string
THE DUAL LEDGER

One batch.
Two reconciled sides.
A close you can sign.

Every posting has two sides that cannot drift apart. In issuing it's the authorization side against the settlement side; in acquiring it's the merchant leg against the scheme leg. The cycle closes, and pays, only when every open item reconciles. Net is a derived sum, never a mutable scalar. Running today, pre-GA: every close signs, and any day replays to the same book.

Pre-GA · taking design partners — see what runs today

ATM · API · THE SAME LINE

Money movement on every rail

From a PIN on a keypad to a pacs.008 on the wire. Every rail posts to one ledger, and reconciles before the day closes.

SPEIinstant · running
FedNowinstant · running
Visacard · in certification
Mastercardcard · in certification
Amexcard · in certification
ACHa2a · built
RTPinstant · built
Pixroadmap
SEPA Inst.roadmap
UPIroadmap

SPEI and FedNow run today. Visa · Mastercard · Amex in scheme certification; ACH · RTP built. Pix · SEPA Instant · UPI on the roadmap.

DUAL-LEDGER STRUCTURE

Issuing · auth ↔ settlement

authorization holds reconcile to
the cleared, posted settlement

Acquiring · merchant ↔ scheme

merchant capture reconciles to
the network settlement · pacs.002

Fail-closed close gate

closes only when both reconcile
bad items carry forward, never absorbed

Signed & replayable

a signed daily attestation
deterministic across a 540-day tail

Late truth reconciles

a corrected later event drives
Exception → Matched → Reconciled · no touch

Every delta is a posting

tips · partial capture · DCC · surcharge
fee true-up, never a mutated scalar

dual ledger · close 0114sample
merchant legopen+$40.74
scheme legpacs.002−$40.74
matchitem-by-item2 / 2 ✓
closefail-closedsigned · $0.00

illustrative · two legs from one batch, matched item-by-item, signed at close

GET STARTED

Start with a close you can sign.