Architecture
Granullo transforms plain-language intent into a governed structure of commitments, evidence requirements, verification rules, and settlement readiness. No money moves until every declared condition is independently verified. The architecture exists to prevent money from moving on ambiguity.
Every program passes through four structural phases. At each phase, the system evaluates what enters, what it creates, and what can block progression.
Enters
Natural-language description of what money should do
Creates
Structured intent record with declared purpose, parties, and constraints
Evaluates
Completeness of declaration — are all required fields present?
Blocks progression when
Ambiguous purpose, missing parties, undefined constraints
Enters
Validated intent record
Creates
Bound commitment with conditions, evidence requirements, and verification rules
Evaluates
Structural integrity — are conditions specific, measurable, and independently verifiable?
Blocks progression when
Vague conditions, unverifiable requirements, single-actor override paths
Enters
Evidence submitted against bound conditions
Creates
Verification state for each condition — met, unmet, or contested
Evaluates
Evidence validity — does submitted proof satisfy the declared requirement?
Blocks progression when
Missing evidence, expired timestamps, conflicting submissions, failed cross-checks
Enters
Fully verified commitment with 100% integrity score
Creates
Settlement release signal to external banking infrastructure
Evaluates
Final state check — are all conditions met, all rules satisfied, all parties confirmed?
Blocks progression when
Any unmet condition, any ambiguity flag, any contested evidence
Granullo is not abstract infrastructure. For every governed program, the system produces concrete, auditable artifacts that determine whether money is allowed to move.
Every governed program is represented internally as a commitment object. This is the canonical structure that the system evaluates, tracks, and uses to determine settlement readiness.
BLOCKED is the default state. Every commitment begins there and remains there until every condition is verified with evidence. The system never guesses, never assumes, and never progresses on incomplete information.
Commitment created from validated intent. All conditions bound. State: BLOCKED.
System tracks which conditions have evidence and which do not. No progress without proof.
Evidence submitted against one or more conditions. Each submission timestamped and recorded.
Verification rules applied to submitted evidence. Deterministic — same evidence, same result.
Condition marked as met (evidence sufficient) or remains unmet (evidence insufficient or contested).
All conditions verified. Integrity score: 100%. Commitment released to external banking rails.
This is where ambiguity gets surfaced. Evidence is not optional metadata — it is the mechanism that determines whether a condition is satisfied and whether money is allowed to move.
Any timestamped, attributable artifact that directly addresses a declared condition. Documents, records, sensor data, attestations, cross-referenced entries. The type is defined at condition binding — not at submission time.
Evidence is submitted against a specific condition within a specific commitment. It cannot be generalized across conditions. Each submission is recorded with timestamp, source, and hash.
Verification rules are deterministic. ALL requires every condition to be met. TEMPORAL checks evidence recency. MULTI_PARTY prevents single-actor override. FAIL_CLOSED halts on any ambiguity. Same evidence always produces the same result.
Missing evidence is not a warning — it is a structural block. The system cannot infer, assume, or approximate. If proof is absent, the condition is unmet, the commitment is blocked, and settlement cannot occur.
The system is designed to prevent money from moving when there is insufficient evidence for it to move. This is not a safety feature — it is the core design principle.
Every commitment begins blocked. The system does not assume progress. It does not auto-approve. It does not time out into approval. Blocked means: the evidence required to satisfy the declared conditions has not been provided.
This boundary is absolute. Granullo's responsibility ends at validation. Settlement is always external.
Granullo governance layer
External execution layer
Granullo does not hold funds. Granullo does not execute payments. Granullo determines whether a program is ready for settlement.
The intelligence layer does not make decisions. It surfaces information that makes the state of commitments legible to operators. It explains why things are blocked and what would unblock them.
When a program declaration is missing required fields, undefined on scope, or ambiguous on parties — the system identifies the gap before conditions can be bound.
For every condition, the system knows what evidence is required, what has been submitted, and what is still missing. This is surfaced in real-time to all authorized parties.
When submitted evidence is unclear, contradictory, or insufficient — the system flags the ambiguity. It does not resolve it. It makes it visible and halts progression.
For every blocked commitment, the system explains exactly why it is blocked: which conditions are unmet, which evidence is missing, which rules are failing.
Inside every governed program, these entities are structurally connected. They cannot be separated, individually modified, or silently removed.
Structural relationship graph
These are not guidelines. They are structural constraints enforced at every layer of the system. They cannot be configured away.
When evidence is incomplete, ambiguous, or contested — the system halts. No money moves forward.
The system does not resolve uncertainty. It makes uncertainty visible and prevents progression.
No condition can be marked as met without independently verifiable proof. No exceptions.
Granullo determines readiness. Banks, payment rails, and treasury systems execute settlement.
Every state change, every flag, every contested evidence is recorded. Nothing happens invisibly.
Any actor with access can trace the full path from intent to outcome. The trail is always complete.
Granullo does not move money.
It ensures money is only allowed to move when intent has become verifiable, governed, and externally ready for settlement.