Live Decisions
Real-time policy evaluation across all Bring-Your-Own-Identity sources · streaming
Decisions / 24h
18,247
Decision p95
113ms
Mandate accept
99.42%
Attestation fresh
99.91%
Active agents
287
Open incidents
1
Decision Stream
Click a row to inspect mandate chain, checks, and dossier
| Time (UTC) | Decision | Agent | Mandate | Operator | Amount | Verdict | Latency |
|---|---|---|---|---|---|---|---|
| 14:02:11.314 | pd_7f4c…a91e | EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | AP2 / Cart | smith.j (Asst Tres) | $4,275.00 | Allow | 94 |
| 14:02:11.087 | pd_3a18…07ce | WX treasury-sweep-2a91 wx: 9c4d-…-2a91 | x402 / Payload | garcia.m (Treasurer) | $48,500.00 | Step-up | 137 |
| 14:02:10.842 | pd_b22d…f413 | SF procurement-bot-3 AGENT_ID: 0ZeHs00… | AP2 / Payment | patel.a (Op) | $812.40 | Allow | 71 |
| 14:02:10.611 | pd_d59f…21ba | SN invoice-clearer-A sys_id: e91a8… | AP2 / Cart | kim.s (Op) | $1,247.80 | Allow | 62 |
| 14:02:10.388 | pd_a04c…91dd | NA supplier-pay-9 SVID spiffe://acme.tenants… | ACP / DelegTok | chen.l (Op) | $216.55 | Allow | 58 |
| 14:02:09.974 | pd_e7b1…4408 | EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | AP2 / Cart | smith.j (Asst Tres) | $83,200.00 | Deny | 109 |
| 14:02:09.581 | pd_5c83…2e7f | WX basf-spot-fx-1 wx: 2b8a-…-1e44 | AP2 / Payment | garcia.m (Treasurer) | $12,940.00 | Allow | 88 |
| 14:02:09.222 | pd_19f6…b8a3 | SF procurement-bot-3 AGENT_ID: 0ZeHs00… | x402 / Payload | patel.a (Op) | $48.20 | Allow | 54 |
| 14:02:08.940 | pd_8aac…ff10 | SN jpm-onboarding-flow sys_id: 0c4f1… | Settlo Native | kim.s (Op) | $3,118.00 | Allow | 79 |
| 14:02:08.501 | pd_44e2…16cd | SP klarna-refunds-edge spiffe://klarna.tenants… | AP2 / Cart | chen.l (Op) | $640.10 | Allow | 67 |
Showing latest 10 of 18,247 decisions · auto-refresh every 1s
Decision detail
pd_7f4c8a2e9d1b…a91e
Allow
Decided at2026-05-19 14:02:11.314 UTC
Total latency94 ms under SLO
Agentap-automation-7f4c
BYOI sourceMicrosoft Entra Agent ID
Operatorsmith.j · Asst Treasurer
Counterpartyurn:duns:123456789
AmountUSD 4,275.00 · ACH
Mandate chain · AP2
Intent
im_3f…a01
Cart
cm_9b…7e2
Payment
pm_2a…d44
Verification checks
✓ECDSA P-256 signature
8 ms✓Checkout-hash linkage
3 ms✓Cart constraints satisfied
11 ms✓Freshness (intent_expiry)
2 ms✓Revocation: not revoked
14 ms✓Agent binding to oid
6 ms✓Operator cap: $4,275 / $25,000 day
5 ms✓Attestation fresh (Nitro PCR8)
9 msAudit dossier · sealed
{
"decision_id": "pd_7f4c8a2e…a91e",
"sealed_at": "2026-05-19T14:02:11.339Z",
"verdict": "allow",
"mandate_chain_sha256": "4b1a…f3c2",
"reasoning_trace_sha256": "e0a8…1b9d",
"policy_version": "v2026.05.18-a",
"signed_by": "ed25519:settlo-decision-2026Q2"
}
BYOI source health
Last poll · 14:02:11
5 of 5 OK
EN124●
Microsoft Entra Agent ID
WX56●
IBM watsonx Orchestrate
SN41●
ServiceNow AI Agent
SF38●
Salesforce Agentforce
NA28●
Settlo Native (SPIRE)
Operator caps · today
Per-day cap utilization · rolling 24h
garcia.mTreasurer
$184,420 / $250,000
smith.jAsst Treasurer
$87,615 / $150,000
patel.aOperator · EMEA
$22,140 / $50,000
kim.sOperator · APAC
$11,388 / $50,000
chen.lOperator · AMER
$8,210 / $40,000
Alerts & reviews
Highest severity first
1 open
INC-2026-0418 · Tier classification pending
Liability waterfall awaiting reasoning-trace root-cause for pd_e7b1…4408 (Deny: OPERATOR_CAP_EXCEEDED).
opened 14:01:48 · day 1 of 30
Step-up required · 2 agents
treasury-sweep-2a91 hit per-tx cap; FIDO2 challenge pending in Entra CA.
14:02:11 · auto-routed
Periodic review · Q2 Op entitlements
Middle Office to sample 12 of 287 active OperatorEntitlements.
due in 12 days
BR/DOA v2026.05 effective
Acme Corp BR/DOA v2026.05 activated. Per-operator caps refreshed.
today · 09:14
Agent Registry
All AI agents registered to Acme Corp · 287 active · 12 suspended · 3 pending approval
Active agents
287
Pending approval
3
Suspended
12
BYOI coverage
90%
All agents
Showing 1 – 14 of 287
| Agent | BYOI source | Operator | Purpose | State | Caps (day) | Last attested | Last decision |
|---|---|---|---|---|---|---|---|
EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | Entra Agent ID | smith.j | AP_AUTOMATION | ACTIVE | $4,275 / $25,000 | 3m ago · PCR8 ✓ | 14:02:11 |
WX treasury-sweep-2a91 wx: 9c4d-…-2a91 | watsonx Orchestrate | garcia.m | TREASURY_SWEEP | ACTIVE | $148,500 / $250,000 | 12m ago | 14:02:11 |
SF procurement-bot-3 AGENT_ID: 0ZeHs00… | Salesforce Agentforce | patel.a | PROCUREMENT | ACTIVE | $22,140 / $50,000 | 8m ago | 14:02:10 |
SN invoice-clearer-A sys_id: e91a8… | ServiceNow AI Agent | kim.s | AP_AUTOMATION | ACTIVE | $8,210 / $40,000 | 5m ago | 14:02:10 |
NA supplier-pay-9 spiffe://acme.tenants… | Settlo Native (SPIRE) | chen.l | AP_AUTOMATION | ACTIVE | $640 / $20,000 | 2m ago · Nitro ✓ | 14:02:10 |
WX basf-spot-fx-1 wx: 2b8a-…-1e44 | watsonx Orchestrate | garcia.m | FX_HEDGING | ACTIVE | $12,940 / $100,000 | 15m ago | 14:02:09 |
EN macquarie-am-rebal oid: ddff-2222-…-9921 | Entra Agent ID | garcia.m | ASSET_MGMT | ACTIVE | $24,800 / $80,000 | 21m ago | 14:02:08 |
SN jpm-onboarding-flow sys_id: 0c4f1… | ServiceNow AI Agent | kim.s | CLIENT_ONBOARD | ACTIVE | $3,118 / $30,000 | 9m ago | 14:02:08 |
SP klarna-refunds-edge spiffe://klarna.tenants… | SPIFFE federated | chen.l | REFUNDS | ACTIVE | $640 / $20,000 | 4m ago | 14:02:08 |
WX hubspot-revrec-sweep wx: 41c2-…-77a0 | watsonx Orchestrate | kim.s | REV_REC | ACTIVE | $917 / $15,000 | 11m ago | 14:02:07 |
EN salesforce-cpq-sync oid: ee10-3333-…-7782 | Entra Agent ID | patel.a | CPQ_SYNC | PENDING_APPROVAL | — / — | awaiting Treasurer | — |
SF netsuite-ar-collector AGENT_ID: 0ZeHs01… | Salesforce Agentforce | patel.a | AR_COLLECT | SUSPENDED | — / — | ATTESTATION_STALE | 2 days ago |
SN ariba-pactum-negotiator sys_id: 4f88c… | ServiceNow AI Agent | chen.l | PROCUREMENT | PENDING_APPROVAL | — / — | awaiting Treasurer | — |
NA tax-withholding-ind spiffe://acme.tenants… | Settlo Native (SPIRE) | kim.s | TAX_WHT | ACTIVE | $1,890 / $10,000 | 6m ago · Nitro ✓ | 14:01:54 |
Mandate Inbox
Inbound payment mandates verified at the boundary · AP2 / x402 / ACP / Native
Mandates / 24h
1,418
Verify p95
52ms
Accept rate
99.42%
Rejects today
8
Recent verifications
Newest first · click for full mandate payload
| Time | Mandate ID | Spec | Agent | Counterparty | Amount | Result | Failed checks |
|---|---|---|---|---|---|---|---|
| 14:02:11.301 | cm_9b7e2a4f01d3 | AP2 / Cart | EN ap-automation-7f4c | urn:duns:123456789 | $4,275.00 | PASS | — |
| 14:02:11.063 | x402_0xab14…f3 | x402 / Payload | WX treasury-sweep-2a91 | 0x…supplier-treasury | $48,500.00 | STEP_UP | op_cap_exceeded_per_tx |
| 14:02:10.821 | pm_2ad44b8c91 | AP2 / Payment | SF procurement-bot-3 | urn:duns:987654321 | $812.40 | PASS | — |
| 14:02:10.591 | cm_8ee311904a | AP2 / Cart | SN invoice-clearer-A | urn:duns:445566778 | $1,247.80 | PASS | — |
| 14:02:10.371 | acp_tok_3f8a91 | ACP / DelegTok | NA supplier-pay-9 | merchant_stripe_acct_… | $216.55 | PASS | — |
| 14:02:09.955 | cm_4408d1ee76 | AP2 / Cart | EN ap-automation-7f4c | urn:duns:123456789 | $83,200.00 | FAIL | operator_cap_exceeded |
| 14:02:09.560 | pm_2e7f5c83b1 | AP2 / Payment | WX basf-spot-fx-1 | urn:duns:334455667 | $12,940.00 | PASS | — |
| 14:02:09.197 | x402_0x4f88…02 | x402 / Payload | SF procurement-bot-3 | 0x…micro-api-svc | $48.20 | PASS | — |
| 14:02:08.921 | nat_ff108aac21 | Settlo Native | SN jpm-onboarding-flow | internal:settlement | $3,118.00 | PASS | — |
| 14:02:08.114 | cm_b8a319f6a4 | AP2 / Cart | SP klarna-refunds-edge | urn:duns:998877665 | $640.10 | PASS | — |
| 14:01:54.808 | cm_eaa10221bc | AP2 / Cart | WX hubspot-revrec-sweep | urn:duns:556677889 | $200.00 | FAIL | intent_expiry_passed |
Showing 11 of 1,418 in last 24h
View all →Incidents
Liability-waterfall incident queue · 1 open, 4 resolved this month
Incident detail
INC-2026-0418
Opened2026-05-19 14:01:48 UTC
Triggering decisionpd_e7b1…4408 (deny)
Agentap-automation-7f4c
Operatorsmith.j · Asst Treasurer
Counterpartyurn:duns:123456789
Attempted amountUSD 83,200.00
Operator per-tx capUSD 25,000.00
Reason codeOPERATOR_CAP_EXCEEDED
Exposure if executedUSD 58,200.00 over cap
Status
✓Decision rejected at boundary (no funds moved)
14:01:48✓Agent moved to SUSPENDED · operator notified
14:01:51!Reasoning trace root-cause analysis pending
in progress!Tier classification: Operator vs Platform pending
analyst assigned○30-day pre-arbitration default at 2026-06-18 14:01:48 UTC
T-29d 23hResolved this month
4 incidents · all tier-classified
INC-2026-0414 · Operator tier
$1,210 settled to wrong counterparty (Operator config error). Allocated to Operator; insurance backstop confirmed.
resolved 2026-05-12 · 4 days
INC-2026-0413 · Counterparty tier
Counterparty agent submitted invalid mandate; rejected. Logged for counterparty reputation.
resolved 2026-05-08 · 1 day
INC-2026-0411 · Principal tier
Mandate within four corners; loss accepted by Principal. No platform fault.
resolved 2026-05-03 · 2 days
INC-2026-0407 · Platform tier
Signature-verify library defect; HSM fix shipped v2026.04.21. Insurance claim filed.
resolved 2026-04-23 · 3 days
Operator Entitlements
Who can authorize what · derived from BR/DOA v2026.05 · 14 operators in scope
Operators
14
BR/DOA version
v2026.05
Reviews pending
3
Co-sign coverage
100%
Active operators
Roles, caps, and BR/DOA citations
| Operator | Role | Per-tx cap | Per-day cap | Co-sign rule | BR/DOA ref | Status |
|---|---|---|---|---|---|---|
| garcia.m Maria Garcia | Treasurer | $50,000 | $250,000 | self for ≤$50K · CFO co-sign {">"}$50K | §4.1.a | ACTIVE |
| smith.j Jane Smith | Asst Treasurer | $25,000 | $150,000 | Treasurer co-sign {">"} $25K | §4.1.b | ACTIVE |
| patel.a Anish Patel | Operator · EMEA Treasury | $10,000 | $50,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| kim.s Soo-yeon Kim | Operator · APAC Treasury | $10,000 | $50,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| chen.l Liwei Chen | Operator · AMER Treasury | $10,000 | $40,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| okafor.n Nneka Okafor | AP Manager | $5,000 | $25,000 | AP Director co-sign {">"} $5K | §4.2.a | ACTIVE |
| nakamura.h Hiro Nakamura | AR Manager | $5,000 | $25,000 | — | §4.2.b | ACTIVE |
| davis.r Rachel Davis | Procurement Manager | $15,000 | $75,000 | Procurement Dir. co-sign {">"} $15K | §4.3.a | ACTIVE |
| silva.r Rafael Silva | Procurement Operator | $3,000 | $15,000 | Proc. Mgr co-sign {">"} $3K | §4.3.b | ACTIVE |
| volkov.a Anya Volkov | Tax Operator | $8,000 | $30,000 | — | §4.4.a | ACTIVE |
| walker.t Trevor Walker | Procurement Operator | $3,000 | $15,000 | Proc. Mgr co-sign {">"} $3K | §4.3.b | REVIEW DUE |
11 of 14 shown · all BR/DOA-anchored
View source document →Board Resolutions & Delegations of Authority
Source-of-truth governance documents · versioned, signed, machine-readable
Acme Corp BR/DOA
v2026.05 · acme-brdoa-2026-05.yaml
Acme Corp Procurement DOA
v2026.05 · acme-procurement-doa-2026-05.yaml
Version history
All historic versions · immutable, WORM-anchored
| Version | Document | Effective | Status | Signed by | Hash | Operators |
|---|---|---|---|---|---|---|
| v2026.05 | Acme Corp BR/DOA | 2026-05-19 | EFFECTIVE | CFO + GC | sha256:4f81…3c9a | 14 |
| v2026.05 | Procurement DOA | 2026-05-01 | EFFECTIVE | CPO + CFO | sha256:7e22…a015 | 6 |
| v2026.02 | Acme Corp BR/DOA | 2026-02-15 | SUPERSEDED | CFO + GC | sha256:b101…77fd | 13 |
| v2026.01 | Procurement DOA | 2026-01-15 | SUPERSEDED | CPO + CFO | sha256:a299…1108 | 5 |
| v2025.11 | Acme Corp BR/DOA | 2025-11-04 | SUPERSEDED | CFO + GC | sha256:30ab…f4c1 | 12 |
Federated Delegations
Builder → Operator → Counterparty authority chain · cross-tenant delegations
Active
6
Federated tenants
4
Hash-anchored
6 / 6
Expiring <30d
1
Active delegations
Authority flows from Acme (principal) → external operator → agents
| Delegation ID | Builder | Operator | Counterparty scope | Cap | Effective | Status |
|---|---|---|---|---|---|---|
| dlg_acn_01HZ | Accenture · BPS | Acme Corp | AP automation · NA | $2M / mo | 2026-04-01 → 2026-12-31 | ACTIVE |
| dlg_bcg_02JK | BCG · Procurement | Acme Corp | Spot purchasing · EMEA | $500K / mo | 2026-03-15 → 2026-09-15 | ACTIVE |
| dlg_kpmg_03LM | KPMG · Tax | Acme Corp | Tax withholding · IN | $100K / mo | 2026-01-01 → 2026-12-31 | ACTIVE |
| dlg_pact_04NP | Pactum AI | Acme Corp | Vendor renegotiation | $0 (advisory) | 2026-02-12 → 2026-08-12 | ACTIVE |
| dlg_lyzr_05QR | Lyzr.ai | Acme Corp | Cust support refunds | $50K / mo | 2026-04-20 → 2027-04-20 | ACTIVE |
| dlg_bain_06ST | Bain · Strategy | Acme Corp | Forecasting (read) | $0 (read-only) | 2025-12-01 → 2026-06-01 | EXPIRES SOON |
Periodic Reviews
Quarterly sampling and re-attestation cycles · SOX 404 / SOC 2 CC9.2 / DORA Art.6
Open reviews
3 reviews scheduled in next 30 days
DUE 2026-05-31 · 12 DAYS
Q2 Operator entitlement sample
Middle Office samples 12 of 287 active OperatorEntitlements. Treasurer co-signs results. Maps to SOX 404 control AC-04.
DUE 2026-06-08 · 20 DAYS
Mandate-engine quarterly re-attestation
Re-verify mandate verification engine SHA-256, Nitro Enclave PCR8 measurements, signing-key roster. Maps to SOC 2 CC6.1.
DUE 2026-06-15 · 27 DAYS
BYOI provider trust review
Confirm Entra JWKS, watsonx IAM trust anchors, ServiceNow A2A roots, Agentforce Connected App certs. Stale > 90 days triggers re-onboard.
2026-07-01 · IN 43 DAYS
Federated delegation renewal · BCG
dlg_bain_06ST · expires 2026-06-01 · principal counsel review required.
2026-08-31 · IN 104 DAYS
BR/DOA v2026.05 quarterly review
CFO + GC re-affirm or amend BR/DOA. Audit committee briefing scheduled.
Last 90 days · completed
8 reviews · all evidence sealed
| Date | Review | Reviewer | Outcome | Evidence |
|---|---|---|---|---|
| 2026-04-30 | Q1 Op entitlement sample | kim.s | PASS | ev_q1_2026 |
| 2026-03-28 | Mandate engine re-attest | auto | PASS | ev_mr_q1 |
| 2026-03-15 | BYOI provider trust | chen.l | PASS | ev_byoi_q1 |
| 2026-02-28 | Federation policy | GC | PASS | ev_fed_q1 |
| 2026-02-15 | BR/DOA quarterly | CFO | AMEND | ev_brdoa_q1 |
Decision Dossiers
Sealed audit artifacts · every decision produces one · WORM-anchored · regulator-ready
Sealed today
18,247
Total sealed
8.4M
Integrity verified
100%
Exports / 24h
3
Recent dossiers
Newest sealed first · click for full payload
| Sealed at | Dossier ID | Decision | Agent | Operator | Verdict | Chain hash | WORM anchor |
|---|---|---|---|---|---|---|---|
| 14:02:11.339 | do_7f4c8a2e | pd_7f4c…a91e | ap-automation-7f4c | smith.j | Allow | sha256:4b1a…f3c2 | s3://…anchor-918274 |
| 14:02:11.110 | do_3a1807ce | pd_3a18…07ce | treasury-sweep-2a91 | garcia.m | Step-up | sha256:7e22…a015 | s3://…anchor-918273 |
| 14:02:10.865 | do_b22df413 | pd_b22d…f413 | procurement-bot-3 | patel.a | Allow | sha256:8aab…01ff | s3://…anchor-918272 |
| 14:02:10.635 | do_d59f21ba | pd_d59f…21ba | invoice-clearer-A | kim.s | Allow | sha256:f001…22ee | s3://…anchor-918271 |
| 14:02:09.998 | do_e7b14408 | pd_e7b1…4408 | ap-automation-7f4c | smith.j | Deny | sha256:c990…7788 | s3://…anchor-918270 |
| 14:02:09.605 | do_5c832e7f | pd_5c83…2e7f | basf-spot-fx-1 | garcia.m | Allow | sha256:1234…ab98 | s3://…anchor-918269 |
| 14:02:09.245 | do_19f6b8a3 | pd_19f6…b8a3 | procurement-bot-3 | patel.a | Allow | sha256:5566…cdef | s3://…anchor-918268 |
| 14:02:08.963 | do_8aacff10 | pd_8aac…ff10 | jpm-onboarding-flow | kim.s | Allow | sha256:99aa…bbcc | s3://…anchor-918267 |
8 of 18,247 today
Audit Export
Build sealed evidence bundles for external auditors, regulators, or counsel
New export bundle
Configure scope, recipient, and signing policy
Bundle name
For your records
Date range
UTC
Scope
What to include in the bundle
Sampling
For statistical attestation
Recipient
Bundle will be encrypted to this party's pubkey
Co-sign
Required for SOX-scope bundles
Recent exports
Last 30 days
2026-Q1 SOX 404 sample
KPMG · 184 dossiers · 22.4 MB · co-signed CFO + GC
delivered 2026-04-30 14:12 UTC
DORA Art. 6 ICT-risk evidence
EU regulator · 412 dossiers · 51.8 MB · co-signed CFO + GC + CISO
delivered 2026-04-15 09:04 UTC
Internal audit deep-dive · AP
Internal · 88 dossiers · 11.2 MB
delivered 2026-04-08 16:48 UTC
Counsel investigation · INC-2026-0407
External counsel · 14 dossiers + reasoning trace · awaiting GC co-sign
pending
Compliance Map
Settlo primitives mapped to control frameworks · auto-attested · evidence on demand
SOX 404 · IT GC 12 / 12
- Authorization of transactionsAC-04 · Op entitlements
- Segregation of dutiesSD-01 · Co-sign rules
- Audit trail completenessAU-02 · Sealed dossier
- Periodic re-attestationAC-06 · Quarterly review
- Limits enforcementTR-03 · Cap engine
- Exception handlingIR-04 · Incident queue
SOC 2 Type II 38 / 38
- CC6.1 · Logical accessBYOI + SVID
- CC6.2 · AuthenticationSignature verification
- CC6.6 · Network restrictionSPIRE federation
- CC7.2 · Anomaly detectionCap breach & deny
- CC9.2 · Vendor riskFederated delegation
- A1.2 · AvailabilityMulti-region active-active
DORA (EU) 9 / 9
- Art. 5 · ICT risk mgmtCap + step-up policy
- Art. 6 · ICT-risk frameworkSealed dossiers
- Art. 8 · Identification & classificationAgent registry
- Art. 17 · Incident reportingLiability waterfall
- Art. 28 · Third-party riskFederation policy
- Art. 30 · Sub-contractorsDelegation chain
ISO 27001:2022 24 / 26
- A.5.15 · Access controlOp entitlements
- A.5.16 · Identity mgmtBYOI + Native
- A.5.17 · AuthenticationSig + attestation
- A.8.15 · LoggingDossier · WORM
- A.8.16 · MonitoringLive decisions
- A.5.23 · Cloud securityin progress
NIST SP 800-53 r5 52 / 52
- AC-2 · Account mgmtRegistry · Op caps
- AC-3 · Access enforcementDecision engine
- AU-2 · Event loggingDossier
- AU-10 · Non-repudiationEd25519 signing
- IA-9 · Service authSVID + JWT
- SI-7 · IntegrityHash chain
PCI DSS v4.0 8 / 8
- Req 7 · Least privilegeCap engine
- Req 8 · Identify usersAgent registry
- Req 10 · LoggingDossier
- Req 12 · Policy mgmtBR/DOA
Liability Waterfall
Tier classification: Principal · Operator · Counterparty · Platform · Insurance
Resolved YTD
23
Loss avoided
$1.84M
Loss realized
$12.4K
Insurance covered
100%
Waterfall tiers · standard
Applied to every incident in classification order
1 · Principal
Tx within four corners of mandate & BR/DOA · loss accepted by principal
unlimited
enabled
2 · Operator
Operator config error, cap-breach, or scope violation
$2M / yr
enabled
3 · Counterparty
Counterparty fraud, invalid mandate, or merchant breach
recourse
enabled
4 · Platform
Settlo engine defect (signature lib, cap engine, ledger)
$10M / yr
enabled
5 · Insurance
Lloyd's syndicate · agentic-commerce wrap policy
$25M aggregate
bound
Bring-Your-Own-Identity Connections
Federated trust into every major agent platform · 5 providers connected · 259 agents covered
EN
CONNECTEDMicrosoft Entra Agent ID
Continuous Access Eval · OIDC + signed-JWT
Agents
124
Decisions /d
8.2K
Verify p95
42ms
CAE up · JWKS rotated 12h ago · last token refresh 3m
WX
CONNECTEDIBM watsonx Orchestrate
IAM signed-action tokens · A2A v1
Agents
56
Decisions /d
4.1K
Verify p95
48ms
IAM token T-42m · trust anchor pinned
SN
CONNECTEDServiceNow AI Agent
A2A API authn · sys_id binding
Agents
41
Decisions /d
3.0K
Verify p95
51ms
Now instance ack · MID server tunnel up
SF
CONNECTEDSalesforce Agentforce
Connected App · signed-JWT bearer flow
Agents
38
Decisions /d
2.4K
Verify p95
44ms
Connected App cert valid · expires 2027-02-12
NA
NATIVESettlo Native Issuer (SPIRE)
spiffe:// SVID · X.509 + JWT · Nitro attest
SVIDs
28
Decisions /d
512
Verify p95
38ms
Trust bundle T-3h · PCR8 measurements clean
+
AVAILABLEAdd another provider
Google ADK · LangChain · CrewAI · Cognition · ServiceNow Now Assist
—
—
—
—
—
—
Native Issuer · SPIRE
Settlo-managed SPIFFE Workload Identities for agents without a BYOI source
Trust domain
spiffe://acme.tenants.settlo.io
Trust domainacme.tenants.settlo.io
IssuerSettlo SPIRE Server
Regionus-east-1 (primary) · us-west-2 (DR)
Trust bundle TTL24h · auto-rotate
SVID lifetime1h · re-attest
AttestorAWS Nitro Enclave (PCR8 measured)
Federation3 peers (klarna · jpm · macquarie)
Trust bundle (current)
// trust-bundle.json · valid until 2026-05-20 03:14:22 UTC
{
"trust_domain": "acme.tenants.settlo.io",
"keys": [
{ "kid": "settlo-spire-2026Q2", "kty": "EC", "crv": "P-256" },
{ "kid": "settlo-spire-2026Q1", "kty": "EC", "crv": "P-256" }
],
"refresh_hint": 43200
}
Registered workloads
28 SVIDs · re-attested every 1h
| SPIFFE ID | Selector | Last attest | State |
|---|---|---|---|
| spiffe://…/agent-7f4c | k8s:ns=ap, sa=agent | 2m ago | OK |
| spiffe://…/supplier-pay-9 | k8s:ns=pay, sa=supp | 2m ago | OK |
| spiffe://…/tax-wht-ind | k8s:ns=tax, sa=ind | 6m ago | OK |
| spiffe://…/sweep-batch | aws:nitro:pcr8=… | 12m ago | OK |
| spiffe://…/refund-edge-2 | k8s:ns=refund, sa=edge | 18m ago | OK |
5 of 28 shown
View all workloads →Credentials & Keys
All signing & verification material · 42 active keys · auto-rotation enforced
Active keys
42
Rotated 30d
9
Rotate next 30d
4
HSM-backed
100%
Signing keys
All keys managed in CloudHSM · never exported
| Key ID | Purpose | Algo | HSM slot | Created | Rotates | Status |
|---|---|---|---|---|---|---|
| settlo-decision-2026Q2 | Decision dossier signing | Ed25519 | hsm-us-east-1-a · slot 4 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-decision-2026Q1 | Decision dossier signing | Ed25519 | hsm-us-east-1-a · slot 3 | 2026-01-01 | retired | RETIRED |
| settlo-mandate-2026Q2 | Mandate verification root | ECDSA P-256 | hsm-us-east-1-b · slot 1 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-spire-2026Q2 | SPIRE CA root | ECDSA P-256 | hsm-us-east-1-b · slot 2 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-export-2026 | Audit export co-signing | Ed25519 | hsm-us-east-1-a · slot 5 | 2026-01-01 | 2026-06-01 | ROTATE SOON |
| settlo-federation-2026 | Cross-tenant federation | Ed25519 | hsm-us-east-1-a · slot 6 | 2026-01-15 | 2026-07-15 | ACTIVE |
Attestations
Workload attestation freshness · TEE measurements · runtime integrity proof
Freshness rate
99.91%
Agents attested
285/ 287
Median age
8min
PCR mismatches
0
Attestation roll · latest
Click row for full TEE quote
| Agent | Attestor | Measurement | Last attested | Quote hash | Status |
|---|---|---|---|---|---|
| supplier-pay-9 | AWS Nitro Enclave | PCR8: 4f1a…8c92 | 2m ago | sha256:b1e2…0a44 | FRESH |
| tax-withholding-ind | AWS Nitro Enclave | PCR8: 4f1a…8c92 | 6m ago | sha256:c8f3…1192 | FRESH |
| jpm-onboarding-flow | Azure CVM | RTMR0: 71ab…cc02 | 9m ago | sha256:7728…ff90 | FRESH |
| basf-spot-fx-1 | Intel SGX | MRENCLAVE: 8ab1… | 15m ago | sha256:1144…aa88 | FRESH |
| klarna-refunds-edge | AWS Nitro Enclave | PCR8: 9023…f1e0 | 4m ago | sha256:7a3f…0c19 | FRESH |
| netsuite-ar-collector | — | — | 2 days ago | — | STALE |
Payment rail connectors
Settlo signals · counterparty rails execute · 4 connected · rail-agnostic
S
CONNECTEDStripe
Cards · ACH · SEPA · acct_acme_prod
Tx /d
9.2K
Success
99.8%
p95
412ms
Webhook signed · idempotency keyed · last sync 14:02
B
CONNECTEDJPMorgan ACH
JPM Treasury Services · NACHA
Tx /d
1.8K
Success
100%
Settlement
T+1
SFTP cutoffs · 14:00 ET window open
V
CONNECTEDVisa TAP
Trusted Agent Protocol · cards
Tx /d
3.1K
Success
99.6%
p95
288ms
Agentic Ready · cryptogram intent signed
x
CONNECTEDx402 · Base L2
Stablecoin (USDC) · onchain settlement
Tx /d
412
Success
99.9%
Finality
2sec
Tx-receipt-hash bound to dossier
Identity provider connectors
5 BYOI sources + Settlo Native · see also Identity → BYOI Connections
EN
CONNECTEDMicrosoft Entra Agent ID
CAE · OIDC · signed-JWT
Agents
124
Trust
JWKS
Status
UP
WX
CONNECTEDIBM watsonx Orchestrate
IAM signed-action · A2A v1
Agents
56
Trust
IAM
Status
UP
SN
CONNECTEDServiceNow AI Agent
A2A API authn · sys_id
Agents
41
Trust
API
Status
UP
SF
CONNECTEDSalesforce Agentforce
Conn. App · signed-JWT
Agents
38
Trust
JWT
Status
UP
NA
NATIVESettlo Native (SPIRE)
SVID · Nitro attest
SVIDs
28
Trust
SPIRE
Status
UP
Mandate specification connectors
4 specifications supported · all verified by the same engine
AP
SUPPORTEDAP2 · Google
Intent / Cart / Payment mandate triad
/24h
9.8K
Accept
99.6%
p95
48ms
Spec v0.9.2 · upstream pinned · cart-hash verified
x4
SUPPORTEDx402 · Coinbase
Payment payload over HTTP 402
/24h
412
Accept
99.8%
p95
38ms
Onchain receipt anchored to dossier
ACP
SUPPORTEDACP · Agent Commerce Protocol
DelegationToken · open standard
/24h
2.4K
Accept
99.4%
p95
54ms
Counterparty federation · 3 trust anchors
NA
NATIVESettlo Native mandate
Settlo-issued · UNIT_RATE / WATERFALL_SPLIT
/24h
5.6K
Accept
99.9%
p95
31ms
Pricing primitives composable · 8 atomic types
General settings
Tenant Acme Corp · tenant_01HY8K3PQR
Tenant name
Shown in console and audit headers
Tenant ID
Immutable · used in API and dossiers
Audit scope
Drives default retention & co-sign rules
Default time zone
UI display only · dossiers always UTC
Primary region
Where decisions are sealed
Data residency
Mandate payloads, dossiers, reasoning traces
Security & access
Console authentication, step-up policy, and session controls
Authentication
For console users · separate from agent authn
SSO provider
MFA required
Session lifetime
IP allow-list
Console access from these CIDRs only
Console roles
8 users · role-bound
| User | Role | MFA | Last seen |
|---|---|---|---|
| p.settlo | ADMIN | FIDO2 | now |
| garcia.m | TREASURER | FIDO2 | 14:01 |
| smith.j | ASST_TREASURER | FIDO2 | 13:54 |
| patel.a | OPERATOR | FIDO2 | 13:48 |
| kim.s | OPERATOR | FIDO2 | 13:32 |
| chen.l | OPERATOR | FIDO2 | 13:21 |
| audit-kpmg-r1 | AUDITOR | FIDO2 | yesterday |
| ext-counsel-1 | VIEWER | FIDO2 | 2 days ago |
API keys
For programmatic access · base URL https://api.umpledger.com/ump/v2
Active keys
Keys are shown once at creation · rotate every 90 days
| Key name | Prefix | Scope | Created | Last used | Expires | Status |
|---|---|---|---|---|---|---|
| Production · primary | ump_sk_live_…7f4c | FULL | 2026-04-01 | 12s ago | 2026-07-01 | ACTIVE |
| Production · readonly | ump_sk_live_…2a91 | READ | 2026-04-01 | 3m ago | 2026-07-01 | ACTIVE |
| Staging · CI | ump_sk_test_…b8a3 | SCOPED | 2026-05-12 | 1h ago | 2026-08-12 | ACTIVE |
| KPMG audit · readonly | ump_sk_live_…4408 | READ | 2026-04-29 | yesterday | 2026-06-29 | ROTATE SOON |
Notifications
Webhooks, email, and PagerDuty routes for incidents and approvals
Incident alerts
Tier-pending or unresolved > 24h
Step-up requests
Co-sign required from Treasurer
Periodic reviews
Quarterly sample notification
Webhooks
Decision dossier sealed (real-time)
Instructions
Signed Settlo Instruction Objects (SIO) · produced after /v1/policy:decide ALLOW · tracked through the Settlement State Machine
Instructions / 24h
14,218
Handoff p95
198ms
Settled rate
99.31%
In flight
142
Throughput
1.84K/s
Idempotency hits
23
Recent instructions
Newest first · click row for SSM history and rail acknowledgement
| Created | Instruction | Mandate | Rail | Beneficiary | Amount | SSM state | Settled in |
|---|---|---|---|---|---|---|---|
| 14:02:11.412 | ins_7f4c…a91e | AP2 / Cart | ACH CCD | urn:duns:123456789 | $4,275.00 | SUBMITTED | T+0 batch |
| 14:02:11.188 | ins_3a18…07ce | x402 / Payload | x402 Base USDC | 0x…supplier-treasury | $48,500.00 | PENDING | 12 of 64 blocks |
| 14:02:10.943 | ins_b22d…f413 | ACP / SPT | Stripe PSP | nbp_acme_seller_001 | $812.40 | SETTLED | 412ms |
| 14:02:10.712 | ins_d59f…21ba | AP2 / Cart | ACH CCD | urn:duns:445566778 | $1,247.80 | SUBMITTED | T+0 same-day |
| 14:02:10.489 | ins_a04c…91dd | ACP / DelegTok | FedNow | merchant_stripe_acct_… | $216.55 | SETTLED | 1.8s · pacs.002 ACSC |
| 14:02:10.075 | ins_e7b1…4408 | AP2 / Cart | — | — | $83,200.00 | REJECTED | at boundary (cap) |
| 14:02:09.681 | ins_5c83…2e7f | AP2 / Payment | SEPA SCT Inst | FR76 1010 7000 03… | €12,940.00 | SETTLED | 8.4s · VoP match |
| 14:02:09.322 | ins_19f6…b8a3 | x402 / Payload | x402 Solana USDC | SoLanaWalletAddr… | $48.20 | SETTLED | 2.1s · 32 slots |
| 14:02:09.040 | ins_8aac…ff10 | Settlo Native | RTP (TCH) | jpm-corp-acct-… | $3,118.00 | SETTLED | 1.2s |
| 14:02:08.601 | ins_44e2…16cd | AP2 / Cart | UPI Collect | vendor@hdfc | ₹52,400.00 | PENDING | NPCI switch |
| 14:02:07.214 | ins_61ab…cd29 | AP2 / Payment | SWIFT pacs.008 | Macquarie AU… | $24,800.00 | SUBMITTED | gpi UETR active |
| 14:01:54.808 | ins_2240…78b1 | AP2 / Cart | ACH CCD | urn:duns:556677889 | $200.00 | RETURNED | R01 NSF · day-1 |
Showing 12 of 14,218 in last 24h
View all instructions →SSM · ins_7f4c…a91e
State machine transitions with signed timestamps
✓INSTRUCTED · idempotency key minted
14:02:11.412✓SUBMITTED · NACHA trace 091000121234567
14:02:11.486…PENDING · same-day batch window 13:00 ET
in-flight○SETTLED · awaiting BAI v2 ack
expected T+0 17:00 ET○RETURNED / RECALLED / DISPUTED / TIMED_OUT
not yetIdempotency key
// idem_key = SHA-256(canonical_jcs(...))
mandate_id : "cm_9b7e2a4f01d3"
rail : "ach.ccd"
beneficiary_account : "091000121234567"
amount : 427500
currency : "USD"
value_date_bucket : "2026-05-19"
// =>
idem_key : "sha256:4b1a2c8e…f3c2" (dedup 7d)
SSM distribution
Live instructions by state · last 24h
SETTLED
14,011 · 98.5%
SUBMITTED in flight
98 · 0.7%
PENDING awaiting finality
44 · 0.3%
REJECTED at boundary
37 · 0.26%
RETURNED RDFI return
14 · 0.10%
RECALLED gSRP / camt.056
2 · 0.01%
DISPUTED handed off
1 · 0.01%
TIMED_OUT
11 · 0.08%
Rail Adapters
Pluggable submit / poll / cancel / reconcile components · routed by Settlo::Routing::v1
Adapters live
11
Submit p95
1.18s
Adapter health
11 / 11
Routing fallthroughs
8
Agentic rails
AP
v0.2 · FIDOGoogle AP2
Intent → Cart → Payment · SD-JWT + kb
/24h
9.8K
Open cart
12%
p95
48ms
v0.2 (28 Apr 2026) · "Human Not Present" enabled · revocation index synced
x4
CDP + selfCoinbase x402
EIP-3009 / Permit2 · HTTP 402
/24h
2.1K
Networks
5
p95
2.4s
Base · Solana · Polygon · Arbitrum · World Chain · facilitator pinned
ACP
Apache 2.0ACP · OpenAI + Stripe
delegate_payment · Stripe SPT
/24h
2.4K
Settle
412ms
PCI scope
PSP
SPT single-seller, single-amount, short-expiry · PSP webhook bound
V
RFC 9421Visa Trusted Agent
HTTP Message Signatures · Ed25519
A2A /24h
3.1K
Dir. status
UP
p95
62ms
Tenant op key registered in Visa directory · composes with AP2 / ACP / x402
MC
tokenizedMastercard Agent Pay
Agentic Tokens via MDES
/24h
1.4K
Issuers
38
p95
514ms
US complete (Nov 2025) · AU · NZ · EU (Santander 2 Mar 2026) live
MP
18 Mar 2026Stripe MPP
Machine Payments Protocol · streaming
/24h
680
Cadences
3
p95
380ms
one-shot / recurring / streaming · wraps x402 + ACP · Visa as design partner
Underlying rails
| Adapter | Region | Wire format | Finality | Per-tx cap | /24h | Submit p95 | Status |
|---|---|---|---|---|---|---|---|
| Fedwire Funds | US | pacs.008 / .009 / .002 | RTGS · 22h/day | no cap | 410 | 88 | UP |
| ACH (NACHA) | US | CCD / PPD / WEB / CIE | T+0 (SDA) / T+1 | $1M (→ $10M 17 Sep 2027) | 2.4K | 142 | UP |
| FedNow | US | pacs.008 / .002 / .004 | instant · 24x7 | $10M (since 12 Nov 2025) | 1.1K | 1.8s | UP |
| TCH RTP | US | pacs.008 / .002 / .004 | instant · 24x7 | $10M (since 9 Feb 2025) | 820 | 1.2s | UP |
| SEPA SCT Inst | Europe | pacs.008 + VoP | 10s SLA · 24x7 | no cap (IPR) | 2.0K | 8.4s | UP |
| SEPA SCT | Europe | pacs.008 | T+1 | no cap | 410 | 220 | UP |
| SEPA SDD B2B | Europe | pacs.003 / .004 | pull · T+1 | no cap | 140 | 280 | UP |
| UPI Collect | India | NPCI API + partner-bank | instant · 24x7 | P2M ₹5L · daily ₹10L | 680 | 2.1s | UP |
| UPI Circle (delegated) | India | OC 201-B · P2M only | instant | ₹15K / device / mo | 92 | 2.4s | UP |
| SWIFT pacs.008 (FINplus) | X-border | ISO 20022 + UETR | 1-3 days · gpi-tracked | no cap | 88 | 14.2m | UP |
| CCTP V2 (Circle) | X-border | burn-and-mint · Fast Transfer | 8-20s Fast · 13-19m std | no cap | 214 | 12.4s | UP |
11 adapters live · CCTP V1 phase-out 31 Jul 2026
Rail selection policy Settlo::Routing::v1 →Reconciliation Engine
Three-way match · mandate hash → instruction hash → rail acknowledgement
Break rate (T+1)
0.07%
Open breaks
9
Auto-matched 24h
14,189
Median resolution
4.2h
Break queue
Routed by ack format · BAI v2 · MT940/942 · camt.053/.052 · NACHA ACK · UPI settlement file · onchain receipt
9 open
| Opened | Break | Instruction | Rail | Type | Mandate amt | Ack amt | Owner | Path |
|---|---|---|---|---|---|---|---|---|
| 14:01:55 | brk_001 | ins_2240…78b1 | ACH CCD | amount_mismatch | $200.00 | $0.00 | analyst | 3-way miss · R01 |
| 13:48:11 | brk_002 | ins_91cd…e802 | SWIFT pacs.008 | reference_drift | $48,200.00 | $48,200.00 | analyst | EndToEndId mangled by correspondent |
| 12:24:38 | brk_003 | ins_44ee…3920 | SEPA SCT | fx_variance | €10,000.00 | $10,847.20 | analyst | FX outside tolerance band 0.8% |
| 11:55:02 | brk_004 | ins_77b1…4422 | x402 Base | ack_missing | $1,250.00 | — | auto-retry | tx not in 12-block window |
| 10:14:08 | brk_005 | ins_2202…11ab | UPI Collect | amount_mismatch | ₹52,400.00 | ₹52,381.00 | analyst | partner-bank rounded 0.04% |
| 09:32:11 | brk_006 | ins_88aa…0091 | ACH CCD | duplicate_ack | $3,118.00 | $3,118.00 ×2 | Treasurer | ODFI re-submitted file |
| 08:18:54 | brk_007 | ins_5577…aaff | SWIFT pacs.008 | ack_missing | $215,000.00 | — | Treasurer | 4h fallback poll · gpi UETR silent |
| 07:44:30 | brk_008 | ins_91f0…1142 | x402 Solana | reference_drift | $120.00 | $120.00 | analyst | Memo program ref not parsed |
| 07:02:08 | brk_009 | ins_42cd…aa01 | FedNow | amount_mismatch | $2.5M | $2.5M | Treasurer | pacs.002 RJCT · liquidity |
9 of 9 open breaks · auto-match ran at 14:02
Three-way match policy →Returns, Reversals & Recalls
NACHA R-codes · SEPA R-transactions · SWIFT gSRP / camt.056 · blockchain reorg
Returns 30d
14
Unauthorized rate
0.02%
WSUD windows open
3
Reversed YTD
$48.2K
NACHA returns · 30 days
R-code distribution · 2026 Operating Rules
| Date | R-code | Reason | Window | Instruction | Amount | WSUD | Action |
|---|---|---|---|---|---|---|---|
| 2026-05-19 | R01 | Insufficient Funds | 2 banking days | ins_2240…78b1 | $200.00 | — | auto-retry |
| 2026-05-17 | R10 | Not Authorized | 60 days | ins_0918…3344 | $1,400.00 | captured | reverse + notify |
| 2026-05-15 | R02 | Account Closed | 2 banking days | ins_71aa…8800 | $315.00 | — | onboarding flag |
| 2026-05-14 | R03 | No Account | 2 banking days | ins_6688…cc01 | $2,100.00 | — | onboarding flag |
| 2026-05-12 | R05 | Unauthorized via Corp SEC | 60 days | ins_1199…aaff | $8,420.00 | captured | reverse + investigate |
| 2026-05-09 | R07 | Authorization Revoked | 60 days | ins_aab2…1402 | $640.00 | captured | reverse · mandate retired |
| 2026-05-07 | R11 | Not in Accordance w/ Authorization | 60 days | ins_77f1…22b8 | $310.00 | captured | reverse · UEF assessed |
SEPA + SWIFT R-transactions
pacs.004 returns · gSRP / camt.056 recalls
| Date | Type | Code | Rail | Instruction | Amount | Status |
|---|---|---|---|---|---|---|
| 2026-05-19 | SCT Inst neg-resp | AB05 | SEPA SCT Inst | ins_42cd…aa01 | €500.00 | released T+10s |
| 2026-05-16 | SDD Return | AC04 | SEPA SDD B2B | ins_5588…0001 | €2,140.00 | reversed |
| 2026-05-11 | gSRP recall | PDCR | SWIFT pacs.008 | ins_91cd…e802 | $48,200.00 | pending camt.029 |
| 2026-05-08 | gSRP recall | RJCR | SWIFT pacs.008 | ins_2202…bbff | $8,800.00 | rejected by bene bank |
| 2026-05-04 | gSRP recall | ARDT | SWIFT pacs.008 | ins_6677…11dd | $1,200.00 | already returned |
| 2026-04-29 | Blockchain reorg | depth<safe | x402 Base | ins_88aa…ee01 | $340.00 | re-broadcast |
Exception Channels
Non-API rails · full dual-control · OCR audit · multi-language templates · Exception Channel Artifact (ECA) per dispatch
ECAs / 30d
42
Dual-control
100%
Locales served
6
Awaiting scan-back
3
✉
DUAL-CONTROLManual letter to bank
Server-rendered PDF · physical signature · courier reference
/30d
12
Scan-back
9
Templates
23
OCR byte-for-byte match against artifact · 7 locales
⌖
DUAL-CONTROLManual wire (bank portal)
Browser-extension / RDP capture · screen-recording evidence
/30d
2
URL/shot env
100%
Sig attest
2
Operator signed-attestation: screen matches Settlo artifact byte-for-byte
▣
BR/DOACheque issuance
Cheque-book inventory · signature-card linkage · CTS / Check 21
/30d
4
Drawn
4
Cleared
3
BR/DOA verified at draw · post-clear recon against image-cash-letter
⌬
REGULATOR-REQIn-portal manual
China · Japan · LatAm · India · regulator-required flows
/30d
24
CN · JP
18
CAMT recon
21
Full timestamp capture · post-hoc CAMT / MT statement reconciliation
Active ECAs
Open exception flows · dual-control state
3 awaiting scan-back
| Opened | ECA | Channel | Locale | Operator | Delegate | Bank | Amount | State |
|---|---|---|---|---|---|---|---|---|
| 2026-05-19 11:18 | eca_44a1 | Letter | ZH-Hans | kim.s | chen.l | ICBC Shanghai | ¥820,000 | SCAN_BACK |
| 2026-05-19 09:22 | eca_44a2 | In-portal | JA | kim.s | garcia.m | SMBC Tokyo | ¥3.4M | PORTAL_CAPTURE |
| 2026-05-18 16:08 | eca_4498 | Cheque | EN | okafor.n | nakamura.h | JPMorgan NY | $14,200 | CLEARED |
| 2026-05-18 14:31 | eca_4497 | Wire (portal) | ES | silva.r | garcia.m | BBVA Mexico | MX$240,000 | SETTLED |
| 2026-05-17 10:55 | eca_4492 | Letter | ZH-Hant | kim.s | chen.l | CTBC Taipei | NT$1.2M | SCAN_BACK |
5 active of 42 last 30d · Merkle-anchored hourly
Template library →Ledger-of-Record
Double-entry, tenant-scoped, immutable journal · not a custodial ledger · no posting is final until 3-way match closes
Journal entries / 24h
28,436
Pairs reconciled
99.93%
Durability
11×9
RPO / RTO
5m / 30m
Journal · latest entries
Sequence numbers · debit/credit · event type · finality state
| Seq | Time | Instruction | Event | Debit account | Credit account | Amount | Cy | State |
|---|---|---|---|---|---|---|---|---|
| #284,361 | 14:02:11.486 | ins_7f4c…a91e | PENDING_OUTFLOW | mandate_pending::AP | rail.virtual::ach | 4,275.00 | USD | pending |
| #284,360 | 14:02:11.218 | ins_3a18…07ce | PENDING_OUTFLOW | mandate_pending::TRY | rail.virtual::x402.base | 48,500.00 | USDC | pending |
| #284,359 | 14:02:11.012 | ins_b22d…f413 | EFFECTIVE_OUTFLOW | rail.virtual::stripe | counterparty::nbp_acme | 812.40 | USD | final |
| #284,358 | 14:02:10.943 | ins_b22d…f413 | PENDING_OUTFLOW | mandate_pending::PROC | rail.virtual::stripe | 812.40 | USD | closed |
| #284,357 | 14:02:10.498 | ins_a04c…91dd | EFFECTIVE_OUTFLOW | rail.virtual::fednow | counterparty::merch_str | 216.55 | USD | final |
| #284,356 | 14:02:10.489 | ins_a04c…91dd | PENDING_OUTFLOW | mandate_pending::PROC | rail.virtual::fednow | 216.55 | USD | closed |
| #284,355 | 14:02:09.690 | ins_5c83…2e7f | EFFECTIVE_OUTFLOW | rail.virtual::sct_inst | counterparty::FR76... | 12,940.00 | EUR | final |
| #284,354 | 14:02:09.681 | ins_5c83…2e7f | PENDING_OUTFLOW | mandate_pending::TRY | rail.virtual::sct_inst | 12,940.00 | EUR | closed |
| #284,353 | 14:01:54.890 | ins_2240…78b1 | REVERSAL | rail.virtual::ach | mandate_pending::AP | 200.00 | USD | R01 unwind |
| #284,352 | 2026-05-17 | ins_0918…3344 | REVERSAL | counterparty::445566 | mandate_pending::AP | 1,400.00 | USD | R10 WSUD |
Showing 10 of 28,436 entries today
DecisionDossier-E for ins_7f4c → →Boundary contract
Settlo does not hold funds at the platform layer
Native engine roleSmart routing + orchestration + LoR
CustodyNone · rails execute
Instrument issuanceNone
FloatZero
Dispute roleSigned forensic record only
FinalityNo posting final until 3-way match closes
DecisionDossier-E
Execution-side extension of the Identity PRD Dossier
{
"dossier_id": "de_b22df413c98a",
"mandate_id": "cm_9b7e2a4f01d3",
"instruction_id": "ins_b22d…f413",
"settlement_id": "stl_b22d2a91e",
"reconciliation_state": "matched",
"ssm_history": ["INSTRUCTED", "SUBMITTED", "SETTLED"],
"rail_ack_ref": "pi_3OqXr1AbCdEfGh",
"worm_anchor": "s3://settlo-audit-…/918274",
"merkle_root": "sha256:f1e2d3c4…b1a0"
}
Mandate Registry
Typed, signed, versioned commercial-terms objects · compiled to rail primitives by Cedar · lifecycle gated by Operational Threshold
Active mandates
412
Pending approval
7
Create gate p95
142ms
Templates
24
FX drift breaches
2
Compile coverage
100%
By type
Distribution across the six Mandate types
UNIT_RATE per-unit pricing
184 · 44.7%
SUBSCRIPTION recurring
98 · 23.8%
WATERFALL_SPLIT multi-party
62 · 15.0%
FIXED_FEE one-time, evidence-gated
31 · 7.5%
ASYNC deferred · exposure-capped
22 · 5.3%
EXTERNAL_INSTRUCTION SWIFT/SEPA/cheque
15 · 3.6%
Approval queue
Pending Treasurer co-sign above Operational Threshold
5 awaiting
M_8b1d…7c4a · UNIT_RATE · claude-sonnet-4.5
$50K/mo cap · counterparty did:web:anthropic.com · tokenizer-bound · drafted by patel.a
SLA 8h · Treasurer garcia.m
M_91cd…2e0f · WATERFALL_SPLIT · model 60 / tool 25 / platform 15
3-party split · $500K monthly ceiling · banker's rounding · residual to model
SLA 6h · Treasurer garcia.m
M_4488…1102 · ASYNC · supplier-pay-9 · monthly post-paid
Max unsettled exposure $250K · 5th business day cadence · drafted by chen.l
SLA 12h · Treasurer garcia.m
M_aaff…3340 · SUBSCRIPTION · $99/seat · 25 seats included
Renewal annual · overage at $4/seat via Stripe Billing Meter
SLA 4h · Treasurer garcia.m
M_7711…ddee · FIXED_FEE · deal-closed success fee · $50K
Evidence predicate: signed term sheet PDF hash match
SLA 24h · Asst Treas (under Op Threshold)
All mandates
Showing 1 – 12 of 412 · click row for full mandate detail
| Mandate | Type | Counterparty | Principal (agent) | Nom / Settle | Period cap | Effective | State | Compiled to |
|---|---|---|---|---|---|---|---|---|
| M_8b1d…7c4a | UNIT_RATE | did:web:anthropic.com | payables-bot | USD / USD | $50K / mo | 2026-05-20 | PENDING | MPP · x402.upto |
| M_3a18…07ce | UNIT_RATE | did:web:openai.com | research-bot-7 | USD / USD | $25K / mo | 2026-05-01 | ACTIVE | Stripe Billing |
| M_91cd…2e0f | WATERFALL | did:web:platform.example | checkout-orchestrator | USD / USD | $500K / mo | 2026-05-20 | PENDING | Stripe Connect |
| M_b22d…f413 | WATERFALL | did:web:razorpay-route | indian-ap-bot | INR / INR | ₹50L / mo | 2026-04-15 | ACTIVE | Razorpay Route |
| M_4488…1102 | ASYNC | urn:duns:123456789 | supplier-pay-9 | USD / USD | $250K unsettled | 2026-05-20 | PENDING | EXT_INSTR + ACH |
| M_aaff…3340 | SUBSCRIPTION | did:web:settlo-saas | account-mgr | USD / USD | $99 × 25 seats | 2026-05-20 | PENDING | Stripe Subscription |
| M_7711…ddee | FIXED_FEE | did:web:bcg.com | deal-closer-2 | USD / USD | $50,000 one-time | 2026-05-19 | PENDING | x402.exact |
| M_aae2…1801 | UNIT_RATE | did:web:cohere.com | embedding-svc | USD / USD | $15K / mo | 2026-04-22 | ACTIVE | MPP streaming |
| M_5c83…2e7f | WATERFALL | did:web:basf.com | basf-spot-fx-1 | EUR / USD | €80K / mo | 2026-03-12 | ACTIVE | Stripe Connect |
| M_19f6…b8a3 | UNIT_RATE | did:web:perplexity.ai | research-aux | USD / USD | $8K / mo | 2026-04-08 | ACTIVE | x402.upto |
| M_ee10…7782 | EXT_INSTR | did:web:jpm-treas | jpm-onboarding-flow | USD / USD | unconstrained | 2026-03-01 | ACTIVE | SWIFT / MT940 |
| M_0c4f…1ea2 | WATERFALL | did:web:macquarie.com | macquarie-am-rebal | AUD / USD | A$120K / mo | 2026-04-30 | SUSPENDED | FX drift > 50 bps |
Page 1 of 35 · 412 active · 22 suspended · 7 pending
View all mandates →UNIT_RATE · claude-sonnet-4.5
M_8b1d7c4a3201f9e8 · per-token pricing · tokenizer-bound · PENDING_APPROVAL
Type
UNIT_RATE
Period cap
$50K/mo
Counterparty
anthropic.com
Tokenizer hash
sha256:7c1b…
Rate card
USD per 1M tokens · banker's rounding · tokenizer-pinned
Unittoken
Per1,000,000 (1M)
Input$3.00 / 1M tokens
Output$15.00 / 1M tokens
Cached input$0.30 / 1M tokens 90% disc.
Currency nominal / settleUSD / USD
FX drift bandN/A · same-currency
Period caps & thresholds
Monthly cap$50,000.00
Daily cap$2,500.00
Early warning80%
Hard stop100%
Operational Threshold$25K/mo · co-sign req'd ✓
Mandate envelope
{
"mandate_id": "01J9Z2X7TFR3WP4RT0K8VBQ7M5",
"tenant_id": "ten_8b1d…",
"type": "UNIT_RATE",
"principal": "spiffe://settlo/agent/treasury/payables-bot",
"counterparty": "did:web:anthropic.com",
"rate_card": {
"unit": "token",
"tokenizer_hash": "sha256:7c1b…",
"prices": [
{"dim":"input", "unit_price_micro":"3000000", "per":"1000000"},
{"dim":"output", "unit_price_micro":"15000000", "per":"1000000"}
]
},
"period_caps": {"monthly_max_usd":"50000.00", "early_warning_pct": 80},
"effective_from": "2026-05-20T00:00:00Z",
"signature": {"alg":"Ed25519", "kid":"settlo-hsm-2026Q2"}
}
Compilation & checks
Cedar static validator · rail-adapter plan
Cedar static validator
✓Schema type-check against Mandate envelope
12 ms✓Period caps bounded
3 ms✓Symbolic verification: monthly_cap reachable
48 ms✓Tokenizer hash present (token-priced)
1 ms✓Cedar deny-by-default policy emitted
22 msRail compilation
✓MPP streaming · WWW-Authenticate per-token quote
primary✓x402 upto · authorize max, settle actual
fallback✓Stripe Billing Meter · end-of-cycle invoice
batchApproval chain
✓DRAFT created · patel.a (Asst Treasurer)
14:01:12✓Static validation passed
14:01:13✓Above Op Threshold ($25K/mo) · routed to Treasurer
14:01:14!PENDING_APPROVAL · awaiting garcia.m co-sign (FIDO2)
SLA 8h○ACTIVE · HSM-seal & Dossier-T anchor
on co-signLinked artefacts
Metering Engine
CloudEvents v1.0.2 ingestion · authoritative & reconciliatory modes · streaming
Events / 24h
142.4M
Ingest p95
38ms
Throughput
8,420/s
Dedup rate
0.31%
Sig-verify
100%
Late-data quarantine
82
Live CloudEvents
v1.0.2 envelopes · auto-refresh 1s · (source, id) dedup window 24h
| Time | Type | Source | Subject (agent) | Mandate | Data | Sig | Status |
|---|---|---|---|---|---|---|---|
| 14:02:11.918 | prompt | api.anthropic.com | payables-bot | M_8b1d…7c4a | in:1842 · out:612 · cached:384 | Ed25519 | ACCEPTED |
| 14:02:11.802 | request | api.openai.com | research-bot-7 | M_3a18…07ce | model:gpt-4o · in:2104 | Ed25519 | ACCEPTED |
| 14:02:11.624 | prompt | api.anthropic.com | payables-bot | M_8b1d…7c4a | in:1240 · out:980 · cached:0 | Ed25519 | ACCEPTED |
| 14:02:11.341 | gpu_second | together.ai | training-coord | M_44e2…1801 | H100 · 1.0s · job_8821 | ECDSA P-256 | ACCEPTED |
| 14:02:11.118 | outcome | crm.acme.com | deal-closer-2 | M_7711…ddee | deal_closed · evidence_uri | Ed25519 | ACCEPTED |
| 14:02:10.802 | prompt | api.anthropic.com | payables-bot | M_8b1d…7c4a | in:512 · out:204 · cached:512 | Ed25519 | ACCEPTED |
| 14:02:10.412 | duration | stream.elevenlabs.io | voice-narrator | M_aae2…1801 | 38.2s · vid_4488 | Ed25519 | ACCEPTED |
| 14:02:10.121 | prompt | api.anthropic.com | payables-bot | M_8b1d…7c4a | in:840 · out:1240 · cached:200 | Ed25519 | DEDUP |
| 14:02:09.882 | request | api.perplexity.ai | research-aux | M_19f6…b8a3 | model:sonar-large · in:418 | Ed25519 | ACCEPTED |
| 14:02:09.412 | prompt | api.anthropic.com | payables-bot | M_8b1d…7c4a | in:2240 · out:380 | Ed25519 | TOKENIZER_DRIFT |
10 of 142,442,108 events today
OpenMeter-parity query API →Sample CloudEvent v1.0.2
Latest accepted · token meter for M_8b1d…7c4a
{
"specversion": "1.0",
"type": "prompt",
"id": "ev_01J9Z3A2QYV8ZK0M1ENR2P4HXB",
"time": "2026-05-20T14:02:11.918Z",
"source": "https://api.anthropic.com/v1/messages",
"subject": "spiffe://settlo/agent/treasury/payables-bot",
"datacontenttype": "application/json",
"data": {
"model": "claude-sonnet-4.5",
"tokenizer_version": "anthropic-sonnet-4.5-tk1",
"prompt_tokens": 1842,
"completion_tokens": 612,
"cached_tokens": 384
},
"settlosig": {
"alg": "Ed25519",
"kid": "ctr-anthropic-2026Q2"
}
}
Aggregations supported
SUM
COUNT
AVG
MIN
MAX
LAST
OpenMeter-parity
JSONPath value extraction (e.g. $.completion_tokens) · windowed query HOUR · DAY · MONTH
Meter streams
Active across the 5 metering granularities
| Stream ID | Granularity | Source | Bound mandate(s) | Mode | Events 24h | Aggregation | Status |
|---|---|---|---|---|---|---|---|
| mtr_prompt_claude_sonnet_4_5 | token | api.anthropic.com | M_8b1d…7c4a | authoritative | 48.2M | SUM(in) · SUM(out) · SUM(cached) | healthy |
| mtr_prompt_gpt_4o | token | api.openai.com | M_3a18…07ce | reconciliatory | 22.1M | SUM(in) · SUM(out) | healthy |
| mtr_request_perplexity | request | api.perplexity.ai | M_19f6…b8a3 | authoritative | 412K | COUNT(*) | healthy |
| mtr_gpu_second_h100 | gpu_second | together.ai | M_44e2…1801 | reconciliatory | 1.2M | SUM(seconds) | healthy |
| mtr_outcome_dealclosed | outcome | crm.acme.com | M_7711…ddee | authoritative | 8 | COUNT(*) w/ evidence_handle | healthy |
| mtr_duration_voice | duration | stream.elevenlabs.io | M_aae2…1801 | reconciliatory | 214K | SUM($.seconds) | drift +0.12% |
6 active streams · 5 granularities covered
Daily reconciliation →Daily Reconciliation
Settlo shadow meter vs counterparty meter · daily cutover 23:59 UTC · Materiality Threshold escalation
Recon today
82 / 82
Within tolerance
78
Breaks (analyst)
3
Materiality breaches
1
Reconciliation status · last 7 days
Per-meter delta vs counterparty file
| Day | Meter | Mode | Settlo total | Counterparty total | Δ | Δ % USD | State |
|---|---|---|---|---|---|---|---|
| 2026-05-20 | mtr_prompt_claude | auth | 18,204,135 tok | 18,204,027 tok | +108 tok | +$0.0017 | PASS |
| 2026-05-20 | mtr_prompt_gpt_4o | recon | 8,841,212 tok | 8,840,108 tok | +1,104 tok | +$0.014 | PASS |
| 2026-05-20 | mtr_gpu_second_h100 | recon | 1,184,920 s | 1,184,720 s | +200 s | +$148.00 | BREAK · analyst |
| 2026-05-20 | mtr_duration_voice | recon | 214,108 s | 213,890 s | +218 s | +$8.72 | BREAK · analyst |
| 2026-05-20 | mtr_outcome_dealclosed | auth | 8 outcomes | 10 outcomes | −2 outcomes | −$100,000 | MATERIALITY |
| 2026-05-19 | mtr_prompt_claude | auth | 18,008,420 tok | 18,008,420 tok | 0 | $0.00 | PASS |
| 2026-05-19 | mtr_request_perplexity | auth | 412,108 req | 412,102 req | +6 req | +$0.06 | PASS |
| 2026-05-18 | mtr_prompt_gpt_4o | recon | 8,712,408 tok | 8,712,408 tok | 0 | $0.00 | PASS |
Cutover 23:59 UTC · Late-Data Window 48h
Export delta files →Materiality breach · open
mtr_outcome_dealclosed · pending Treasurer
auto-suspended
MandateM_7711…ddee
Counterpartydid:web:bcg.com
Detected2026-05-20 23:59:14 UTC
Paged at23:59:42 (T+28s · SLA <60s ✓)
Auto-suspendM_7711…ddee · new settlements blocked
Investigation ownergarcia.m (Treasurer)
Delta payload
{
"report_id": "rec_2026-05-20_outcome_dealclosed",
"meter_stream": "mtr_outcome_dealclosed",
"day": "2026-05-20",
"settlo_outcomes": 8,
"counterparty_outcomes": 10,
"delta": -2,
"delta_usd": "-100000.00",
"materiality_threshold_usd": "50000.00",
"materiality_breach": "true",
"format": "json-delta-v1"
}
Dispute Register
90-day default investigation window · VAMP / CE 3.0 / SEPA SDD / NACHA windows recognised · signed forensic record only
Open
5
Resolved 30d
14
VAMP ratio (30d)
0.42%
Avoided 30d
$184K
VAMP fees YTD
$0
Median resolution
12d
Active disputes
Click row for evidence bundle and acquirer submission status
| Opened | Case | Channel | Mandate | Counterparty | Amount | Reason | Window | State | Owner |
|---|---|---|---|---|---|---|---|---|---|
| 2026-05-19 | DSP-2026-0042 | Visa CE 3.0 | M_aaff…3340 | cust-77a8 | $4,275.00 | 10.4 fraud | 90d | EVIDENCE | Dispute Analyst |
| 2026-05-17 | DSP-2026-0041 | NACHA R10 | M_4488…1102 | urn:duns:123456789 | $1,400.00 | not authorized | 60d | UNAUTH · WSUD | garcia.m |
| 2026-05-15 | DSP-2026-0040 | SEPA SDD auth | M_5c83…2e7f | FR76 1010 7000 03… | €2,140.00 | refund request | 8w window | PROCESSING | patel.a |
| 2026-05-12 | DSP-2026-0039 | Visa CE 3.0 | M_b22d…f413 | cust-31bb | $812.40 | 10.4 fraud | 90d | EVIDENCE WIN | Dispute Analyst |
| 2026-05-08 | DSP-2026-0038 | NACHA R11 | M_3a18…07ce | urn:duns:445566778 | $310.00 | not per auth | 60d | UEF assessed | patel.a |
5 of 14 active in last 30 days · acquirer submission via Visa Resolve Online
VAMP dashboard →DSP-2026-0042 · CE 3.0 evidence bundle
$4,275 chargeback · 10.4 fraud · awaiting submission
Compelling Evidence 3.0 · 4 core data elements
✓User ID · matches 4 prior tx (≥120d history)
cust-77a8✓IP address · matches 6 prior tx
198.51.100.42✓Device ID / fingerprint · matches 8 prior tx
fpr_8ab1…−Shipping address · digital good (N/A)
—Visa CE 3.0 (15 Apr 2023): at least 2 of 4 core elements must match prior transactions; one must be IP or device ID · ✓ satisfied · remedy expansion to multi-merchant effective 24 October 2026
Submission
AcquirerStripe (VRoL)
Issuer reasonVCR 10.4 (fraud)
Evidence due2026-05-26 (T+7d)
ConfidenceHIGH · 3/4 with IP+device
Predicted outcomein customer favour
VAMP & rail-window reference
Active enforcement thresholds · SEPA & NACHA windows
Visa VAMP · Excessive merchant
US · Canada · EU · APAC effective 1 Apr 2026
1.5% · $8/eventUS · Canada · EU · APAC effective 1 Apr 2026
VAMP monitoring floor
combined TC40 + TC15
≥ 1,500 events / mocombined TC40 + TC15
Visa CE 3.0 base
effective 15 Apr 2023
2-of-4 elementseffective 15 Apr 2023
CE 3.0 multi-merchant
Visa Core Rules 18 Apr 2026 ed.
eff. 24 Oct 2026Visa Core Rules 18 Apr 2026 ed.
SEPA SDD authorised refund
8 weeksSEPA SDD unauthorised
13 monthsNACHA unauthorised (R05/R07/R10/R11/R29/R51)
consumer extended
60 days · WSUDconsumer extended
NACHA unauthorised rate cap
0.5%Settlo default window
90 days from settlementICC Expedited Arbitration
Art 30 + App VI Art 1(2)
≤ $3M defaultArt 30 + App VI Art 1(2)
Rate cards, Promos & Volume Commits
Tiered / graduated pricing · Stripe-style coupons · AWS-EDP-style commits with drawdown · dimensional pricing
Rate cards
38
EDP commits
$3.2M
Active promo codes
22
True-up due
1
Tiered / graduated rate cards
Volume-bracketed pricing with rebate clawback
| Rate card | Bound mandate | Shape | Tiers | Clawback | State |
|---|---|---|---|---|---|
| RC_claude_volume_2026 | M_8b1d…7c4a | tiered | 0-10M · 10-50M · 50M+ | enabled · 90d | ACTIVE |
| RC_gpt4o_graduated | M_3a18…07ce | graduated | 0-1M · 1-10M · 10-100M · 100M+ | enabled · 60d | ACTIVE |
| RC_perplexity_flat | M_19f6…b8a3 | flat | $0.20 / req | — | ACTIVE |
| RC_h100_dimensional | M_44e2…1801 | dimensional | region × util-class | — | ACTIVE |
| RC_voice_streaming | M_aae2…1801 | tiered | 0-1Kh · 1-10Kh · 10Kh+ | — | ACTIVE |
| RC_bcg_dealfee | M_7711…ddee | flat | $50K / outcome | — | PENDING |
Volume commitments (AWS-EDP style)
Multi-quarter spend commits with drawdown & quarterly true-up
CMT_anthropic_2026 $1.2M / yr · Q2 of 4
$684K / $1.2M
CMT_openai_2026 $800K / yr · Q2 of 4
$412K / $800K
CMT_together_h100 $500K / yr · Q2 of 4
$240K / $500K
CMT_bcg_advisory $700K / yr · Q2 of 4 · clawback risk
$210K / $700K
True-up calendar
!Q2 true-up · CMT_bcg_advisory · projected miss $115K
due 2026-07-15✓Q2 true-up · CMT_anthropic_2026 · on track +8%
due 2026-07-15✓Q2 true-up · CMT_openai_2026 · on track +4%
due 2026-07-15✓Q2 true-up · CMT_together_h100 · on track
due 2026-07-15Promo codes & coupons
Stripe-style Coupon (rule) + Promotion Code (redeemable artefact) · redemption rate-limited per code & per principal
| Code | Coupon (rule) | Bound to | Redemption limit | Per principal | Redeemed | Expires | State |
|---|---|---|---|---|---|---|---|
| DESIGN-PARTNER-2026 | 25% off · forever | Tenant-scope | ∞ | 1 | 18 / — | 2027-01-01 | ACTIVE |
| PILOT-PACTUM-Q2 | $2,500 credit | M_4488…1102 | 10 | 1 | 3 / 10 | 2026-06-30 | ACTIVE |
| VOICE-FREE-MIN-1K | 1,000 minutes free | M_aae2…1801 | 500 | 1 | 142 / 500 | 2026-08-31 | ACTIVE |
| DEAL-CLOSER-LAUNCH | 50% off first deal-fee | M_7711…ddee | 25 | 1 | 0 / 25 | 2026-12-31 | ACTIVE |
| BLACK-FRIDAY-25 | $500 credit | Tenant-scope | 100 | 1 | 100 / 100 | 2025-11-30 | EXPIRED |
5 of 22 shown · velocity check on per-principal redemption
Cedar deny-by-default policy →DecisionDossier-T · Audit Linkage
Mandate-scoped tamper-evident chain · extends Dossier-E with Merkle anchoring · daily seal · 7-year SOX retention
Dossier-T entries (24h)
14,891
Merkle root (today)
f01c…3b91
Retention
7yrs
Seal integrity
100%
Dossier-T entries · live
Each Mandate event seals one signed entry into the per-tenant Merkle log
| Sealed at | Entry | Event | Mandate | Actor | Prev hash | Merkle day | Seal |
|---|---|---|---|---|---|---|---|
| 14:02:11.486 | ddt_01J9Z3B… | METER_EVENT | M_8b1d…7c4a | ctr-anthropic | sha256:7c1b… | 2026-05-20 | Ed25519 |
| 14:02:11.218 | ddt_01J9Z3A… | SETTLEMENT_INSTR | M_3a18…07ce | settlo-engine | sha256:0c4f… | 2026-05-20 | Ed25519 |
| 14:01:42.802 | ddt_01J9Z2Y… | MANDATE_PENDING | M_8b1d…7c4a | patel.a | sha256:f01c… | 2026-05-20 | Ed25519 |
| 14:01:12.418 | ddt_01J9Z2X… | MANDATE_CREATED | M_8b1d…7c4a | patel.a | sha256:c8f3… | 2026-05-20 | Ed25519 |
| 13:48:11.302 | ddt_01J9Z1F… | RECON_BREAK | M_7711…ddee | settlo-engine | sha256:b1e2… | 2026-05-20 | Ed25519 |
| 11:18:02.118 | ddt_01J9YPL… | DISPUTE_OPENED | M_aaff…3340 | visa-vrol | sha256:7728… | 2026-05-20 | Ed25519 |
| 09:14:02.802 | ddt_01J9YKQ… | MANDATE_APPROVED | M_aae2…1801 | garcia.m | sha256:4488… | 2026-05-20 | Ed25519 |
| 2026-05-19 23:59:14 | ddt_01J9XZY… | MERKLE_ROOT | tenant-wide seal | settlo-hsm | root:f01c…3b91 | 2026-05-19 | Ed25519 + WORM |
8 of 14,891 entries today · daily Merkle root sealed at 23:59 UTC
Dossier-E extension · Audit ▸ Decision Dossiers →Sample Dossier-T entry · sealed
MANDATE_APPROVED for M_aae2…1801 at 09:14:02
{
"dossier_id": "ddt_01J9YKQH8M…",
"mandate_id": "01J9Z2YAAE21801",
"event": "MANDATE_APPROVED",
"actor": "spiffe://settlo/human/treasurer/garcia.m",
"ts": "2026-05-20T09:14:02Z",
"prev_hash": "sha256:4488e2a1801f9c3d…b1a0",
"merkle_root_day": "2026-05-20",
"seal": {
"alg": "Ed25519",
"kid": "settlo-hsm-2026Q2",
"sig": "4f81c3a9…3c9a"
}
}
Cryptographic surface
Algorithms & key rotation per PRD §12
Mandate signingEd25519 · HSM (JCS canon.)
Meter event signingEd25519 (default) / ECDSA P-256
Dossier-T sealingEd25519 + Merkle root daily
Tokenizer integritySHA-256 of canonical config
Webhook callbacksRFC 9421 HTTP Message Sig
HSM rotation≤ 365 days · rolling re-seal
WORM retention7 years · 11×9 durability
Compliance anchors
SOX 404 ITGC
SOC 2 CC1–CC9
DORA Arts 5/6/9/17/25/28/30
ISO/IEC 42001:2023
PCI DSS 4.0.1 Req 10
NIST SP 800-53 AU-2/12
Onboard agent
Register a new AI agent into Acme Corp · takes ~3 minutes · ends in PENDING_TREASURER_APPROVAL
Choose identity source
Where will this agent's identity be anchored? · 5 BYOI providers connected · click a card to select
EN
Microsoft Entra Agent ID
WX
IBM watsonx Orchestrate
SN
ServiceNow AI Agent
SF
Salesforce Agentforce
NA
Settlo Native (SPIRE)
SP
SPIFFE federated
Agent details
Identify the agent for the registry · these fields appear in every decision dossier
Short, descriptive · lowercase, hyphens, ≤ 40 chars · visible in logs
From Entra Admin Center → Enterprise Applications → Object ID
Drives entitlement match
Owning operator · drives co-sign rule
DUNS, DID, or pattern
Override per-transaction
Caps & policy
Hard limits enforced at decision time · Cedar deny-by-default · over-threshold settlements require co-sign
Spend caps
Hard ceiling on a single decision
Rolling 24h aggregate
Co-sign rule
Single-tx threshold that triggers FIDO2 step-up by garcia.m
Sliding 1h window
Sliding 24h
Calendar day
Mandate-spec acceptance
Which mandate specs may this agent present to the decision engine?
Attestation
Bind the agent's identity to a hardware-attested execution environment · PCR / MRENCLAVE measured at each decision
Choose attestor
AW
AWS Nitro Enclaves
AZ
Azure Confidential VM
SG
Intel SGX
—
No attestation
Expected measurement
Settlo verifies this matches the attestation doc on every decision
Nitro attestor reachable
verified PCR8 against the configured enclave image · 142 ms round-trip
Review & submit
Final read-only snapshot · submitting triggers FIDO2 step-up by Treasurer garcia.m
BYOI sourceMicrosoft Entra Agent ID
Object IDaaaa-1111-…-dddd
Agent nameap-automation-7f4d
PurposeAP_AUTOMATION
Operatorsmith.j · Asst Treas
Default railACH (NACHA CCD)
Per-tx cap$5,000
Per-day cap$25,000
Per-month cap$400,000
Co-sign >$10,000
AttestorAWS Nitro Enclaves
AcceptsAP2, x402
What happens next
1Cedar policy compiled and HSM-signed (Ed25519)
~120ms2Approval routed to garcia.m (over Op Threshold)
FIDO2 step-up3DecisionDossier-I entry sealed and WORM-anchored
on approval4Agent appears in registry as ACTIVE
≤ 5s
Step 1 of 5
Verify mandate
Ad-hoc mandate verification · paste payload · runs all 8 checks · produces a sealed verification report
1 · Mandate payload
Paste an AP2 Cart / Payment, x402 PaymentPayload, ACP DelegToken, or Settlo Native mandate
Click to switch parser
AP2 Cart
AP2 Payment
x402 Payload
ACP DelegTok
Settlo Native
Auto-detect format · canonicalised per RFC 8785 JCS before verification
// AP2 Cart Mandate · SD-JWT skeleton
{
"alg": "ES256",
"typ": "vc+sd-jwt",
"kid": "entra:aaaa-1111-…-bbbb"
}.{
"iss": "https://creds.acme.com",
"vct": "AP2/CartMandateV02",
"cart_id": "cm_9b7e2a4f01d3",
"checkout_hash": "sha256:4b1a…f3c2",
"amount": { "value":"4275.00", "currency":"USD" },
"payment_method": {
"type": "push",
"rail": "ach.ccd",
"beneficiary": "urn:duns:123456789"
},
"intent_expiry": "2026-05-20T18:30:00Z",
"agent_oid": "aaaa-1111-bbbb-2222-cccc3333dddd"
}.eyJhbGc…ZHpRT2x6 // signature
2 · Verification result
cm_9b7e2a4f01d3 · verified 92 ms
Pass
Spec detectedAP2 / Cart Mandate v0.2
Issuerhttps://creds.acme.com
Bound to agentap-automation-7f4c (oid aaaa-1111-…)
Counterpartyurn:duns:123456789
AmountUSD 4,275.00 · ACH push
Expiry2026-05-20 18:30 UTC · fresh
Checks · 8 / 8 passed
✓ES256 signature verified against Entra JWKS
11 ms✓Checkout-hash bound to enclosed Cart JWT
4 ms✓Cart constraints type-checked
9 ms✓Intent expiry within freshness window
2 ms✓Revocation: not in mandate_revoked index
18 ms✓Agent binding to oid · BYOI source UP
8 ms✓Operator cap: $4,275 / $25,000 day (17%)
5 ms✓Attestation fresh (Nitro PCR8 ✓)
14 msSigned verification report · sealed
{
"verification_id": "vr_01J9Z3MAND8210e",
"mandate_id": "cm_9b7e2a4f01d3",
"result": "pass",
"checks_total": 8,
"checks_passed": 8,
"latency_ms": 92,
"sealed_at": "2026-05-20T14:02:11Z",
"signed_by": "ed25519:settlo-verify-2026Q2"
}
2 · Verification result
Waiting for you to run the 8 checks
◇
No verification run yet
Paste a mandate payload on the left, pick your verification options, then click Run all 8 checks. The result and signed report will appear here.
Add identity provider
Federate a new BYOI source · agents from this provider will route through the same decision engine · takes ~5 minutes
Choose provider
5 already connected · pick from the catalog or add a custom OIDC source
G
Google ADK
⛓
LangChain Hub
C
CrewAI Enterprise
⌘
Cognition Devin
N
ServiceNow Now Assist
A
AutoGen Studio
L
Lyzr.ai
U
UnifyApps
+
Custom OIDC source
Display name & region
Shown in the console
Token verification anchor
us-east-1
eu-west-1
ap-south-1
Trust anchor
How Settlo will verify tokens issued by LangChain Hub · JWKS auto-rotation enabled by default
Issuer & keys
The iss claim must match this value exactly
JSON Web Key Set endpoint · will be auto-fetched every 24h
Verification config
RS256
ES256
Ed25519
Tokens missing any of these will be rejected at the boundary
Identity mapping
Map LangChain claims to Settlo agent identity primitives · deny by default if claim missing
Which token claim contains the LangChain agent identifier?
sub
deployment_id
agent_id
Custom claim path
Tenant & namespace
Must map to a known Settlo tenant
Synthesized identity for downstream
Claim → property mapping
| Settlo property | Source claim | Transform | Required |
|---|---|---|---|
| agent_id | $.sub | — | yes |
| tenant_id | $.org_id | lookup | yes |
| deployment | $.deployment_id | — | yes |
| env | $.env | lower() | recommended |
| labels | $.metadata.labels | — | optional |
| model | $.model | — | optional |
Allow-list (optional)
Comma-separated · leave blank to allow all deployments under tenant
Test connection
Round-trip a JWT from LangChain Hub through Settlo · verifies trust anchor and mapping end-to-end
Settlo will verify signature, claim mapping, and emit a mock decision
// Header
{ "alg": "RS256", "kid": "lc-prod-2026Q2" }
// Payload
{
"iss": "https://hub.langchain.com",
"sub": "agent_8b2d_payables_router",
"aud": "settlo.acme.tenant_01HY8K3PQR",
"org_id": "acme-corp",
"deployment_id": "dep_a1b2c3",
"env": "prod",
"exp": 1747603600
}
Trust anchor verified · 8 / 8 checks passed
RS256 signature ok · JWKS rotated 2h ago · SPIFFE-ID synthesized to spiffe://settlo/lc/agent_8b2d_payables_router · round-trip 184ms
Sample resolved identity
{
"agent_id": "agent_8b2d_payables_router",
"tenant_id": "ten_8b1d…",
"deployment": "dep_a1b2c3",
"env": "prod",
"spiffe_id": "spiffe://settlo/lc/agent_8b2d_payables_router",
"verified_at": "2026-05-20T14:02:11Z"
}
Review & activate
Tenant Admin co-sign required · once active, LangChain agents can present tokens to /v1/policy:decide
ProviderLangChain Hub
Displaylangchain-prod
Regionus-east-1
AlgorithmRS256
Issuerhub.langchain.com
JWKS…/jwks.json
Agent ID claim$.sub
Tenant claim$.org_id
SPIFFE template…/lc/{{sub}}
Required claimsiss · sub · aud · exp
Allow-listall deployments
Test8/8 passed
What happens next
1Trust anchor written to identity store
~50ms2Tenant Admin notified (FIDO2 step-up required)
co-sign3Provider appears in BYOI Connections as ACTIVE
on co-sign4DecisionDossier-I sealed with provider config hash
async
Step 1 of 5
Add payment connector
Connect a new payment rail · rail-agnostic · Settlo signals, the rail executes · takes ~5 minutes
Choose rail
4 already connected · rail-agnostic catalog covers cards, bank rails, stablecoins, and cross-border
All
US
Europe
India
Cross-border
Stablecoin
United States
F
FedNow
R
TCH RTP
W
Fedwire Funds
Europe
SI
SEPA SCT Inst
SD
SEPA SDD B2B
India
U
UPI Collect
C
UPI Circle
Stablecoin & cross-border
C2
CCTP V2 (Circle)
S
SWIFT pacs.008
+
Custom rail adapter
Display name
Shown in connector list and decision dossiers
Credentials
FedNow participation credentials · HSM-bound · never logged · stored in vault://settlo/conn/fednow/…
Routing & BIC
9 digits · from Federal Reserve participant directory
Settlement account at the Federal Reserve
FedLine Solution
FedLine Direct (VPN)
FedLine Web Plus (API)
Third-party service provider
Stored HSM-bound · never displayed after save
mTLS
FedLine endpoint reachable
mTLS handshake ok · participant account verified active · 96ms round-trip
Routing & caps
When should the routing engine prefer this rail? · what caps apply per mandate?
Priority
Lower number = higher priority · current order: TCH RTP (1) · FedNow (2) · ACH SDA (3) · SWIFT (4)
1 (primary)
2 (secondary)
3
4
When to select
Caps
Fed-set ceiling since 12 Nov 2025
FI-configured override · default $100K
Hard ceiling per signed mandate
Across all mandates routed here
Fallthrough on failure
Webhook & reconciliation
Settlement acknowledgements feed the 3-way match · BAI v2, MT940, camt.053, pacs.002 supported
Inbound webhook
Configure this URL at the FedLine portal as the pacs.002 status destination
RFC 9421 HTTP Sig
Shared secret HMAC
mTLS client cert
Acknowledgement format
Reconciliation
Field used to bind ack to instruction
UETR
EndToEndId
TxId
When ack not received in window
Real-time webhook
Webhook + 4h fallback poll
Polling only
Test & activate
Send a $1.00 test transaction to your own settlement account · verifies submit → ack → reconcile end-to-end
Test transaction
Defaults to your own participant account
Test passed · round-trip 1.4 s
pacs.008 submitted · pacs.002 ACSC received · 3-way match closed · LoR entry sealed
Settlement trace
✓SIO constructed and HSM-signed (Ed25519)
42 ms✓pacs.008 submitted to FedLine
216 ms✓pacs.002 ACSC ack received (status: settled)
1.18 s✓3-way match (mandate ⨯ instruction ⨯ ack) closed
8 ms✓LoR entry & DecisionDossier-E sealed
31 msWhat happens next
Submitting for activation will route the connector config to Treasurer garcia.m for co-sign. Once approved, FedNow will appear in the Payment rails list as ACTIVE and become available for mandate routing within ~5 seconds.
Step 1 of 5