Demo • Payments
Execution-time governance for money movement
Proof shape: VETO ⇒ ledger unchanged • ALLOW ⇒ ledger updated • verified via evidence logs + before/after hashes.
Irreversible sink simulated
- Sink: governed append to
ledger.jsonl(represents “funds sent”) - Controls: amount caps, beneficiary allowlist, idempotency key requirement
VETO / INVALID
Transfer rejected at the boundary. Verification confirms the ledger sink hash is unchanged.
ALLOW / VALID
Transfer allowed at the boundary. Verification confirms the ledger sink hash changes and evidence logs record execution.
Evidence reports
VETO report
Report includes scenario target vs observed decision, evidence excerpt, timeline, and sink hashes.
ALLOW report
Report includes evidence excerpt + before/after sink hashes proving the ledger append occurred.
Invariants enforced at the boundary
- amount must be ≤ configured cap
- beneficiary must be allowlisted
- idempotency key required
Use case fit: payouts, internal transfer tooling, automated finance ops, reconciliation scripts.
Contact
Contact