Live Decisions

Real-time policy evaluation across all Bring-Your-Own-Identity sources · streaming

◈Decisions / 24h

18,247

+12.4% vs prev. 24h

⚡Decision p95

113ms

SLO 150ms ✓

◇Mandate accept

99.42%

106 rejects · +0.08pp

▣Attestation fresh

99.91%

target 99.5% ✓

⬣Active agents

287

124 EN · 56 WX · 41 SN · 38 SF · 28 NA

⎔Open incidents

1

INC-2026-0418 · tier pending

Decision Stream

Click a row to inspect mandate chain, checks, and dossier

live

Time (UTC)	Decision	Agent	Mandate	Operator	Amount	Verdict	Latency
14:02:11.314	pd_7f4c…a91e	EN ap-automation-7f4c oid: aaaa-1111-…-bbbb	AP2 / Cart	smith.j (Asst Tres)	$4,275.00	Allow	94
14:02:11.087	pd_3a18…07ce	WX treasury-sweep-2a91 wx: 9c4d-…-2a91	x402 / Payload	garcia.m (Treasurer)	$48,500.00	Step-up	137
14:02:10.842	pd_b22d…f413	SF procurement-bot-3 AGENT_ID: 0ZeHs00…	AP2 / Payment	patel.a (Op)	$812.40	Allow	71
14:02:10.611	pd_d59f…21ba	SN invoice-clearer-A sys_id: e91a8…	AP2 / Cart	kim.s (Op)	$1,247.80	Allow	62
14:02:10.388	pd_a04c…91dd	NA supplier-pay-9 SVID spiffe://acme.tenants…	ACP / DelegTok	chen.l (Op)	$216.55	Allow	58
14:02:09.974	pd_e7b1…4408	EN ap-automation-7f4c oid: aaaa-1111-…-bbbb	AP2 / Cart	smith.j (Asst Tres)	$83,200.00	Deny	109
14:02:09.581	pd_5c83…2e7f	WX basf-spot-fx-1 wx: 2b8a-…-1e44	AP2 / Payment	garcia.m (Treasurer)	$12,940.00	Allow	88
14:02:09.222	pd_19f6…b8a3	SF procurement-bot-3 AGENT_ID: 0ZeHs00…	x402 / Payload	patel.a (Op)	$48.20	Allow	54
14:02:08.940	pd_8aac…ff10	SN jpm-onboarding-flow sys_id: 0c4f1…	UMP / Native	kim.s (Op)	$3,118.00	Allow	79
14:02:08.501	pd_44e2…16cd	SP klarna-refunds-edge spiffe://klarna.tenants…	AP2 / Cart	chen.l (Op)	$640.10	Allow	67

Showing latest 10 of 18,247 decisions · auto-refresh every 1s

Mandate registry →View all decisions →

Decision detail

pd_7f4c8a2e9d1b…a91e

Allow

Decided at2026-05-19 14:02:11.314 UTC

Total latency94 ms under SLO

Agentap-automation-7f4c

BYOI sourceMicrosoft Entra Agent ID

Operatorsmith.j · Asst Treasurer

Counterpartyurn:duns:123456789

AmountUSD 4,275.00 · ACH

Mandate chain · AP2

①

Intent

im_3f…a01

②

Cart

cm_9b…7e2

③

Payment

pm_2a…d44

Verification checks

✓ECDSA P-256 signature

8 ms

✓Checkout-hash linkage

3 ms

✓Cart constraints satisfied

11 ms

✓Freshness (intent_expiry)

2 ms

✓Revocation: not revoked

14 ms

✓Agent binding to oid

6 ms

✓Operator cap: $4,275 / $25,000 day

5 ms

✓Attestation fresh (Nitro PCR8)

9 ms

Audit dossier · sealed

{ "decision_id": "pd_7f4c8a2e…a91e", "sealed_at": "2026-05-19T14:02:11.339Z", "verdict": "allow", "mandate_chain_sha256": "4b1a…f3c2", "reasoning_trace_sha256": "e0a8…1b9d", "policy_version": "v2026.05.18-a", "signed_by": "ed25519:settlo-decision-2026Q2" }

BYOI source health

Last poll · 14:02:11

5 of 5 OK

EN

Microsoft Entra Agent ID

CAE up · JWKS fresh · 124 agents

124●

WX

IBM watsonx Orchestrate

IAM token T-42m · 56 agents

56●

SN

ServiceNow AI Agent

A2A API authn · 41 agents

41●

SF

Salesforce Agentforce

Conn. App: signed-JWT · 38

38●

NA

UMP Native (SPIRE)

Trust bundle T-3h · 28 SVIDs

28●

Operator caps · today

Per-day cap utilization · rolling 24h

Bound mandates →Manage →

garcia.mTreasurer

$184,420 / $250,000

smith.jAsst Treasurer

$87,615 / $150,000

patel.aOperator · EMEA

$22,140 / $50,000

kim.sOperator · APAC

$11,388 / $50,000

chen.lOperator · AMER

$8,210 / $40,000

Alerts & reviews

Highest severity first

1 open

INC-2026-0418 · Tier classification pending

Liability waterfall awaiting reasoning-trace root-cause for pd_e7b1…4408 (Deny: OPERATOR_CAP_EXCEEDED).

opened 14:01:48 · day 1 of 30

Step-up required · 2 agents

treasury-sweep-2a91 hit per-tx cap; FIDO2 challenge pending in Entra CA.

14:02:11 · auto-routed

Periodic review · Q2 Op entitlements

Middle Office to sample 12 of 287 active OperatorEntitlements.

due in 12 days

BR/DOA v2026.05 effective

Acme Corp BR/DOA v2026.05 activated. Per-operator caps refreshed.

today · 09:14

Agent Registry

All AI agents registered to Acme Corp Treasury · 287 active · 12 suspended · 3 pending approval

⌕

⬣Active agents

287

+14 in last 7d

⏱Pending approval

3

avg DRAFT → ACTIVE: 3.2 days

●Suspended

12

2 attestation stale, 10 manual

⬡BYOI coverage

90%

259 BYOI · 28 Native SVID

All agents

Showing 1 – 14 of 287

Agent	BYOI source	Operator	Purpose	State	Caps (day)	Last attested	Last decision
EN ap-automation-7f4c oid: aaaa-1111-…-bbbb	Entra Agent ID	smith.j	AP_AUTOMATION	ACTIVE	$4,275 / $25,000	3m ago · PCR8 ✓	14:02:11
WX treasury-sweep-2a91 wx: 9c4d-…-2a91	watsonx Orchestrate	garcia.m	TREASURY_SWEEP	ACTIVE	$148,500 / $250,000	12m ago	14:02:11
SF procurement-bot-3 AGENT_ID: 0ZeHs00…	Salesforce Agentforce	patel.a	PROCUREMENT	ACTIVE	$22,140 / $50,000	8m ago	14:02:10
SN invoice-clearer-A sys_id: e91a8…	ServiceNow AI Agent	kim.s	AP_AUTOMATION	ACTIVE	$8,210 / $40,000	5m ago	14:02:10
NA supplier-pay-9 spiffe://acme.tenants…	UMP Native (SPIRE)	chen.l	AP_AUTOMATION	ACTIVE	$640 / $20,000	2m ago · Nitro ✓	14:02:10
WX basf-spot-fx-1 wx: 2b8a-…-1e44	watsonx Orchestrate	garcia.m	FX_HEDGING	ACTIVE	$12,940 / $100,000	15m ago	14:02:09
EN macquarie-am-rebal oid: ddff-2222-…-9921	Entra Agent ID	garcia.m	ASSET_MGMT	ACTIVE	$24,800 / $80,000	21m ago	14:02:08
SN jpm-onboarding-flow sys_id: 0c4f1…	ServiceNow AI Agent	kim.s	CLIENT_ONBOARD	ACTIVE	$3,118 / $30,000	9m ago	14:02:08
SP klarna-refunds-edge spiffe://klarna.tenants…	SPIFFE federated	chen.l	REFUNDS	ACTIVE	$640 / $20,000	4m ago	14:02:08
WX hubspot-revrec-sweep wx: 41c2-…-77a0	watsonx Orchestrate	kim.s	REV_REC	ACTIVE	$917 / $15,000	11m ago	14:02:07
EN salesforce-cpq-sync oid: ee10-3333-…-7782	Entra Agent ID	patel.a	CPQ_SYNC	PENDING_APPROVAL	— / —	awaiting Treasurer	—
SF netsuite-ar-collector AGENT_ID: 0ZeHs01…	Salesforce Agentforce	patel.a	AR_COLLECT	SUSPENDED	— / —	ATTESTATION_STALE	2 days ago
SN ariba-pactum-negotiator sys_id: 4f88c…	ServiceNow AI Agent	chen.l	PROCUREMENT	PENDING_APPROVAL	— / —	awaiting Treasurer	—
NA tax-withholding-ind spiffe://acme.tenants…	UMP Native (SPIRE)	kim.s	TAX_WHT	ACTIVE	$1,890 / $10,000	6m ago · Nitro ✓	14:01:54

Page 1 of 21 · 287 total

← Prev Next →

Mandate Inbox

Inbound payment mandates verified at the boundary · AP2 / x402 / ACP / Native

⌕

◇Mandates / 24h

1,418

+8.2%

⚡Verify p95

52ms

SLO 60ms ✓

✓Accept rate

99.42%

99.51 last 7d

✗Rejects today

8

5 freshness · 2 scope · 1 sig

Recent verifications

Newest first · click for full mandate payload

Time	Mandate ID	Spec	Agent	Counterparty	Amount	Result	Failed checks
14:02:11.301	cm_9b7e2a4f01d3	AP2 / Cart	EN ap-automation-7f4c	urn:duns:123456789	$4,275.00	PASS	—
14:02:11.063	x402_0xab14…f3	x402 / Payload	WX treasury-sweep-2a91	0x…supplier-treasury	$48,500.00	STEP_UP	op_cap_exceeded_per_tx
14:02:10.821	pm_2ad44b8c91	AP2 / Payment	SF procurement-bot-3	urn:duns:987654321	$812.40	PASS	—
14:02:10.591	cm_8ee311904a	AP2 / Cart	SN invoice-clearer-A	urn:duns:445566778	$1,247.80	PASS	—
14:02:10.371	acp_tok_3f8a91	ACP / DelegTok	NA supplier-pay-9	merchant_stripe_acct_…	$216.55	PASS	—
14:02:09.955	cm_4408d1ee76	AP2 / Cart	EN ap-automation-7f4c	urn:duns:123456789	$83,200.00	FAIL	operator_cap_exceeded
14:02:09.560	pm_2e7f5c83b1	AP2 / Payment	WX basf-spot-fx-1	urn:duns:334455667	$12,940.00	PASS	—
14:02:09.197	x402_0x4f88…02	x402 / Payload	SF procurement-bot-3	0x…micro-api-svc	$48.20	PASS	—
14:02:08.921	nat_ff108aac21	UMP / Native	SN jpm-onboarding-flow	internal:settlement	$3,118.00	PASS	—
14:02:08.114	cm_b8a319f6a4	AP2 / Cart	SP klarna-refunds-edge	urn:duns:998877665	$640.10	PASS	—
14:01:54.808	cm_eaa10221bc	AP2 / Cart	WX hubspot-revrec-sweep	urn:duns:556677889	$200.00	FAIL	intent_expiry_passed

Showing 11 of 1,418 in last 24h

View all →

Incidents

Liability-waterfall incident queue · 1 open, 4 resolved this month

Incident detail

INC-2026-0418

Opened2026-05-19 14:01:48 UTC

Triggering decisionpd_e7b1…4408 (deny)

Agentap-automation-7f4c

Operatorsmith.j · Asst Treasurer

Counterpartyurn:duns:123456789

Attempted amountUSD 83,200.00

Operator per-tx capUSD 25,000.00

Reason codeOPERATOR_CAP_EXCEEDED

Exposure if executedUSD 58,200.00 over cap

Status

✓Decision rejected at boundary (no funds moved)

14:01:48

✓Agent moved to SUSPENDED · operator notified

14:01:51

!Reasoning trace root-cause analysis pending

in progress

!Tier classification: Operator vs Platform pending

analyst assigned

○30-day pre-arbitration default at 2026-06-18 14:01:48 UTC

T-29d 23h

Resolved this month

4 incidents · all tier-classified

INC-2026-0414 · Operator tier

$1,210 settled to wrong counterparty (Operator config error). Allocated to Operator; insurance backstop confirmed.

resolved 2026-05-12 · 4 days

INC-2026-0413 · Counterparty tier

Counterparty agent submitted invalid mandate; rejected. Logged for counterparty reputation.

resolved 2026-05-08 · 1 day

INC-2026-0411 · Principal tier

Mandate within four corners; loss accepted by Principal. No platform fault.

resolved 2026-05-03 · 2 days

INC-2026-0407 · Platform tier

Signature-verify library defect; HSM fix shipped v2026.04.21. Insurance claim filed.

resolved 2026-04-23 · 3 days

Operator Entitlements

Who can authorize what · derived from BR/DOA v2026.05 · 14 operators in scope

▣Operators

14

4 Treasury · 6 Procurement · 4 AP/AR

◆BR/DOA version

v2026.05

effective today · co-signed CFO + GC

⏱Reviews pending

3

Q2 sample due 31 May

✓Co-sign coverage

100%

all caps {">"} $50K require co-sign

Active operators

Roles, caps, and BR/DOA citations

⌕

Operator	Role	Per-tx cap	Per-day cap	Co-sign rule	BR/DOA ref	Status
garcia.m Maria Garcia	Treasurer	$50,000	$250,000	self for ≤$50K · CFO co-sign {">"}$50K	§4.1.a	ACTIVE
smith.j Jane Smith	Asst Treasurer	$25,000	$150,000	Treasurer co-sign {">"} $25K	§4.1.b	ACTIVE
patel.a Anish Patel	Operator · EMEA Treasury	$10,000	$50,000	Asst Treasurer co-sign {">"} $10K	§4.1.c	ACTIVE
kim.s Soo-yeon Kim	Operator · APAC Treasury	$10,000	$50,000	Asst Treasurer co-sign {">"} $10K	§4.1.c	ACTIVE
chen.l Liwei Chen	Operator · AMER Treasury	$10,000	$40,000	Asst Treasurer co-sign {">"} $10K	§4.1.c	ACTIVE
okafor.n Nneka Okafor	AP Manager	$5,000	$25,000	AP Director co-sign {">"} $5K	§4.2.a	ACTIVE
nakamura.h Hiro Nakamura	AR Manager	$5,000	$25,000	—	§4.2.b	ACTIVE
davis.r Rachel Davis	Procurement Manager	$15,000	$75,000	Procurement Dir. co-sign {">"} $15K	§4.3.a	ACTIVE
silva.r Rafael Silva	Procurement Operator	$3,000	$15,000	Proc. Mgr co-sign {">"} $3K	§4.3.b	ACTIVE
volkov.a Anya Volkov	Tax Operator	$8,000	$30,000	—	§4.4.a	ACTIVE
walker.t Trevor Walker	Procurement Operator	$3,000	$15,000	Proc. Mgr co-sign {">"} $3K	§4.3.b	REVIEW DUE

11 of 14 shown · all BR/DOA-anchored

View source document →

Board Resolutions & Delegations of Authority

Source-of-truth governance documents · versioned, signed, machine-readable

▤

Acme Corp BR/DOA

v2026.05 · acme-brdoa-2026-05.yaml

EFFECTIVE

Effective from

2026-05-19

Supersedes

v2026.02

Signed by

CFO + General Counsel

Hash anchor

sha256:4f81…3c9a

Operators bound

14

Next review

2026-08-31

▤

Acme Corp Procurement DOA

v2026.05 · acme-procurement-doa-2026-05.yaml

EFFECTIVE

Effective from

2026-05-01

Supersedes

v2026.01

Signed by

CPO + CFO

Hash anchor

sha256:7e22…a015

Operators bound

6

Next review

2026-11-01

Version history

All historic versions · immutable, WORM-anchored

Version	Document	Effective	Status	Signed by	Hash	Operators
v2026.05	Acme Corp BR/DOA	2026-05-19	EFFECTIVE	CFO + GC	sha256:4f81…3c9a	14
v2026.05	Procurement DOA	2026-05-01	EFFECTIVE	CPO + CFO	sha256:7e22…a015	6
v2026.02	Acme Corp BR/DOA	2026-02-15	SUPERSEDED	CFO + GC	sha256:b101…77fd	13
v2026.01	Procurement DOA	2026-01-15	SUPERSEDED	CPO + CFO	sha256:a299…1108	5
v2025.11	Acme Corp BR/DOA	2025-11-04	SUPERSEDED	CFO + GC	sha256:30ab…f4c1	12

Federated Delegations

Builder → Operator → Counterparty authority chain · cross-tenant delegations

⦾Active

6

3 SI · 2 ISV · 1 enterprise

⇄Federated tenants

4

Accenture · BCG · KPMG · Bain

✓Hash-anchored

6 / 6

100% verified

⏱Expiring <30d

1

renew required by 2026-06-01

Active delegations

Authority flows from Acme (principal) → external operator → agents

Delegation ID	Builder	Operator	Counterparty scope	Cap	Effective	Status
dlg_acn_01HZ	Accenture · BPS	Acme Corp	AP automation · NA	$2M / mo	2026-04-01 → 2026-12-31	ACTIVE
dlg_bcg_02JK	BCG · Procurement	Acme Corp	Spot purchasing · EMEA	$500K / mo	2026-03-15 → 2026-09-15	ACTIVE
dlg_kpmg_03LM	KPMG · Tax	Acme Corp	Tax withholding · IN	$100K / mo	2026-01-01 → 2026-12-31	ACTIVE
dlg_pact_04NP	Pactum AI	Acme Corp	Vendor renegotiation	$0 (advisory)	2026-02-12 → 2026-08-12	ACTIVE
dlg_lyzr_05QR	Lyzr.ai	Acme Corp	Cust support refunds	$50K / mo	2026-04-20 → 2027-04-20	ACTIVE
dlg_bain_06ST	Bain · Strategy	Acme Corp	Forecasting (read)	$0 (read-only)	2025-12-01 → 2026-06-01	EXPIRES SOON

Periodic Reviews

Quarterly sampling and re-attestation cycles · SOX 404 / SOC 2 CC9.2 / DORA Art.6

Open reviews

3 reviews scheduled in next 30 days

DUE 2026-05-31 · 12 DAYS

Q2 Operator entitlement sample

Middle Office samples 12 of 287 active OperatorEntitlements. Treasurer co-signs results. Maps to SOX 404 control AC-04.

DUE 2026-06-08 · 20 DAYS

Mandate-engine quarterly re-attestation

Re-verify mandate verification engine SHA-256, Nitro Enclave PCR8 measurements, signing-key roster. Maps to SOC 2 CC6.1.

DUE 2026-06-15 · 27 DAYS

BYOI provider trust review

Confirm Entra JWKS, watsonx IAM trust anchors, ServiceNow A2A roots, Agentforce Connected App certs. Stale > 90 days triggers re-onboard.

2026-07-01 · IN 43 DAYS

Federated delegation renewal · BCG

dlg_bain_06ST · expires 2026-06-01 · principal counsel review required.

2026-08-31 · IN 104 DAYS

BR/DOA v2026.05 quarterly review

CFO + GC re-affirm or amend BR/DOA. Audit committee briefing scheduled.

Last 90 days · completed

8 reviews · all evidence sealed

Date	Review	Reviewer	Outcome	Evidence
2026-04-30	Q1 Op entitlement sample	kim.s	PASS	ev_q1_2026
2026-03-28	Mandate engine re-attest	auto	PASS	ev_mr_q1
2026-03-15	BYOI provider trust	chen.l	PASS	ev_byoi_q1
2026-02-28	Federation policy	GC	PASS	ev_fed_q1
2026-02-15	BR/DOA quarterly	CFO	AMEND	ev_brdoa_q1

Decision Dossiers

Sealed audit artifacts · every decision produces one · WORM-anchored · regulator-ready

⌕

◉Sealed today

18,247

avg seal time 25ms

⬢Total sealed

8.4M

90 day retention min · 7yr default

✓Integrity verified

100%

daily WORM scan: clean

⎘Exports / 24h

3

2 internal audit · 1 external counsel

Recent dossiers

Newest sealed first · click for full payload

Sealed at	Dossier ID	Decision	Agent	Operator	Verdict	Chain hash	WORM anchor
14:02:11.339	do_7f4c8a2e	pd_7f4c…a91e	ap-automation-7f4c	smith.j	Allow	sha256:4b1a…f3c2	s3://…anchor-918274
14:02:11.110	do_3a1807ce	pd_3a18…07ce	treasury-sweep-2a91	garcia.m	Step-up	sha256:7e22…a015	s3://…anchor-918273
14:02:10.865	do_b22df413	pd_b22d…f413	procurement-bot-3	patel.a	Allow	sha256:8aab…01ff	s3://…anchor-918272
14:02:10.635	do_d59f21ba	pd_d59f…21ba	invoice-clearer-A	kim.s	Allow	sha256:f001…22ee	s3://…anchor-918271
14:02:09.998	do_e7b14408	pd_e7b1…4408	ap-automation-7f4c	smith.j	Deny	sha256:c990…7788	s3://…anchor-918270
14:02:09.605	do_5c832e7f	pd_5c83…2e7f	basf-spot-fx-1	garcia.m	Allow	sha256:1234…ab98	s3://…anchor-918269
14:02:09.245	do_19f6b8a3	pd_19f6…b8a3	procurement-bot-3	patel.a	Allow	sha256:5566…cdef	s3://…anchor-918268
14:02:08.963	do_8aacff10	pd_8aac…ff10	jpm-onboarding-flow	kim.s	Allow	sha256:99aa…bbcc	s3://…anchor-918267

8 of 18,247 today

Dossier-T extension →Build export bundle →

Audit Export

Build sealed evidence bundles for external auditors, regulators, or counsel

New export bundle

Configure scope, recipient, and signing policy

Bundle name

For your records

Date range

UTC

Scope

What to include in the bundle

Decision dossiers (sealed) Reasoning traces (referenced) BR/DOA documents in effect Operator entitlement snapshots Raw mandate payloads (waiver required) Incident records & waterfall

Sampling

For statistical attestation

Recipient

Bundle will be encrypted to this party's pubkey

Co-sign

Required for SOX-scope bundles

CFO co-sign required GC co-sign required

Recent exports

Last 30 days

2026-Q1 SOX 404 sample

KPMG · 184 dossiers · 22.4 MB · co-signed CFO + GC

delivered 2026-04-30 14:12 UTC

DORA Art. 6 ICT-risk evidence

EU regulator · 412 dossiers · 51.8 MB · co-signed CFO + GC + CISO

delivered 2026-04-15 09:04 UTC

Internal audit deep-dive · AP

Internal · 88 dossiers · 11.2 MB

delivered 2026-04-08 16:48 UTC

Counsel investigation · INC-2026-0407

External counsel · 14 dossiers + reasoning trace · awaiting GC co-sign

pending

Compliance Map

UMP primitives mapped to control frameworks · auto-attested · evidence on demand

SOX 404 · IT GC 12 / 12

Authorization of transactionsAC-04 · Op entitlements
Segregation of dutiesSD-01 · Co-sign rules
Audit trail completenessAU-02 · Sealed dossier
Periodic re-attestationAC-06 · Quarterly review
Limits enforcementTR-03 · Cap engine
Exception handlingIR-04 · Incident queue

SOC 2 Type II 38 / 38

CC6.1 · Logical accessBYOI + SVID
CC6.2 · AuthenticationSignature verification
CC6.6 · Network restrictionSPIRE federation
CC7.2 · Anomaly detectionCap breach & deny
CC9.2 · Vendor riskFederated delegation
A1.2 · AvailabilityMulti-region active-active

DORA (EU) 9 / 9

Art. 5 · ICT risk mgmtCap + step-up policy
Art. 6 · ICT-risk frameworkSealed dossiers
Art. 8 · Identification & classificationAgent registry
Art. 17 · Incident reportingLiability waterfall
Art. 28 · Third-party riskFederation policy
Art. 30 · Sub-contractorsDelegation chain

ISO 27001:2022 24 / 26

A.5.15 · Access controlOp entitlements
A.5.16 · Identity mgmtBYOI + Native
A.5.17 · AuthenticationSig + attestation
A.8.15 · LoggingDossier · WORM
A.8.16 · MonitoringLive decisions
A.5.23 · Cloud securityin progress

NIST SP 800-53 r5 52 / 52

AC-2 · Account mgmtRegistry · Op caps
AC-3 · Access enforcementDecision engine
AU-2 · Event loggingDossier
AU-10 · Non-repudiationEd25519 signing
IA-9 · Service authSVID + JWT
SI-7 · IntegrityHash chain

PCI DSS v4.0 8 / 8

Req 7 · Least privilegeCap engine
Req 8 · Identify usersAgent registry
Req 10 · LoggingDossier
Req 12 · Policy mgmtBR/DOA

Liability Waterfall

Tier classification: Principal · Operator · Counterparty · Platform · Insurance

⎔Resolved YTD

23

avg classification: 4.1 days

$Loss avoided

$1.84M

rejections at boundary

$Loss realized

$12.4K

5 incidents · all tier-resolved

✓Insurance covered

100%

Lloyd's of London · $25M aggregate

Waterfall tiers · standard

Applied to every incident in classification order

1 · Principal

Tx within four corners of mandate & BR/DOA · loss accepted by principal

unlimited

enabled

2 · Operator

Operator config error, cap-breach, or scope violation

$2M / yr

enabled

3 · Counterparty

Counterparty fraud, invalid mandate, or merchant breach

recourse

enabled

4 · Platform

UMP / Settlo engine defect (signature lib, cap engine, ledger)

$10M / yr

enabled

5 · Insurance

Lloyd's syndicate · agentic-commerce wrap policy

$25M aggregate

bound

Bring-Your-Own-Identity Connections

Federated trust into every major agent platform · 5 providers connected · 259 agents covered

EN

CONNECTED

Microsoft Entra Agent ID

Continuous Access Eval · OIDC + signed-JWT

Agents

124

Decisions /d

8.2K

Verify p95

42ms

CAE up · JWKS rotated 12h ago · last token refresh 3m

WX

CONNECTED

IBM watsonx Orchestrate

IAM signed-action tokens · A2A v1

Agents

56

Decisions /d

4.1K

Verify p95

48ms

IAM token T-42m · trust anchor pinned

SN

CONNECTED

ServiceNow AI Agent

A2A API authn · sys_id binding

Agents

41

Decisions /d

3.0K

Verify p95

51ms

Now instance ack · MID server tunnel up

SF

CONNECTED

Salesforce Agentforce

Connected App · signed-JWT bearer flow

Agents

38

Decisions /d

2.4K

Verify p95

44ms

Connected App cert valid · expires 2027-02-12

NA

NATIVE

UMP Native Issuer (SPIRE)

spiffe:// SVID · X.509 + JWT · Nitro attest

SVIDs

28

Decisions /d

512

Verify p95

38ms

Trust bundle T-3h · PCR8 measurements clean

+

AVAILABLE

Add another provider

Google ADK · LangChain · CrewAI · Cognition · ServiceNow Now Assist

—

Native Issuer · SPIRE

Settlo-managed SPIFFE Workload Identities for agents without a BYOI source

Trust domain

spiffe://acme.tenants.settlo.io

Trust domainacme.tenants.settlo.io

IssuerSettlo SPIRE Server

Regionus-east-1 (primary) · us-west-2 (DR)

Trust bundle TTL24h · auto-rotate

SVID lifetime1h · re-attest

AttestorAWS Nitro Enclave (PCR8 measured)

Federation3 peers (klarna · jpm · macquarie)

Trust bundle (current)

// trust-bundle.json · valid until 2026-05-20 03:14:22 UTC { "trust_domain": "acme.tenants.settlo.io", "keys": [ { "kid": "settlo-spire-2026Q2", "kty": "EC", "crv": "P-256" }, { "kid": "settlo-spire-2026Q1", "kty": "EC", "crv": "P-256" } ], "refresh_hint": 43200 }

Registered workloads

28 SVIDs · re-attested every 1h

SPIFFE ID	Selector	Last attest	State
spiffe://…/agent-7f4c	k8s:ns=ap, sa=agent	2m ago	OK
spiffe://…/supplier-pay-9	k8s:ns=pay, sa=supp	2m ago	OK
spiffe://…/tax-wht-ind	k8s:ns=tax, sa=ind	6m ago	OK
spiffe://…/sweep-batch	aws:nitro:pcr8=…	12m ago	OK
spiffe://…/refund-edge-2	k8s:ns=refund, sa=edge	18m ago	OK

5 of 28 shown

View all workloads →

Credentials & Keys

All signing & verification material · 42 active keys · auto-rotation enforced

⬣Active keys

42

8 signing · 12 verification · 22 federation

↻Rotated 30d

9

all on schedule

⏱Rotate next 30d

4

2 auto · 2 manual approval

▣HSM-backed

100%

AWS CloudHSM FIPS 140-3

Signing keys

All keys managed in CloudHSM · never exported

Key ID	Purpose	Algo	HSM slot	Created	Rotates	Status
settlo-decision-2026Q2	Decision dossier signing	Ed25519	hsm-us-east-1-a · slot 4	2026-04-01	2026-07-01	ACTIVE
settlo-decision-2026Q1	Decision dossier signing	Ed25519	hsm-us-east-1-a · slot 3	2026-01-01	retired	RETIRED
settlo-mandate-2026Q2	Mandate verification root	ECDSA P-256	hsm-us-east-1-b · slot 1	2026-04-01	2026-07-01	ACTIVE
settlo-spire-2026Q2	SPIRE CA root	ECDSA P-256	hsm-us-east-1-b · slot 2	2026-04-01	2026-07-01	ACTIVE
settlo-export-2026	Audit export co-signing	Ed25519	hsm-us-east-1-a · slot 5	2026-01-01	2026-06-01	ROTATE SOON
settlo-federation-2026	Cross-tenant federation	Ed25519	hsm-us-east-1-a · slot 6	2026-01-15	2026-07-15	ACTIVE

Attestations

Workload attestation freshness · TEE measurements · runtime integrity proof

▣Freshness rate

99.91%

target 99.5% ✓

◆Agents attested

285/ 287

2 stale (suspended)

⏱Median age

8min

TTL 1h · re-attest 15m

●PCR mismatches

0

last 7 days

Attestation roll · latest

Click row for full TEE quote

Agent	Attestor	Measurement	Last attested	Quote hash	Status
supplier-pay-9	AWS Nitro Enclave	PCR8: 4f1a…8c92	2m ago	sha256:b1e2…0a44	FRESH
tax-withholding-ind	AWS Nitro Enclave	PCR8: 4f1a…8c92	6m ago	sha256:c8f3…1192	FRESH
jpm-onboarding-flow	Azure CVM	RTMR0: 71ab…cc02	9m ago	sha256:7728…ff90	FRESH
basf-spot-fx-1	Intel SGX	MRENCLAVE: 8ab1…	15m ago	sha256:1144…aa88	FRESH
klarna-refunds-edge	AWS Nitro Enclave	PCR8: 9023…f1e0	4m ago	sha256:7a3f…0c19	FRESH
netsuite-ar-collector	—	—	2 days ago	—	STALE

Payment rail connectors

UMP signals · counterparty rails execute · 4 connected · rail-agnostic

S

CONNECTED

Stripe

Cards · ACH · SEPA · acct_acme_prod

Tx /d

9.2K

Success

99.8%

p95

412ms

Webhook signed · idempotency keyed · last sync 14:02

B

CONNECTED

JPMorgan ACH

JPM Treasury Services · NACHA

Tx /d

1.8K

Success

100%

Settlement

T+1

SFTP cutoffs · 14:00 ET window open

V

CONNECTED

Visa TAP

Trusted Agent Protocol · cards

Tx /d

3.1K

Success

99.6%

p95

288ms

Agentic Ready · cryptogram intent signed

x

CONNECTED

x402 · Base L2

Stablecoin (USDC) · onchain settlement

Tx /d

412

Success

99.9%

Finality

2sec

Tx-receipt-hash bound to dossier

Identity provider connectors

5 BYOI sources + Settlo Native · see also Identity → BYOI Connections

EN

CONNECTED

Microsoft Entra Agent ID

CAE · OIDC · signed-JWT

Agents

124

Trust

JWKS

Status

UP

WX

CONNECTED

IBM watsonx Orchestrate

IAM signed-action · A2A v1

Agents

56

Trust

IAM

Status

UP

SN

CONNECTED

ServiceNow AI Agent

A2A API authn · sys_id

Agents

41

Trust

API

Status

UP

SF

CONNECTED

Salesforce Agentforce

Conn. App · signed-JWT

Agents

38

Trust

JWT

Status

UP

NA

NATIVE

UMP Native (SPIRE)

SVID · Nitro attest

SVIDs

28

Trust

SPIRE

Status

UP

Mandate specification connectors

4 specifications supported · all verified by the same engine

AP

SUPPORTED

AP2 · Google

Intent / Cart / Payment mandate triad

/24h

9.8K

Accept

99.6%

p95

48ms

Spec v0.9.2 · upstream pinned · cart-hash verified

x4

SUPPORTED

x402 · Coinbase

Payment payload over HTTP 402

/24h

412

Accept

99.8%

p95

38ms

Onchain receipt anchored to dossier

ACP

SUPPORTED

ACP · Agent Commerce Protocol

DelegationToken · open standard

/24h

2.4K

Accept

99.4%

p95

54ms

Counterparty federation · 3 trust anchors

NA

NATIVE

UMP Native mandate

Settlo-issued · UNIT_RATE / WATERFALL_SPLIT

/24h

5.6K

Accept

99.9%

p95

31ms

Pricing primitives composable · 8 atomic types

General settings

Tenant Acme Corp Treasury · tenant_01HY8K3PQR

Tenant name

Shown in console and audit headers

Tenant ID

Immutable · used in API and dossiers

Audit scope

Drives default retention & co-sign rules

Default time zone

UI display only · dossiers always UTC

Primary region

Where decisions are sealed

Data residency

Mandate payloads, dossiers, reasoning traces

Mandates stay in primary region Replicate dossiers to DR (cross-region encryption) Share aggregate metrics with Settlo analytics

Security & access

Console authentication, step-up policy, and session controls

Authentication

For console users · separate from agent authn

SSO provider

MFA required

FIDO2 (WebAuthn) Step-up for $50K+ approvals SMS fallback

Session lifetime

IP allow-list

Console access from these CIDRs only

Console roles

8 users · role-bound

User	Role	MFA	Last seen
p.settlo	ADMIN	FIDO2	now
garcia.m	TREASURER	FIDO2	14:01
smith.j	ASST_TREASURER	FIDO2	13:54
patel.a	OPERATOR	FIDO2	13:48
kim.s	OPERATOR	FIDO2	13:32
chen.l	OPERATOR	FIDO2	13:21
audit-kpmg-r1	AUDITOR	FIDO2	yesterday
ext-counsel-1	VIEWER	FIDO2	2 days ago

API keys

For programmatic access · base URL https://api.umpledger.com/ump/v2

Active keys

Keys are shown once at creation · rotate every 90 days

Key name	Prefix	Scope	Created	Last used	Expires	Status
Production · primary	ump_sk_live_…7f4c	FULL	2026-04-01	12s ago	2026-07-01	ACTIVE
Production · readonly	ump_sk_live_…2a91	READ	2026-04-01	3m ago	2026-07-01	ACTIVE
Staging · CI	ump_sk_test_…b8a3	SCOPED	2026-05-12	1h ago	2026-08-12	ACTIVE
KPMG audit · readonly	ump_sk_live_…4408	READ	2026-04-29	yesterday	2026-06-29	ROTATE SOON

Notifications

Webhooks, email, and PagerDuty routes for incidents and approvals

Incident alerts

Tier-pending or unresolved > 24h

PagerDuty · settlo-treasury-oncall Email · treasury-oncall@acme.com Slack · #treasury-incidents

Step-up requests

Co-sign required from Treasurer

Push to Treasurer's mobile (FIDO2) Slack DM · @maria.garcia Email · treasurer@acme.com

Periodic reviews

Quarterly sample notification

Email · audit-internal@acme.com · 14 days before due ServiceNow ticket · auto-create on due-7d

Webhooks

Decision dossier sealed (real-time)

Instructions

Signed Settlo Instruction Objects (SIO) · produced after /v1/policy:decide ALLOW · tracked through the Settlement State Machine

⌕

◈Instructions / 24h

14,218

+9.8% vs prev 24h

⚡Handoff p95

198ms

SLO 250ms ✓

✓Settled rate

99.31%

98 returned · 14 pending

⏱In flight

142

batch rails & pending finality

⬣Throughput

1.84K/s

target 2K/s/region

✗Idempotency hits

23

duplicates blocked at boundary

Recent instructions

Newest first · click row for SSM history and rail acknowledgement

live

Created	Instruction	Mandate	Rail	Beneficiary	Amount	SSM state	Settled in
14:02:11.412	ins_7f4c…a91e	AP2 / Cart	ACH CCD	urn:duns:123456789	$4,275.00	SUBMITTED	T+0 batch
14:02:11.188	ins_3a18…07ce	x402 / Payload	x402 Base USDC	0x…supplier-treasury	$48,500.00	PENDING	12 of 64 blocks
14:02:10.943	ins_b22d…f413	ACP / SPT	Stripe PSP	nbp_acme_seller_001	$812.40	SETTLED	412ms
14:02:10.712	ins_d59f…21ba	AP2 / Cart	ACH CCD	urn:duns:445566778	$1,247.80	SUBMITTED	T+0 same-day
14:02:10.489	ins_a04c…91dd	ACP / DelegTok	FedNow	merchant_stripe_acct_…	$216.55	SETTLED	1.8s · pacs.002 ACSC
14:02:10.075	ins_e7b1…4408	AP2 / Cart	—	—	$83,200.00	REJECTED	at boundary (cap)
14:02:09.681	ins_5c83…2e7f	AP2 / Payment	SEPA SCT Inst	FR76 1010 7000 03…	€12,940.00	SETTLED	8.4s · VoP match
14:02:09.322	ins_19f6…b8a3	x402 / Payload	x402 Solana USDC	SoLanaWalletAddr…	$48.20	SETTLED	2.1s · 32 slots
14:02:09.040	ins_8aac…ff10	UMP / Native	RTP (TCH)	jpm-corp-acct-…	$3,118.00	SETTLED	1.2s
14:02:08.601	ins_44e2…16cd	AP2 / Cart	UPI Collect	vendor@hdfc	₹52,400.00	PENDING	NPCI switch
14:02:07.214	ins_61ab…cd29	AP2 / Payment	SWIFT pacs.008	Macquarie AU…	$24,800.00	SUBMITTED	gpi UETR active
14:01:54.808	ins_2240…78b1	AP2 / Cart	ACH CCD	urn:duns:556677889	$200.00	RETURNED	R01 NSF · day-1

Showing 12 of 14,218 in last 24h

View all instructions →

SSM · ins_7f4c…a91e

State machine transitions with signed timestamps

✓INSTRUCTED · idempotency key minted

14:02:11.412

✓SUBMITTED · NACHA trace 091000121234567

14:02:11.486

…PENDING · same-day batch window 13:00 ET

in-flight

○SETTLED · awaiting BAI v2 ack

expected T+0 17:00 ET

○RETURNED / RECALLED / DISPUTED / TIMED_OUT

not yet

Idempotency key

// idem_key = SHA-256(canonical_jcs(...)) mandate_id : "cm_9b7e2a4f01d3" rail : "ach.ccd" beneficiary_account : "091000121234567" amount : 427500 currency : "USD" value_date_bucket : "2026-05-19" // => idem_key : "sha256:4b1a2c8e…f3c2" (dedup 7d)

SSM distribution

Live instructions by state · last 24h

SETTLED

14,011 · 98.5%

SUBMITTED in flight

98 · 0.7%

PENDING awaiting finality

44 · 0.3%

REJECTED at boundary

37 · 0.26%

RETURNED RDFI return

14 · 0.10%

RECALLED gSRP / camt.056

2 · 0.01%

DISPUTED handed off

1 · 0.01%

TIMED_OUT

11 · 0.08%

Rail Adapters

Pluggable submit / poll / cancel / reconcile components · routed by Settlo::Routing::v1

⬣Adapters live

11

6 agentic · 5 underlying

⚡Submit p95

1.18s

synch rails · target < 1.5s

✓Adapter health

11 / 11

all green

↻Routing fallthroughs

8

primary → secondary · last 24h

Agentic rails

AP

v0.2 · FIDO

Google AP2

Intent → Cart → Payment · SD-JWT + kb

/24h

9.8K

Open cart

12%

p95

48ms

v0.2 (28 Apr 2026) · "Human Not Present" enabled · revocation index synced

x4

CDP + self

Coinbase x402

EIP-3009 / Permit2 · HTTP 402

/24h

2.1K

Networks

5

p95

2.4s

Base · Solana · Polygon · Arbitrum · World Chain · facilitator pinned

ACP

Apache 2.0

ACP · OpenAI + Stripe

delegate_payment · Stripe SPT

/24h

2.4K

Settle

412ms

PCI scope

PSP

SPT single-seller, single-amount, short-expiry · PSP webhook bound

V

RFC 9421

Visa Trusted Agent

HTTP Message Signatures · Ed25519

A2A /24h

3.1K

Dir. status

UP

p95

62ms

Tenant op key registered in Visa directory · composes with AP2 / ACP / x402

MC

tokenized

Mastercard Agent Pay

Agentic Tokens via MDES

/24h

1.4K

Issuers

38

p95

514ms

US complete (Nov 2025) · AU · NZ · EU (Santander 2 Mar 2026) live

MP

18 Mar 2026

Stripe MPP

Machine Payments Protocol · streaming

/24h

680

Cadences

3

p95

380ms

one-shot / recurring / streaming · wraps x402 + ACP · Visa as design partner

Underlying rails

Adapter	Region	Wire format	Finality	Per-tx cap	/24h	Submit p95	Status
Fedwire Funds	US	pacs.008 / .009 / .002	RTGS · 22h/day	no cap	410	88	UP
ACH (NACHA)	US	CCD / PPD / WEB / CIE	T+0 (SDA) / T+1	$1M (→ $10M 17 Sep 2027)	2.4K	142	UP
FedNow	US	pacs.008 / .002 / .004	instant · 24x7	$10M (since 12 Nov 2025)	1.1K	1.8s	UP
TCH RTP	US	pacs.008 / .002 / .004	instant · 24x7	$10M (since 9 Feb 2025)	820	1.2s	UP
SEPA SCT Inst	Europe	pacs.008 + VoP	10s SLA · 24x7	no cap (IPR)	2.0K	8.4s	UP
SEPA SCT	Europe	pacs.008	T+1	no cap	410	220	UP
SEPA SDD B2B	Europe	pacs.003 / .004	pull · T+1	no cap	140	280	UP
UPI Collect	India	NPCI API + partner-bank	instant · 24x7	P2M ₹5L · daily ₹10L	680	2.1s	UP
UPI Circle (delegated)	India	OC 201-B · P2M only	instant	₹15K / device / mo	92	2.4s	UP
SWIFT pacs.008 (FINplus)	X-border	ISO 20022 + UETR	1-3 days · gpi-tracked	no cap	88	14.2m	UP
CCTP V2 (Circle)	X-border	burn-and-mint · Fast Transfer	8-20s Fast · 13-19m std	no cap	214	12.4s	UP

11 adapters live · CCTP V1 phase-out 31 Jul 2026

Rail selection policy Settlo::Routing::v1 →

Reconciliation Engine

Three-way match · mandate hash → instruction hash → rail acknowledgement

⎔Break rate (T+1)

0.07%

target < 0.1% ✓

!Open breaks

9

6 analyst · 3 awaiting Treasurer

↻Auto-matched 24h

14,189

fuzzy ref + amount-window

⏱Median resolution

4.2h

analyst-assisted

Break queue

Routed by ack format · BAI v2 · MT940/942 · camt.053/.052 · NACHA ACK · UPI settlement file · onchain receipt

9 open

Opened	Break	Instruction	Rail	Type	Mandate amt	Ack amt	Owner	Path
14:01:55	brk_001	ins_2240…78b1	ACH CCD	amount_mismatch	$200.00	$0.00	analyst	3-way miss · R01
13:48:11	brk_002	ins_91cd…e802	SWIFT pacs.008	reference_drift	$48,200.00	$48,200.00	analyst	EndToEndId mangled by correspondent
12:24:38	brk_003	ins_44ee…3920	SEPA SCT	fx_variance	€10,000.00	$10,847.20	analyst	FX outside tolerance band 0.8%
11:55:02	brk_004	ins_77b1…4422	x402 Base	ack_missing	$1,250.00	—	auto-retry	tx not in 12-block window
10:14:08	brk_005	ins_2202…11ab	UPI Collect	amount_mismatch	₹52,400.00	₹52,381.00	analyst	partner-bank rounded 0.04%
09:32:11	brk_006	ins_88aa…0091	ACH CCD	duplicate_ack	$3,118.00	$3,118.00 ×2	Treasurer	ODFI re-submitted file
08:18:54	brk_007	ins_5577…aaff	SWIFT pacs.008	ack_missing	$215,000.00	—	Treasurer	4h fallback poll · gpi UETR silent
07:44:30	brk_008	ins_91f0…1142	x402 Solana	reference_drift	$120.00	$120.00	analyst	Memo program ref not parsed
07:02:08	brk_009	ins_42cd…aa01	FedNow	amount_mismatch	$2.5M	$2.5M	Treasurer	pacs.002 RJCT · liquidity

9 of 9 open breaks · auto-match ran at 14:02

Three-way match policy →

Returns, Reversals & Recalls

NACHA R-codes · SEPA R-transactions · SWIFT gSRP / camt.056 · blockchain reorg

↩Returns 30d

14

11 ACH · 2 SEPA · 1 SWIFT

↻Unauthorized rate

0.02%

NACHA 2026 cap 0.5%

⏱WSUD windows open

3

60-day extended return

$Reversed YTD

$48.2K

all auto-unwound in LoR

NACHA returns · 30 days

R-code distribution · 2026 Operating Rules

Date	R-code	Reason	Window	Instruction	Amount	WSUD	Action
2026-05-19	R01	Insufficient Funds	2 banking days	ins_2240…78b1	$200.00	—	auto-retry
2026-05-17	R10	Not Authorized	60 days	ins_0918…3344	$1,400.00	captured	reverse + notify
2026-05-15	R02	Account Closed	2 banking days	ins_71aa…8800	$315.00	—	onboarding flag
2026-05-14	R03	No Account	2 banking days	ins_6688…cc01	$2,100.00	—	onboarding flag
2026-05-12	R05	Unauthorized via Corp SEC	60 days	ins_1199…aaff	$8,420.00	captured	reverse + investigate
2026-05-09	R07	Authorization Revoked	60 days	ins_aab2…1402	$640.00	captured	reverse · mandate retired
2026-05-07	R11	Not in Accordance w/ Authorization	60 days	ins_77f1…22b8	$310.00	captured	reverse · UEF assessed

SEPA + SWIFT R-transactions

pacs.004 returns · gSRP / camt.056 recalls

Date	Type	Code	Rail	Instruction	Amount	Status
2026-05-19	SCT Inst neg-resp	AB05	SEPA SCT Inst	ins_42cd…aa01	€500.00	released T+10s
2026-05-16	SDD Return	AC04	SEPA SDD B2B	ins_5588…0001	€2,140.00	reversed
2026-05-11	gSRP recall	PDCR	SWIFT pacs.008	ins_91cd…e802	$48,200.00	pending camt.029
2026-05-08	gSRP recall	RJCR	SWIFT pacs.008	ins_2202…bbff	$8,800.00	rejected by bene bank
2026-05-04	gSRP recall	ARDT	SWIFT pacs.008	ins_6677…11dd	$1,200.00	already returned
2026-04-29	Blockchain reorg	depth<safe	x402 Base	ins_88aa…ee01	$340.00	re-broadcast

Exception Channels

Non-API rails · full dual-control · OCR audit · multi-language templates · Exception Channel Artifact (ECA) per dispatch

▤ECAs / 30d

42

24 in-portal · 12 letter · 4 cheque · 2 wire

✓Dual-control

100%

FIDO2 + delegate co-attest

⬣Locales served

6

EN · ZH-Hans · ZH-Hant · JA · ES · PT · FR

⏱Awaiting scan-back

3

letter channel · OCR pending

✉

DUAL-CONTROL

Manual letter to bank

Server-rendered PDF · physical signature · courier reference

/30d

12

Scan-back

9

Templates

23

OCR byte-for-byte match against artifact · 7 locales

⌖

DUAL-CONTROL

Manual wire (bank portal)

Browser-extension / RDP capture · screen-recording evidence

/30d

2

URL/shot env

100%

Sig attest

2

Operator signed-attestation: screen matches Settlo artifact byte-for-byte

▣

BR/DOA

Cheque issuance

Cheque-book inventory · signature-card linkage · CTS / Check 21

/30d

4

Drawn

4

Cleared

3

BR/DOA verified at draw · post-clear recon against image-cash-letter

⌬

REGULATOR-REQ

In-portal manual

China · Japan · LatAm · India · regulator-required flows

/30d

24

CN · JP

18

CAMT recon

21

Full timestamp capture · post-hoc CAMT / MT statement reconciliation

Active ECAs

Open exception flows · dual-control state

3 awaiting scan-back

Opened	ECA	Channel	Locale	Operator	Delegate	Bank	Amount	State
2026-05-19 11:18	eca_44a1	Letter	ZH-Hans	kim.s	chen.l	ICBC Shanghai	¥820,000	SCAN_BACK
2026-05-19 09:22	eca_44a2	In-portal	JA	kim.s	garcia.m	SMBC Tokyo	¥3.4M	PORTAL_CAPTURE
2026-05-18 16:08	eca_4498	Cheque	EN	okafor.n	nakamura.h	JPMorgan NY	$14,200	CLEARED
2026-05-18 14:31	eca_4497	Wire (portal)	ES	silva.r	garcia.m	BBVA Mexico	MX$240,000	SETTLED
2026-05-17 10:55	eca_4492	Letter	ZH-Hant	kim.s	chen.l	CTBC Taipei	NT$1.2M	SCAN_BACK

5 active of 42 last 30d · Merkle-anchored hourly

Template library →

Ledger-of-Record

Double-entry, tenant-scoped, immutable journal · not a custodial ledger · no posting is final until 3-way match closes

⌕

◉Journal entries / 24h

28,436

≈ 2 entries per instruction (pair)

✓Pairs reconciled

99.93%

142 pending pair-close

⬣Durability

11×9

WORM substrate · 9×9 hot LoR

⏱RPO / RTO

5m / 30m

multi-region active-passive

Journal · latest entries

Sequence numbers · debit/credit · event type · finality state

live

Seq	Time	Instruction	Event	Debit account	Credit account	Amount	Cy	State
#284,361	14:02:11.486	ins_7f4c…a91e	PENDING_OUTFLOW	mandate_pending::AP	rail.virtual::ach	4,275.00	USD	pending
#284,360	14:02:11.218	ins_3a18…07ce	PENDING_OUTFLOW	mandate_pending::TRY	rail.virtual::x402.base	48,500.00	USDC	pending
#284,359	14:02:11.012	ins_b22d…f413	EFFECTIVE_OUTFLOW	rail.virtual::stripe	counterparty::nbp_acme	812.40	USD	final
#284,358	14:02:10.943	ins_b22d…f413	PENDING_OUTFLOW	mandate_pending::PROC	rail.virtual::stripe	812.40	USD	closed
#284,357	14:02:10.498	ins_a04c…91dd	EFFECTIVE_OUTFLOW	rail.virtual::fednow	counterparty::merch_str	216.55	USD	final
#284,356	14:02:10.489	ins_a04c…91dd	PENDING_OUTFLOW	mandate_pending::PROC	rail.virtual::fednow	216.55	USD	closed
#284,355	14:02:09.690	ins_5c83…2e7f	EFFECTIVE_OUTFLOW	rail.virtual::sct_inst	counterparty::FR76...	12,940.00	EUR	final
#284,354	14:02:09.681	ins_5c83…2e7f	PENDING_OUTFLOW	mandate_pending::TRY	rail.virtual::sct_inst	12,940.00	EUR	closed
#284,353	14:01:54.890	ins_2240…78b1	REVERSAL	rail.virtual::ach	mandate_pending::AP	200.00	USD	R01 unwind
#284,352	2026-05-17	ins_0918…3344	REVERSAL	counterparty::445566	mandate_pending::AP	1,400.00	USD	R10 WSUD

Showing 10 of 28,436 entries today

DecisionDossier-E for ins_7f4c → →

Boundary contract

Settlo does not hold funds at the platform layer

Native engine roleSmart routing + orchestration + LoR

CustodyNone · rails execute

Instrument issuanceNone

FloatZero

Dispute roleSigned forensic record only

FinalityNo posting final until 3-way match closes

DecisionDossier-E

Execution-side extension of the Identity PRD Dossier

{ "dossier_id": "de_b22df413c98a", "mandate_id": "cm_9b7e2a4f01d3", "instruction_id": "ins_b22d…f413", "settlement_id": "stl_b22d2a91e", "reconciliation_state": "matched", "ssm_history": ["INSTRUCTED", "SUBMITTED", "SETTLED"], "rail_ack_ref": "pi_3OqXr1AbCdEfGh", "worm_anchor": "s3://settlo-audit-…/918274", "merkle_root": "sha256:f1e2d3c4…b1a0" }

Mandate Registry

Typed, signed, versioned commercial-terms objects · compiled to rail primitives by Cedar · lifecycle gated by Operational Threshold

⌕

◇Active mandates

412

+18 last 7d

⏱Pending approval

7

5 above Op Threshold · Treasurer co-sign

⚡Create gate p95

142ms

SLO 200ms ✓

▣Templates

24

6 types · 12 jurisdictions

!FX drift breaches

2

paused · Regional Controller paged

⬣Compile coverage

100%

all rails reachable

By type

Distribution across the six Mandate types

UNIT_RATE per-unit pricing

184 · 44.7%

SUBSCRIPTION recurring

98 · 23.8%

WATERFALL_SPLIT multi-party

62 · 15.0%

FIXED_FEE one-time, evidence-gated

31 · 7.5%

ASYNC deferred · exposure-capped

22 · 5.3%

EXTERNAL_INSTRUCTION SWIFT/SEPA/cheque

15 · 3.6%

Approval queue

Pending Treasurer co-sign above Operational Threshold

5 awaiting

M_8b1d…7c4a · UNIT_RATE · claude-sonnet-4.5

$50K/mo cap · counterparty did:web:anthropic.com · tokenizer-bound · drafted by patel.a

SLA 8h · Treasurer garcia.m

M_91cd…2e0f · WATERFALL_SPLIT · model 60 / tool 25 / platform 15

3-party split · $500K monthly ceiling · banker's rounding · residual to model

SLA 6h · Treasurer garcia.m

M_4488…1102 · ASYNC · supplier-pay-9 · monthly post-paid

Max unsettled exposure $250K · 5th business day cadence · drafted by chen.l

SLA 12h · Treasurer garcia.m

M_aaff…3340 · SUBSCRIPTION · $99/seat · 25 seats included

Renewal annual · overage at $4/seat via Stripe Billing Meter

SLA 4h · Treasurer garcia.m

M_7711…ddee · FIXED_FEE · deal-closed success fee · $50K

Evidence predicate: signed term sheet PDF hash match

SLA 24h · Asst Treas (under Op Threshold)

All mandates

Showing 1 – 12 of 412 · click row for full mandate detail

Mandate	Type	Counterparty	Principal (agent)	Nom / Settle	Period cap	Effective	State	Compiled to
M_8b1d…7c4a	UNIT_RATE	did:web:anthropic.com	payables-bot	USD / USD	$50K / mo	2026-05-20	PENDING	MPP · x402.upto
M_3a18…07ce	UNIT_RATE	did:web:openai.com	research-bot-7	USD / USD	$25K / mo	2026-05-01	ACTIVE	Stripe Billing
M_91cd…2e0f	WATERFALL	did:web:platform.example	checkout-orchestrator	USD / USD	$500K / mo	2026-05-20	PENDING	Stripe Connect
M_b22d…f413	WATERFALL	did:web:razorpay-route	indian-ap-bot	INR / INR	₹50L / mo	2026-04-15	ACTIVE	Razorpay Route
M_4488…1102	ASYNC	urn:duns:123456789	supplier-pay-9	USD / USD	$250K unsettled	2026-05-20	PENDING	EXT_INSTR + ACH
M_aaff…3340	SUBSCRIPTION	did:web:settlo-saas	account-mgr	USD / USD	$99 × 25 seats	2026-05-20	PENDING	Stripe Subscription
M_7711…ddee	FIXED_FEE	did:web:bcg.com	deal-closer-2	USD / USD	$50,000 one-time	2026-05-19	PENDING	x402.exact
M_aae2…1801	UNIT_RATE	did:web:cohere.com	embedding-svc	USD / USD	$15K / mo	2026-04-22	ACTIVE	MPP streaming
M_5c83…2e7f	WATERFALL	did:web:basf.com	basf-spot-fx-1	EUR / USD	€80K / mo	2026-03-12	ACTIVE	Stripe Connect
M_19f6…b8a3	UNIT_RATE	did:web:perplexity.ai	research-aux	USD / USD	$8K / mo	2026-04-08	ACTIVE	x402.upto
M_ee10…7782	EXT_INSTR	did:web:jpm-treas	jpm-onboarding-flow	USD / USD	unconstrained	2026-03-01	ACTIVE	SWIFT / MT940
M_0c4f…1ea2	WATERFALL	did:web:macquarie.com	macquarie-am-rebal	AUD / USD	A$120K / mo	2026-04-30	SUSPENDED	FX drift > 50 bps

Page 1 of 35 · 412 active · 22 suspended · 7 pending

View all mandates →

UNIT_RATE · claude-sonnet-4.5

M_8b1d7c4a3201f9e8 · per-token pricing · tokenizer-bound · PENDING_APPROVAL

◇Type

UNIT_RATE

token-priced · tokenizer-bound

$Period cap

$50K/mo

early warn 80% · hard stop 100%

▤Counterparty

anthropic.com

did:web:anthropic.com

⬣Tokenizer hash

sha256:7c1b…

anthropic-sonnet-4.5-tk1 · pinned

Rate card

USD per 1M tokens · banker's rounding · tokenizer-pinned

Unittoken

Per1,000,000 (1M)

Input$3.00 / 1M tokens

Output$15.00 / 1M tokens

Cached input$0.30 / 1M tokens 90% disc.

Currency nominal / settleUSD / USD

FX drift bandN/A · same-currency

Period caps & thresholds

Monthly cap$50,000.00

Daily cap$2,500.00

Early warning80%

Hard stop100%

Operational Threshold$25K/mo · co-sign req'd ✓

Mandate envelope

{ "mandate_id": "01J9Z2X7TFR3WP4RT0K8VBQ7M5", "tenant_id": "ten_8b1d…", "type": "UNIT_RATE", "principal": "spiffe://settlo/agent/treasury/payables-bot", "counterparty": "did:web:anthropic.com", "rate_card": { "unit": "token", "tokenizer_hash": "sha256:7c1b…", "prices": [ {"dim":"input", "unit_price_micro":"3000000", "per":"1000000"}, {"dim":"output", "unit_price_micro":"15000000", "per":"1000000"} ] }, "period_caps": {"monthly_max_usd":"50000.00", "early_warning_pct": 80}, "effective_from": "2026-05-20T00:00:00Z", "signature": {"alg":"Ed25519", "kid":"settlo-hsm-2026Q2"} }

Compilation & checks

Cedar static validator · rail-adapter plan

Cedar static validator

✓Schema type-check against Mandate envelope

12 ms

✓Period caps bounded

3 ms

✓Symbolic verification: monthly_cap reachable

48 ms

✓Tokenizer hash present (token-priced)

1 ms

✓Cedar deny-by-default policy emitted

22 ms

Rail compilation

✓MPP streaming · WWW-Authenticate per-token quote

primary

✓x402 upto · authorize max, settle actual

fallback

✓Stripe Billing Meter · end-of-cycle invoice

batch

Approval chain

✓DRAFT created · patel.a (Asst Treasurer)

14:01:12

✓Static validation passed

14:01:13

✓Above Op Threshold ($25K/mo) · routed to Treasurer

14:01:14

!PENDING_APPROVAL · awaiting garcia.m co-sign (FIDO2)

SLA 8h

○ACTIVE · HSM-seal & Dossier-T anchor

on co-sign

Linked artefacts

Metering Engine

CloudEvents v1.0.2 ingestion · authoritative & reconciliatory modes · streaming

▦Events / 24h

142.4M

+18%

⚡Ingest p95

38ms

SLO 50ms ✓

⬣Throughput

8,420/s

peak 24h 32K/s · 40K burst

↻Dedup rate

0.31%

target < 0.5% ✓

▣Sig-verify

100%

Ed25519 / ECDSA P-256

⏱Late-data quarantine

82

awaiting Middle Office

Live CloudEvents

v1.0.2 envelopes · auto-refresh 1s · (source, id) dedup window 24h

live

Time	Type	Source	Subject (agent)	Mandate	Data	Sig	Status
14:02:11.918	prompt	api.anthropic.com	payables-bot	M_8b1d…7c4a	in:1842 · out:612 · cached:384	Ed25519	ACCEPTED
14:02:11.802	request	api.openai.com	research-bot-7	M_3a18…07ce	model:gpt-4o · in:2104	Ed25519	ACCEPTED
14:02:11.624	prompt	api.anthropic.com	payables-bot	M_8b1d…7c4a	in:1240 · out:980 · cached:0	Ed25519	ACCEPTED
14:02:11.341	gpu_second	together.ai	training-coord	M_44e2…1801	H100 · 1.0s · job_8821	ECDSA P-256	ACCEPTED
14:02:11.118	outcome	crm.acme.com	deal-closer-2	M_7711…ddee	deal_closed · evidence_uri	Ed25519	ACCEPTED
14:02:10.802	prompt	api.anthropic.com	payables-bot	M_8b1d…7c4a	in:512 · out:204 · cached:512	Ed25519	ACCEPTED
14:02:10.412	duration	stream.elevenlabs.io	voice-narrator	M_aae2…1801	38.2s · vid_4488	Ed25519	ACCEPTED
14:02:10.121	prompt	api.anthropic.com	payables-bot	M_8b1d…7c4a	in:840 · out:1240 · cached:200	Ed25519	DEDUP
14:02:09.882	request	api.perplexity.ai	research-aux	M_19f6…b8a3	model:sonar-large · in:418	Ed25519	ACCEPTED
14:02:09.412	prompt	api.anthropic.com	payables-bot	M_8b1d…7c4a	in:2240 · out:380	Ed25519	TOKENIZER_DRIFT

10 of 142,442,108 events today

OpenMeter-parity query API →

Sample CloudEvent v1.0.2

Latest accepted · token meter for M_8b1d…7c4a

{ "specversion": "1.0", "type": "prompt", "id": "ev_01J9Z3A2QYV8ZK0M1ENR2P4HXB", "time": "2026-05-20T14:02:11.918Z", "source": "https://api.anthropic.com/v1/messages", "subject": "spiffe://settlo/agent/treasury/payables-bot", "datacontenttype": "application/json", "data": { "model": "claude-sonnet-4.5", "tokenizer_version": "anthropic-sonnet-4.5-tk1", "prompt_tokens": 1842, "completion_tokens": 612, "cached_tokens": 384 }, "settlosig": { "alg": "Ed25519", "kid": "ctr-anthropic-2026Q2" } }

Aggregations supported

SUM COUNT AVG MIN MAX LAST OpenMeter-parity

JSONPath value extraction (e.g. $.completion_tokens) · windowed query HOUR · DAY · MONTH

Meter streams

Active across the 5 metering granularities

Stream ID	Granularity	Source	Bound mandate(s)	Mode	Events 24h	Aggregation	Status
mtr_prompt_claude_sonnet_4_5	token	api.anthropic.com	M_8b1d…7c4a	authoritative	48.2M	SUM(in) · SUM(out) · SUM(cached)	healthy
mtr_prompt_gpt_4o	token	api.openai.com	M_3a18…07ce	reconciliatory	22.1M	SUM(in) · SUM(out)	healthy
mtr_request_perplexity	request	api.perplexity.ai	M_19f6…b8a3	authoritative	412K	COUNT(*)	healthy
mtr_gpu_second_h100	gpu_second	together.ai	M_44e2…1801	reconciliatory	1.2M	SUM(seconds)	healthy
mtr_outcome_dealclosed	outcome	crm.acme.com	M_7711…ddee	authoritative	8	COUNT(*) w/ evidence_handle	healthy
mtr_duration_voice	duration	stream.elevenlabs.io	M_aae2…1801	reconciliatory	214K	SUM($.seconds)	drift +0.12%

6 active streams · 5 granularities covered

Daily reconciliation →

Daily Reconciliation

Settlo shadow meter vs counterparty meter · daily cutover 23:59 UTC · Materiality Threshold escalation

⎔Recon today

82 / 82

meter streams reconciled

✓Within tolerance

78

Δ ≤ Materiality Threshold

!Breaks (analyst)

3

24h SLA · Middle Office

!!Materiality breaches

1

Treasurer paged · mandate auto-suspended

Reconciliation status · last 7 days

Per-meter delta vs counterparty file

Day	Meter	Mode	Settlo total	Counterparty total	Δ	Δ % USD	State
2026-05-20	mtr_prompt_claude	auth	18,204,135 tok	18,204,027 tok	+108 tok	+$0.0017	PASS
2026-05-20	mtr_prompt_gpt_4o	recon	8,841,212 tok	8,840,108 tok	+1,104 tok	+$0.014	PASS
2026-05-20	mtr_gpu_second_h100	recon	1,184,920 s	1,184,720 s	+200 s	+$148.00	BREAK · analyst
2026-05-20	mtr_duration_voice	recon	214,108 s	213,890 s	+218 s	+$8.72	BREAK · analyst
2026-05-20	mtr_outcome_dealclosed	auth	8 outcomes	10 outcomes	−2 outcomes	−$100,000	MATERIALITY
2026-05-19	mtr_prompt_claude	auth	18,008,420 tok	18,008,420 tok	0	$0.00	PASS
2026-05-19	mtr_request_perplexity	auth	412,108 req	412,102 req	+6 req	+$0.06	PASS
2026-05-18	mtr_prompt_gpt_4o	recon	8,712,408 tok	8,712,408 tok	0	$0.00	PASS

Cutover 23:59 UTC · Late-Data Window 48h

Export delta files →

Materiality breach · open

mtr_outcome_dealclosed · pending Treasurer

auto-suspended

MandateM_7711…ddee

Counterpartydid:web:bcg.com

Detected2026-05-20 23:59:14 UTC

Paged at23:59:42 (T+28s · SLA <60s ✓)

Auto-suspendM_7711…ddee · new settlements blocked

Investigation ownergarcia.m (Treasurer)

Delta payload

{ "report_id": "rec_2026-05-20_outcome_dealclosed", "meter_stream": "mtr_outcome_dealclosed", "day": "2026-05-20", "settlo_outcomes": 8, "counterparty_outcomes": 10, "delta": -2, "delta_usd": "-100000.00", "materiality_threshold_usd": "50000.00", "materiality_breach": "true", "format": "json-delta-v1" }

Dispute Register

90-day default investigation window · VAMP / CE 3.0 / SEPA SDD / NACHA windows recognised · signed forensic record only

⦾Open

5

3 evidence pending · 2 in review

✓Resolved 30d

14

11 in customer favour · 3 against

⚡VAMP ratio (30d)

0.42%

cap 1.5% (1 Apr 2026)

$Avoided 30d

$184K

CE 3.0 evidence wins · VAMP fees averted

$VAMP fees YTD

$0

no warning tier · $8/event if breached

⏱Median resolution

12d

target < 90d window

Active disputes

Click row for evidence bundle and acquirer submission status

Opened	Case	Channel	Mandate	Counterparty	Amount	Reason	Window	State	Owner
2026-05-19	DSP-2026-0042	Visa CE 3.0	M_aaff…3340	cust-77a8	$4,275.00	10.4 fraud	90d	EVIDENCE	Dispute Analyst
2026-05-17	DSP-2026-0041	NACHA R10	M_4488…1102	urn:duns:123456789	$1,400.00	not authorized	60d	UNAUTH · WSUD	garcia.m
2026-05-15	DSP-2026-0040	SEPA SDD auth	M_5c83…2e7f	FR76 1010 7000 03…	€2,140.00	refund request	8w window	PROCESSING	patel.a
2026-05-12	DSP-2026-0039	Visa CE 3.0	M_b22d…f413	cust-31bb	$812.40	10.4 fraud	90d	EVIDENCE WIN	Dispute Analyst
2026-05-08	DSP-2026-0038	NACHA R11	M_3a18…07ce	urn:duns:445566778	$310.00	not per auth	60d	UEF assessed	patel.a

5 of 14 active in last 30 days · acquirer submission via Visa Resolve Online

VAMP dashboard →

DSP-2026-0042 · CE 3.0 evidence bundle

$4,275 chargeback · 10.4 fraud · awaiting submission

Compelling Evidence 3.0 · 4 core data elements

✓User ID · matches 4 prior tx (≥120d history)

cust-77a8

✓IP address · matches 6 prior tx

198.51.100.42

✓Device ID / fingerprint · matches 8 prior tx

fpr_8ab1…

−Shipping address · digital good (N/A)

—

Visa CE 3.0 (15 Apr 2023): at least 2 of 4 core elements must match prior transactions; one must be IP or device ID · ✓ satisfied · remedy expansion to multi-merchant effective 24 October 2026

Submission

AcquirerStripe (VRoL)

Issuer reasonVCR 10.4 (fraud)

Evidence due2026-05-26 (T+7d)

ConfidenceHIGH · 3/4 with IP+device

Predicted outcomein customer favour

VAMP & rail-window reference

Active enforcement thresholds · SEPA & NACHA windows

Visa VAMP · Excessive merchant
US · Canada · EU · APAC effective 1 Apr 2026

1.5% · $8/event

VAMP monitoring floor
combined TC40 + TC15

≥ 1,500 events / mo

Visa CE 3.0 base
effective 15 Apr 2023

2-of-4 elements

CE 3.0 multi-merchant
Visa Core Rules 18 Apr 2026 ed.

eff. 24 Oct 2026

SEPA SDD authorised refund

8 weeks

SEPA SDD unauthorised

13 months

NACHA unauthorised (R05/R07/R10/R11/R29/R51)
consumer extended

60 days · WSUD

NACHA unauthorised rate cap

0.5%

Settlo default window

90 days from settlement

ICC Expedited Arbitration
Art 30 + App VI Art 1(2)

≤ $3M default

Rate cards, Promos & Volume Commits

Tiered / graduated pricing · Stripe-style coupons · AWS-EDP-style commits with drawdown · dimensional pricing

▣Rate cards

38

12 tiered · 14 graduated · 12 flat

$EDP commits

$3.2M

4 commits · $1.84M drawn (57%)

⬣Active promo codes

22

14 redeemable · 8 expired

!True-up due

1

Q2 commit · BCG · clawback at risk

Tiered / graduated rate cards

Volume-bracketed pricing with rebate clawback

Rate card	Bound mandate	Shape	Tiers	Clawback	State
RC_claude_volume_2026	M_8b1d…7c4a	tiered	0-10M · 10-50M · 50M+	enabled · 90d	ACTIVE
RC_gpt4o_graduated	M_3a18…07ce	graduated	0-1M · 1-10M · 10-100M · 100M+	enabled · 60d	ACTIVE
RC_perplexity_flat	M_19f6…b8a3	flat	$0.20 / req	—	ACTIVE
RC_h100_dimensional	M_44e2…1801	dimensional	region × util-class	—	ACTIVE
RC_voice_streaming	M_aae2…1801	tiered	0-1Kh · 1-10Kh · 10Kh+	—	ACTIVE
RC_bcg_dealfee	M_7711…ddee	flat	$50K / outcome	—	PENDING

Volume commitments (AWS-EDP style)

Multi-quarter spend commits with drawdown & quarterly true-up

CMT_anthropic_2026 $1.2M / yr · Q2 of 4

$684K / $1.2M

CMT_openai_2026 $800K / yr · Q2 of 4

$412K / $800K

CMT_together_h100 $500K / yr · Q2 of 4

$240K / $500K

CMT_bcg_advisory $700K / yr · Q2 of 4 · clawback risk

$210K / $700K

True-up calendar

!Q2 true-up · CMT_bcg_advisory · projected miss $115K

due 2026-07-15

✓Q2 true-up · CMT_anthropic_2026 · on track +8%

due 2026-07-15

✓Q2 true-up · CMT_openai_2026 · on track +4%

due 2026-07-15

✓Q2 true-up · CMT_together_h100 · on track

due 2026-07-15

Promo codes & coupons

Stripe-style Coupon (rule) + Promotion Code (redeemable artefact) · redemption rate-limited per code & per principal

Code	Coupon (rule)	Bound to	Redemption limit	Per principal	Redeemed	Expires	State
DESIGN-PARTNER-2026	25% off · forever	Tenant-scope	∞	1	18 / —	2027-01-01	ACTIVE
PILOT-PACTUM-Q2	$2,500 credit	M_4488…1102	10	1	3 / 10	2026-06-30	ACTIVE
VOICE-FREE-MIN-1K	1,000 minutes free	M_aae2…1801	500	1	142 / 500	2026-08-31	ACTIVE
DEAL-CLOSER-LAUNCH	50% off first deal-fee	M_7711…ddee	25	1	0 / 25	2026-12-31	ACTIVE
BLACK-FRIDAY-25	$500 credit	Tenant-scope	100	1	100 / 100	2025-11-30	EXPIRED

5 of 22 shown · velocity check on per-principal redemption

Cedar deny-by-default policy →

DecisionDossier-T · Audit Linkage

Mandate-scoped tamper-evident chain · extends Dossier-E with Merkle anchoring · daily seal · 7-year SOX retention

⌕

◉Dossier-T entries (24h)

14,891

≈ 36 entries / mandate

⬣Merkle root (today)

f01c…3b91

sealed at 23:59 UTC · WORM-anchored

⏱Retention

7yrs

SOX 404 minimum · 11×9 durability

✓Seal integrity

100%

daily WORM scan: clean

Dossier-T entries · live

Each Mandate event seals one signed entry into the per-tenant Merkle log

live

Sealed at	Entry	Event	Mandate	Actor	Prev hash	Merkle day	Seal
14:02:11.486	ddt_01J9Z3B…	METER_EVENT	M_8b1d…7c4a	ctr-anthropic	sha256:7c1b…	2026-05-20	Ed25519
14:02:11.218	ddt_01J9Z3A…	SETTLEMENT_INSTR	M_3a18…07ce	settlo-engine	sha256:0c4f…	2026-05-20	Ed25519
14:01:42.802	ddt_01J9Z2Y…	MANDATE_PENDING	M_8b1d…7c4a	patel.a	sha256:f01c…	2026-05-20	Ed25519
14:01:12.418	ddt_01J9Z2X…	MANDATE_CREATED	M_8b1d…7c4a	patel.a	sha256:c8f3…	2026-05-20	Ed25519
13:48:11.302	ddt_01J9Z1F…	RECON_BREAK	M_7711…ddee	settlo-engine	sha256:b1e2…	2026-05-20	Ed25519
11:18:02.118	ddt_01J9YPL…	DISPUTE_OPENED	M_aaff…3340	visa-vrol	sha256:7728…	2026-05-20	Ed25519
09:14:02.802	ddt_01J9YKQ…	MANDATE_APPROVED	M_aae2…1801	garcia.m	sha256:4488…	2026-05-20	Ed25519
2026-05-19 23:59:14	ddt_01J9XZY…	MERKLE_ROOT	tenant-wide seal	settlo-hsm	root:f01c…3b91	2026-05-19	Ed25519 + WORM

8 of 14,891 entries today · daily Merkle root sealed at 23:59 UTC

Dossier-E extension · Audit ▸ Decision Dossiers →

Sample Dossier-T entry · sealed

MANDATE_APPROVED for M_aae2…1801 at 09:14:02

{ "dossier_id": "ddt_01J9YKQH8M…", "mandate_id": "01J9Z2YAAE21801", "event": "MANDATE_APPROVED", "actor": "spiffe://settlo/human/treasurer/garcia.m", "ts": "2026-05-20T09:14:02Z", "prev_hash": "sha256:4488e2a1801f9c3d…b1a0", "merkle_root_day": "2026-05-20", "seal": { "alg": "Ed25519", "kid": "settlo-hsm-2026Q2", "sig": "4f81c3a9…3c9a" } }

Cryptographic surface

Algorithms & key rotation per PRD §12

Mandate signingEd25519 · HSM (JCS canon.)

Meter event signingEd25519 (default) / ECDSA P-256

Dossier-T sealingEd25519 + Merkle root daily

Tokenizer integritySHA-256 of canonical config

Webhook callbacksRFC 9421 HTTP Message Sig

HSM rotation≤ 365 days · rolling re-seal

WORM retention7 years · 11×9 durability

Compliance anchors

SOX 404 ITGC SOC 2 CC1–CC9 DORA Arts 5/6/9/17/25/28/30 ISO/IEC 42001:2023 PCI DSS 4.0.1 Req 10 NIST SP 800-53 AU-2/12

Live Decisions

Mandate chain · AP2

Verification checks

Audit dossier · sealed

Agent Registry

Mandate Inbox

Incidents

Tier classification pending

Status

Operator Entitlements

Board Resolutions & Delegations of Authority

Federated Delegations

Periodic Reviews

Decision Dossiers

Audit Export

Compliance Map

SOX 404 · IT GC 12 / 12

SOC 2 Type II 38 / 38

DORA (EU) 9 / 9

ISO 27001:2022 24 / 26

NIST SP 800-53 r5 52 / 52

PCI DSS v4.0 8 / 8

Liability Waterfall

Bring-Your-Own-Identity Connections

Native Issuer · SPIRE

Trust bundle (current)

Credentials & Keys

Attestations

Payment rail connectors

Identity provider connectors

Mandate specification connectors

General settings

Security & access

API keys

Notifications

Instructions

Idempotency key

Rail Adapters

Agentic rails

Underlying rails

Reconciliation Engine

Returns, Reversals & Recalls

Exception Channels

Ledger-of-Record

Mandate Registry

UNIT_RATE · claude-sonnet-4.5

Period caps & thresholds

Mandate envelope

Cedar static validator

Rail compilation

Approval chain

Linked artefacts

Metering Engine

Aggregations supported

Daily Reconciliation

Outcome meter: −2 events vs counterparty

Delta payload

Dispute Register

Compelling Evidence 3.0 · 4 core data elements

Submission

Rate cards, Promos & Volume Commits

True-up calendar

DecisionDossier-T · Audit Linkage

Compliance anchors