Evidence
Built, not proposed.
Everything on this site runs on a four-validator permissioned network today, with the central bank's roles simulated. The NBG sandbox tests the supervisory and settlement configuration under the design approved by the NBG.
Release candidate facts
- Release candidate, frozen for third-party audit and formal verification
- v1.0.0-rc.1Release candidate, frozen for third-party audit and formal verification
- Conformance cases: TypeScript, Solidity, Go and Rust harnesses
- 1,083Conformance cases: TypeScript, Solidity, Go and Rust harnesses
- Currencies on two shared ledgers, settled against each other at the same instant
- 2Currencies on two shared ledgers, settled against each other at the same instant
- Committed confirmations on every receipt, one from the central bank
- 3 of 4Committed confirmations on every receipt, one from the central bank
Tokenize and prove
A core posting becomes a token in one event; the minute closes; the commitment and proof land on the ledger; the verdict is VALID with a difference of zero, on the supervisor's own node.
Settle, at any hour
Two issuers on two licenses — a bank's deposit tokens and a payment institution's safeguarded funds — settle with three committed confirmations on the receipt. A customer onboarded on another bank's identity attestation; a revocation refused on the class clock.
Cross-border and securities
Lari and pounds settle both sides at once on two ledgers; a bond delivers against payment in the same step; escrows provably never outlive their deadlines, tested under partitioned networks.
When something goes wrong
A missing proof degrades, then halts issuance by rule; resumption needs two human signatures. Mutation testing found and closed the untested paths in the breaker.
If a bank fails
Frozen by a signed order; the last verified fingerprint becomes the snapshot; customers transferred to another bank; both banks prove valid; the record acknowledged by the supervisor and stamped on the ledger.
Assurance
Pinned toolchain, contract-size gate, storage-layout gate, static analysis at zero findings, invariant suites for supply, atomicity and the halt, a threat model and an audit scope — all in the repository at the tagged release.
Ask for the transcripts.
The Besu transcripts, the rehearsal record, the conformance report and the audit scope are available to prospective members and supervisors under NDA.