Non-custodial digital-currency rails for central banks. A state issues, verifies, and settles its own currency — on infrastructure it alone controls, and keys only it holds.
A multi-tenant engine that lets a central bank issue and account for its currency, with monetary policy enforced in code.
One engine serves the central bank, commercial banks, and citizen wallets — each with native cryptographic separation of roles and balances.
→The state retains sole custody of the root signing keys. No vendor backdoors, administrative overrides, or developer-level access.
→Over-issuance is refused at the ledger. The protocol mathematically rejects transactions that violate policy, whoever requests them.
→A hash-chained ledger, unbroken back to genesis — no entry can be altered or inserted without breaking the chain.
→Money that reaches every account holder — programmable where policy allows, private where citizens expect it.
Self-custodied or hosted wallets, with tiered identity, limits, and offline capability.
→Commercial banks and payment providers settle directly on the sovereign rail.
→Conditional, scheduled, and purpose-bound transfers — enforced by the ledger, not an app.
→Privacy and limits calibrated to policy and KYC level, from low-value anonymous to fully identified.
→A national currency has to work when the network doesn't.
Sovereign, but not isolated — connected to the rails money already moves on.
Oversight preserved, privacy calibrated — auditable end to end. Open any control for the full model.
Identity and anti-money-laundering enforced at onboarding and transfer.
→OFAC and UN screening with fuzzy matching and PEP detection.
→Calibrated privacy that preserves regulatory oversight.
→Full, tamper-evident audit trails for supervisors and reporting.
→From a controlled pilot to national scale, inside the country's borders.
Deployed inside the jurisdiction, with keys held by the state and data that never leaves.
→A staged path from controlled pilot to national rollout, with hardening at each step.
→Cryptographic separation between deployments and tenants.
→