Control Fabric
Four components hold the rules, the evidence, and the record, in continuous dialogue with execution on every rail.
Each component is independently auditable. Together they decide what may move, under whose authority, and with what evidence.
01 · The rulebook is data, not prose.
Scheme, jurisdiction, rail, network, member: five levels of rules, held as data and applied in cascade to every payment the fabric touches.
Scheme Rules & Rulebook
Every rule versioned. Every amendment recorded.
02 · Deterministic rules enforced at runtime.
Limits, thresholds, corridors, currencies, time windows, risk appetite, and jurisdiction rules run deterministically against every payment.
A breach is not flagged. It does not proceed.
Policy Engine
A status change holds warehoused payments in real time.
03 · A zero-trust vault for the evidence behind every payment.
Identity, incorporation, source of wealth and funds, and beneficiary documents, classified and verified automatically, with member consent captured at onboarding.
Trust Vault
Expiry and version monitoring, with renewal workflows before documents lapse.
04 · Every decision writes its own record.
Rule, version, inputs, outcome, timestamp: recorded for every decision the fabric takes, at the moment it happens.
Evidence & Audit Ledger
Hash-chained and tamper-evident.
The rulebook is data, not prose.
Scheme, jurisdiction, rail, network, member: five levels of rules, held as data and applied in cascade to every payment the fabric touches.
Deterministic rules enforced at runtime.
Limits, thresholds, corridors, currencies, time windows, risk appetite, and jurisdiction rules run deterministically against every payment.
A breach is not flagged. It does not proceed.
A zero-trust vault for the evidence behind every payment.
Identity, incorporation, source of wealth and funds, and beneficiary documents, classified and verified automatically, with member consent captured at onboarding.
Every decision writes its own record.
Rule, version, inputs, outcome, timestamp: recorded for every decision the fabric takes, at the moment it happens.
Know Your Agent
When software agents initiate, validate, and reconcile payments, the question is not whether they can move money but under whose rules. CPN treats them as principals: identified, mandated by a documented principal, and bounded by the same fabric as every payment.
An agent is only as trusted as its mandate.
Every agent-initiated payment passes the same control surface as a human one: identity, policy, limits, approvals, audit.
Every agent is registered, credentialed, and bound to a named operator and principal. No shared credentials, and interoperable with emerging agent identity protocols.
Authority is delegated from a KYB'd principal and held in the Trust Vault: principal, scope, limits, expiry. Re-approval workflows keep it current. An agent holds no standing of its own.
Standing, mandate, and policy are checked at every stage. A request outside scope does not proceed. Human approval thresholds and four-eyes apply to agent actions unchanged.
Every action is recorded against its mandate, with immutable audit per decision. Revocation is instant and halts in-flight instructions.
Every agent is registered, credentialed, and bound to a named operator and principal. No shared credentials, and interoperable with emerging agent identity protocols.
Authority is delegated from a KYB'd principal and held in the Trust Vault: principal, scope, limits, expiry. Re-approval workflows keep it current. An agent holds no standing of its own.
Standing, mandate, and policy are checked at every stage. A request outside scope does not proceed. Human approval thresholds and four-eyes apply to agent actions unchanged.
Every action is recorded against its mandate, with immutable audit per decision. Revocation is instant and halts in-flight instructions.
Two payments compared side by side.
Without CPN
One leaves unchecked and freezes at the bank.
Sent
The payment leaves on the strength of whoever keyed it.
Screened downstream
Compliance runs at the bank, after funds are committed.
Frozen
The payment stops. The investigation starts. The counterparty waits.
Days of investigation to recover a payment that should never have left.
With CPN
One clears every check before it moves, then attests at delivery.
Standing at capture
The principal, human or agent, is verified before the instruction exists.
Evidence at validation
The Trust Vault confirms the documents behind the payment are current.
Policy at routing
Limits, corridors, screening, and time windows enforced before a rail is chosen.
Release at approval
Thresholds and four-eyes approval apply, then the payment releases to the rail.
Attestation at delivery
The Evidence & Audit Ledger closes the record: rule, version, inputs, outcome, timestamp.
The payment arrives once, clean, with its audit trail already written.