.