§ 01 / Stack
From mandate to evidence.
Compile → attest → enforce → settle → record. The execution plane is open source and standards-based on purpose; the judgment plane (and the decision record it produces) is the product.
fig.04 / the four-part stackjudgment plane → execution plane → data plane
§ 02 / Surfaces
Four surfaces, in depth.
SURFACE · 01 · OFF-CHAIN
PCE · Policy Compilation Engine
Regulation and mandate compiled into typed, counsel-attested policy bundles. Emits the policyCommit.
SURFACE · 02 · OFF-CHAIN
AIA · Attested Intent Agent
Every decision rendered as a plain-language, quorum co-signed receipt. Verifiable by any supervisor.
SURFACE · 03 · ON-CHAIN
OMA · Open Modular Account
The ERC-7579 control plane: Validator, Executor, Hook. Policy gate, atomic settlement, evidence.
SURFACE · 04 · ON-CHAIN
STN · Sovereign Trade Network
Confidential matching and settlement: three modes, FHE throughout, atomic all-or-nothing.
§ 03 / Properties
Guarantees, not aspirations.
PROP · 01
Compiled policy
Glass-box AI extraction under counsel review turns prose into typed rules, with every predicate pinned to the source clause and the reviewer who approved it.
PROP · 02
Verdicts with reasons
Admit, reject, or escalate in about a millisecond, each verdict carrying the rule IDs and computed reasons that decided it.
PROP · 03
Attested receipts
Human-readable clear-signing receipts co-signed by an independent quorum. Any supervisor can verify them without trusting OnTrade.
PROP · 04
Atomic settlement
Multi-leg, cross-asset batches finalize together or revert together. No settlement-failure tail, no counterparty credit exposure post-match.
PROP · 05
Confidential by encryption
FHE matching and confidential transfers seal positions cryptographically, not contractually. Positions never leak; proofs still verify.
PROP · 06
Evidence by construction
Audit packs assemble themselves from execution, replayable by depositary, auditor, or regulator, each to the extent they are entitled.
§ 04 / Capabilities
What the engine actually does.
Policy compilation
Regulatory corpora (MiCA, MiFID II, AIFMD/UCITS evidence duties) and private mandates compiled into versioned, machine-executable rule bundles.
CAPABILITY · 01
Pre-trade verification
Every intent checked against the full compiled rulebook before settlement: admit, reject, or escalate, with clause-level reasons.
CAPABILITY · 02
Clear-signing attestation
ERC-7730 descriptors pin the policy commit; an ERC-8176 multi-signer quorum signs every approval.
CAPABILITY · 03
Modular smart accounts
ERC-7579 Validator / Executor / Hook modules on a per-mandate account, inside the institution's own trust boundary.
CAPABILITY · 04
Permissioned assets
ERC-3643 (T-REX) identity-bound tokens; transfer eligibility re-checked on every leg, on both sides.
CAPABILITY · 05
MPC signing
Threshold signatures map PM, risk, and treasury onto a quorum policy. No single private key exists to compromise.
CAPABILITY · 06
Confidential settlement
TFHE-sealed amounts and counterparties via confidential transfer standards (ERC-7984); selective disclosure per authorized viewer.
CAPABILITY · 07
Replayable audit packs
Dated audit queries answered from evidence bundles. Same bundle + same intent = same verdict, deterministically, forever.
CAPABILITY · 08
§ 05 / Measured
Measured, not promised.
Baselines from the proof-of-concept series, spanning the full stack: policy gate, atomic execution, and the evidence pipeline, end to end.
POC · 01
0.47s
Median time from trade intent to anchored on-chain proof
POC · 02
1ms
To check one trade against the full compiled rulebook
POC · 03
112
Tamper-proof evidence bundles produced and verified
POC · 04
4/4
Forbidden trades caught and blocked before settlement
§ 06 / Access Testing
Join the waitlist for access testing.
Access is rolling out to a scoped cohort of regulated institutions through structured, milestone-gated pilots. Drop your details and we'll coordinate briefings, mandate intake, and pilot onboarding as your category opens.