Trust Architecture
It ensures money is only allowed to move when conditions are verified.
Granullo operates as a non-custodial, non-executing verification layer that governs intent before settlement occurs in external systems.
Hard Boundaries
Architectural decisions, not disclaimers.
Does not hold funds
No access to, control over, or custody of any funds at any point.
Does not execute payments
Settlement is performed by licensed banking partners. Granullo issues readiness signals.
Does not replace banks
Operates alongside existing financial infrastructure. Governs conditions; banks govern execution.
Does not act as intermediary
No funds pass through Granullo. Verification layer only.
Does not override financial systems
Issues readiness signals. External systems decide whether and when to act.
Does not make decisions
Surfaces verified facts. Does not approve, deny, recommend, or advise.
Settlement Architecture
Granullo determines readiness. Banks execute settlement. No funds pass through Granullo.
Granullo
Verifies
Evaluates conditions. Records evidence. Determines readiness.
Readiness signal
Banking Partner
Executes
Holds funds. Processes settlement. Maintains custody.
Funds reside with licensed banking partners at all times. Granullo has no access to or control over fund balances.
When all conditions are satisfied, Granullo sends a settlement-ready signal. The banking partner decides whether and when to execute.
Fail-Closed
Default state: blocked. Money does not move until every condition is independently satisfied. No exceptions.
The system never assumes completion. The system never proceeds on partial verification. When the system cannot fulfill its verification role, it does not silently degrade to a pass-through. Failure is loud, visible, and logged.
Epistemic Policy
Granullo does not assume certainty. It reveals where conditions are not yet met.
Ambiguity is detected. When a condition cannot be fully evaluated, the system identifies the gap.
Ambiguity is surfaced. Every uncertain element is recorded with context, not hidden in processing.
Ambiguity is never hidden. The system does not assume, infer, or probabilistically guess.
Resolution requires evidence. Ambiguity flags cannot be dismissed without supplying the missing proof.
Unresolved ambiguity reduces integrity. The system reflects uncertainty in its assessment, never masking it.
Structural Protection
Misuse requires override capability. No single actor has override capability.
No hidden overrides
Every action requires multi-party consensus. No actor bypasses structural constraints silently.
No silent bypass
Every verification step is recorded. Skipping a step is architecturally impossible.
No invisible logic
All rules and conditions are declared at commitment. Nothing applied retroactively.
No post-facto manipulation
Audit trails are append-only. No record altered, deleted, or resequenced.
Auditability
Every action generates records that are inspectable, explainable, and reproducible.
Commitment records — who committed to what, under which conditions
Condition definitions — every requirement declared at program creation
Evidence requirements — what proof is needed before progression
Verification states — the status of each condition at every point in time
Audit trails — every action, by whom, when, and with what evidence
System Invariants
Non-configurable. Non-overridable. No exceptions.
Evidence before progression — no condition is satisfied without proof
Fail-closed by default — the system blocks until conditions are met
No silent degradation — failure is visible, recorded, and escalated
External settlement only — Granullo never moves funds
Commitments must be verifiable — vague conditions are rejected
Audit trails are immutable — nothing is deleted or altered
Multi-party verification — no single actor controls outcomes
Ambiguity halts progress — uncertainty is surfaced, not assumed away
Segregation is structural — no executive override path exists
Every state transition is logged — actor, timestamp, evidence, reason
Governance Model
Granullo governs everything before settlement.
Granullo
Granullo
Granullo
External
Settlement boundary
Granullo does not change how money moves.
It changes when money is allowed to move.
Questions about our trust architecture? Talk to us