Approach

6 layers. One route to the money.

These are the 6 places an institution's money can be reached. An attacker does not break one of them. They walk along them, and every step is configured correctly.

Identity

who you are

Okta, Entra

Cloud

where the keys live

AWS, KMS

Code

how code ships

GitHub, CI

Policy

what is allowed

custody rules

Approver

what authorizes movement

MPC, HSM

Money system

wallet · vault · account

contract roles

The route the money takesthe money

Every large loss walked this rail - crypto is just where you can see it. A bank’s money sits behind the same six, and not one break was needed.

One real path, crossing 4 of the 6

A build identity › changes co-signer code › CI/CD deploys it › a broad rule matches › MPC signs › funds move

No exploit. No malware. Six correct systems and one route nobody had drawn.

Where we sit

They get one second. We get the months.

Transaction screening is a real and well-funded category, and it is not what we do. Same route to the money - a different second on it.

A change ships

a new IAM role, a redeployed co-signer

A path exists

and nobody knows it is there

Weeks or months pass

the path stays open

A transaction is proposed

valid signatures, policy satisfied

The money moves

MoveProof

Continuous. Nothing has to exist yet.

We find the path while it is still only a path, and hand over the smallest change that closes it.

Transaction screening

A transaction has to exist before it can be judged. That layer is funded and mature. The months before it are not.