When the ledger commits, the trade is done — legally and technically final. There is no clearing lag, no provisional state, and no reconciliation window in which the outcome can still change.
A settled transaction is irrevocable at the moment of commit, not after a downstream process confirms it.
The instant a transaction is written to the ledger, ownership has changed. There is no separate settlement step that runs later against the committed record.
Balances are not marked pending or available-for-credit. A credited balance is a settled balance, spendable immediately without waiting for a clearing cycle.
There is no unwind, reversal, or claw-back primitive. A correction is a new, separately authorized transaction with its own record — the original settlement stands.
Finality does not wait on matching two institutions' books. The single shared ledger is the record of truth, so there is nothing to reconcile after the fact.
Immutability is enforced cryptographically, so finality cannot be quietly rolled back by any operator.
Each ledger entry commits to the hash of its predecessor. History can be extended but not edited; rewriting a past settlement invalidates every block after it.
Any attempt to alter a finalized entry breaks the hash chain and is immediately detectable by anyone verifying the chain, including the asset's owner.
Transactions have a definite, recorded order. Finality includes the position of a settlement in the sequence, so two conflicting spends cannot both be final.
Every committed transaction carries a post-quantum signature (ML-DSA-65) from its authorizer, binding finality to a specific, verifiable act of consent.
The rail is built so that the moment of commit can be the recognized moment of legal transfer.
The ledger fixes an unambiguous instant at which title passes. That single point anchors legal finality rather than a range of possible clearing times.
Because the sovereign owner holds the keys and operates the rail, the point of finality sits inside its own legal and regulatory perimeter, not a foreign intermediary's.
The append-only record gives regulators and courts a verifiable basis to treat a settlement as final, evidenced by cryptographic proof rather than institutional assertion.
With finality at commit and no provisional window, a counterparty's later insolvency cannot reach back to reverse a completed settlement.
Because settlements do not reverse, error handling shifts from unwinding to forward correction.
Errors are caught as pre-commit rejections, not post-settlement reversals. A transaction that would violate a rule never becomes final in the first place.
A mistaken but valid settlement is remedied by a fresh, separately authorized offsetting transaction. The audit trail shows both the error and its correction explicitly.
Disputes reference an immutable, timestamped, signed entry. Parties argue over intent and terms, never over what the ledger actually recorded.
Since each settlement is independently final, there is no batch netting run whose failure could retroactively unsettle a day's trades.