Architecture Overview

Settlement Process

Obligations are recorded throughout the settlement window, compressed through four layers of netting (bilateral, per-corridor multilateral, cross-corridor, and residual carry-forward), priced at oracle-determined FX rates, and settled as consolidated net positions.

Sub-threshold net positions (<$100K default) carry forward to the next window (max 3) using a CHIPS-model approach, expanding the netting pool across windows for additional compression.

Chain Architecture

The Settlement Computer runs on the Lagrange chain — a dedicated Avalanche L1 with permissioned validators. All settlement logic is implemented as consensus-level native precompiles, not smart contracts. This provides deterministic gas costs, guaranteed execution, and prevents front-running.

Native Precompiles

All settlement logic runs at the consensus layer as native Go precompiles — not EVM smart contracts. This provides deterministic gas costs, prevents front-running, and enables cryptographic operations that would be prohibitively expensive in the EVM.

• 0x0301Netting Engine — multilateral + bilateral netting with O(n) complexity
• 0x0302Oracle — deterministic FX rate feeds from AFXO
• 0x0303Compliance — audit trail with sanctions screening hooks
• 0x0304Settlement — non-transferable institutional settlement claims
• 0x0305Cross-Corridor — netting across corridors sharing currencies
• 0x0306Token Firewall — institutional token controls and policy enforcement
• 0x0307Attestation — counter-attestation for settlement finality
• 0x0308Corridor Manager — multi-tenant corridor lifecycle with 5-level RBAC
• 0x0309Validator — permissioned validator staking and management
• 0x030APQ-Auth — ML-DSA (FIPS 204) post-quantum authentication
• 0x030BPrivacy — Qedis integration, Pedersen commitments, delegation registry

Privacy — Powered by Qedis

The Settlement Computer operates under a perpetual licence for Qedis — the most advanced privacy layer purpose-built for institutional applications in blockchain. Verifiable confidentiality with no master key, no trusted hardware, and no trusted setup. Post-quantum by design.

Qedis provides a substrate-agnostic hybrid privacy architecture. Amounts are protected by Pedersen commitments (BN254) enabling homomorphic netting on encrypted values. Metadata is encrypted with AES-256-SIV. Key distribution uses Shamir's Secret Sharing. Transparent post-quantum proofs via FRI-STARK, selective disclosure via BBS+ signatures, and privacy-preserving addressing via stealth addresses.

Tiered view key model with 5 access levels: Governance (master), Admin (corridor), Participant (own data), Delegate (scoped, time-limited, revocable), Observer (aggregates only). Participant-sovereign delegation — participants control who sees their data via grantViewAccess / revokeViewAccess with full on-chain audit trail.

Post-Quantum Cryptography

Full post-quantum stack deployed via cloudflare/circl — ML-DSA for signatures, ML-KEM for key encapsulation, and hybrid classical+PQ modes for regulatory-aligned migration (CNSA 2.0 / BIS 158). Real post-quantum cryptography, not simulated.

Multi-Tenancy

All eight Settlement Computer products coexist on a single chain with per-corridor isolation. Each corridor has independent configuration, settlement windows, privacy levels, and compliance rules.

ISO 20022 CBPR+

Born-native ISO 20022 CBPR+ — not a translation layer. Level 1 (schema conformance) and Level 2 (SWIFT usage guidelines) validation passed across all 5 message types. PayNet provides AI-powered translation (Haiku 4.5 / Sonnet) for non-ISO inputs.

Design Principles

• Non-Custodial

  The Settlement Computer coordinates settlement instructions but never holds funds. All regulated activities remain with licensed institutional partners.

• Corridor Isolation

  Each corridor operates independently with its own settlement windows, participant lists, privacy levels, and compliance rules. Failures in one corridor do not propagate.

• Deterministic Execution

  FX rates are determined at window close via AFXO oracle feeds, not executed in market. Oracle prices are locked, ensuring no slippage or front-running.

• Consensus-Level Settlement Logic

  All settlement operations run as native Go precompiles, not EVM smart contracts. This guarantees deterministic gas costs, prevents MEV extraction, and enables cryptographic operations infeasible in the EVM.

• Technology Service Provider

  NETTA is a non-custodial coordination protocol — not a bank, PSP, e-money issuer, or remittance company. We never hold fiat, never custody user funds, and never execute settlement. All regulated activities are performed exclusively by licensed partner institutions.

Intellectual Property

11 U.S. patent applications pending (~737 claims) covering the Settlement Computer, cross-currency multilateral netting, agentic clearing, Sharia-compatible settlement, tokenized asset DVP netting, digital currency netting, tokenized commodity settlement, cryptographic privacy, post-quantum authentication, and mandate-bound counter-attestation.