Commercial banks and payment providers do not sit beside the sovereign rail — they settle on it. Institution accounts give regulated entities direct, final settlement in central-bank money.
The sovereign rail collapses the gap between a payment instruction and irrevocable settlement.
A licensed institution holds an account that settles directly on the ledger, so interbank transfers move as final central-bank money rather than as claims netted at end of day.
Value moves in a single ledger transition that either completes in full or not at all. There is no window in which one leg has moved and the other has not, removing the settlement risk that batch systems carry.
Where a payment is paired with an asset — a tokenized bond, a foreign-currency leg — both legs bind into one atomic operation, so an institution never delivers without receiving.
Each settled transition is anchored into the tamper-evident hash chain, giving the institution a cryptographic record of finality that no later state can silently contradict.
Institutions see and shape their position continuously rather than reconciling against a delayed statement.
The institution's settled balance is queryable at every moment, so treasury operates against actual central-bank money on the rail rather than a projected intraday estimate.
Institution accounts are designed to interoperate with the central bank's reserve and RTGS environment, so value can move between the retail rail and wholesale reserves under central-bank rule.
Debit caps and net-position limits are enforced at settlement, letting the central bank bound an institution's exposure on the rail without pausing the institution's ordinary flow.
Because both counterparties settle against one shared ledger state, there is no bilateral reconciliation to perform — the record either matches by construction or the transition never committed.
Access is provisioned as cryptographic capability tied to the institution's regulatory standing.
An account is opened only under a grant from the central bank tied to the institution's licence class, and the licence class determines which operations the account may sign.
Signing authority is held in the institution's own hardware security modules using ML-DSA-65 keys, so the institution — not the platform operator — authorizes its own movements.
An institution delegates scoped signing authority to named operators or services, each delegation recorded on the ledger, so internal separation of duties is enforced and auditable.
The central bank can suspend or revoke an institution's grant in a single signed transition, freezing new authorizations while preserving the complete history of what the institution did.
Regulatory oversight is a native capability of the rail, not a downstream data extract.
Every instruction, authorization, and settlement is a signed, ordered ledger entry, so the supervisor's view is the primary record rather than a reconstructed report the institution assembles.
Cross-institution transfers carry the originator and beneficiary information required by transfer rules as structured data bound to the payment, not as a separate message that can drift from the settlement.
Sanctions and watch-list checks are evaluated as a condition of the transition, so a screened-out payment never settles rather than being clawed back after the fact.
All institution and settlement data resides within the nation's jurisdiction on infrastructure the state controls, so supervision never depends on data held offshore.