This page is the public face of an internal engineering discipline: if a statement can't be tied to shipped code and a passing test, it is not made here — it lives in our internal gaps register until it can be. Marketing that can't survive an auditor isn't marketing we want. Anything marked NDA is available to qualified counterparties with verification instructions included.
Records are protected with ML-KEM-1024 hybrid key encapsulation and ML-DSA-87 signatures (FIPS 203/204 — the CNSA 2.0 algorithms), implemented in production Rust and gated by NIST known-answer tests. Encryption is not a service in front of the database; the database does not operate without it.
When a compliance gate is installed, a transfer without a valid envelope (originator/beneficiary identification, jurisdiction, travel-rule attestation) does not execute and produce an audit trail — it structurally fails to commit. Sanctions list state is anchored into the ledger history itself, so "what did the operator know and when" is answerable cryptographically.
The ledger replicates across nodes with crash-fault-tolerant consensus and produces a verifiable state commitment per transfer — "final" is a mathematical state, not a probabilistic confirmation count. A public multi-operator network with a live explorer is being stood up now.
Cryptographic algorithm choice is a governed, versioned property of the network. When standards evolve, the network migrates by governance epoch — no hard fork, no address migration, no flag day. This is the property that makes "survives Q-day" a maintenance plan rather than a slogan.
Every stored element carries provenance and a confidence state; outputs are traceable to the inputs that produced them. The system can distinguish "I know X from source S at confidence C" from "X is statistically likely" — including saying "I don't know."
We publish benchmark numbers only with full methodology, hardware specification, and reproduction instructions attached — and that package is shared under NDA rather than compressed into a marketing number. If a number can't be reproduced from the document we hand you, we don't hand it to you.
A publicly observable multi-node network where anyone can watch transfers reach finality and verify post-quantum signatures. Listed here because we intend to claim it soon — and per our own rules, it doesn't get a "shipped" badge until you can click it.