CFO dashboard
Enterprise spend, exposure, and governance posture across all agentic payment activity · live
Can I trust what's moving right now
Drillable to the full evidence pack for any transaction
Value at risk
$2.15M
Exceptions pending
19
Match rate
99.98%
Limit utilization
74%
Agent spend QTD
$4.21M
Committed exposure
$2.5M
Open P2P commitments
$1.62M
Dispute recovery
94.1%
Active mandates
412
Audit completeness
100%
Action items
Tasks assigned to you · distinct from approvals awaiting signature
Approve BR/DOA v2026.08
CFO + GC co-sign required to supersede v2026.05
Ratify Q2 access review
Quarterly segregation-of-duties attestation
Sign off board pack export
Material activity + governance posture for board
Remediate governance score
1 operator (chen.l) FIDO2 setup pending · −1.6 pts
Approval breakdown & kill switch
What decided itself vs. what needed a human · and who can stop money moving right now
91%
Straight-through · 1,292 of 1,418
Escalated to human · 126
Escalated mostly for: over per-tx cap (58%), new counterparty (24%), policy-gate flag (18%)
Kill switch coverage
✓287 of 287 agents have an instant-pause control bound to their identity
100%✓Last pause verified: ap-automation-7f4c, money movement stopped in 41ms
today 14:02Exceptions over time
Blocked, held, or flagged · declining as policy matures
Jun '25Sep '25Dec '25Mar '26now
Exception rate down 38% since Q1 as agent caps and vendor allow-lists matured. Straight-through rate rose from 79% to 91% over the same period · this is the trend that justifies raising an agent's mandate.
Agent spend by month
Settled USD-equivalent across all rails · 12-month trailing
+18.2% QoQ
Jun '25Sep '25Dec '25Mar '26now
Procurement
$1.84M
+22%
SaaS / services
$1.12M
+14%
Logistics
$0.71M
+9%
FX / treasury
$0.54M
-4%
Exposure posture
Where capital is at risk right now
68%
Committed drawn · $1.71M
Open commitment · $0.79M
Unsettled ASYNC · $0.25M
Concentration risk
ModelCo largest counterparty
$1.2M / $2.5M cap
Globex 2nd
$0.8M / $1.5M cap
Initech 3rd
$0.5M / $1.2M cap
Awaiting your co-sign
Tier-1 actions that cannot proceed without CFO FIDO2 signature
New BR/DOA version v2026.08
Supersedes v2026.05 · requires CFO + GC co-sign · raises Treasurer cap to $10M
n/a
due today
Operator entitlement · garcia.m → $10M
Treasurer tier-2 cap increase · escalated from Governance
$10M
new cap
ModelCo mandate M_8b1d…7c4a
$600K/yr cap exceeds Op-Threshold · from New Mandate wizard
$600K
/ yr cap
FIDO2 step-up required for each signature
Governance posture
Board-level control health
✓Every decision sealed to immutable dossier
100%✓BR/DOA current · all signers FIDO2-enrolled
14/14✓Segregation of duties enforced (maker/checker)
ok!1 operator FIDO2 setup pending (chen.l)
−1.6✓Quarterly access review on schedule
Q2 ✓✓Compliance map: 6 frameworks mapped
SOX, PCI…Reconciliation status
Instruction vs. rail confirmation vs. ledger
3-way match rate
99.98%
2 unmatched of 18.8K
Duplicate payments blocked
118
QTD · idempotency catches
Cash impact today
-$218K
142 instructions cleared
Unmatched aged >48h
1
Initech proc-hours
Reversal & recourse
By agent and counterparty · recourse status
| Agent / counterparty | Reversal rate | Amount | Recourse |
|---|---|---|---|
| ap-automation-7f4c · Globex | 0.31% | $1,400.00 | RECOVERED |
| treasury-sweep-2a91 · various | 0.18% | $8,420.00 | PENDING |
| supplier-pay-9 · mixed rails | 0.09% | $640.00 | WRITTEN OFF |
0.21% blended · well under NACHA 0.5% ceiling
All returns →Audit & evidence
What you'd hand an auditor or the board, in under a minute
✓One-click evidence pack: mandate, policy evaluation, token, settlement proof, reversal history
any transaction✓Bitemporal ledger: what we believed at the time vs. what we know now
never overwritten✓Policy change log: who changed which rule, when, and what it affected
37 active policiesAgent vs. human baseline
The comparison that turns "risk" into "headcount"
| Metric | Agent-governed | Manual AP baseline |
|---|---|---|
| Error rate | 0.02% | 0.4% |
| Cost per transaction | $0.38 | $4.20 |
| Cycle time · invoice to settled | 4.2h | 6.1d |
| Mean time to detect anomaly | 41ms | 2-3d |
Baseline from Acme's pre-Settlo manual AP process
Material activity
Events above your attention threshold ($50K materiality)
⎔
$83,200 payment denied · ap-automation-7f4c exceeded daily operator cap; auto-blocked and logged
today 14:02 · dossier sealed
◇
Macquarie mandate suspended · FX drift breached tolerance; A$120K/mo paused pending Treasury review
today 11:18
▣
$182K disputes recovered this quarter via CE 3.0 compelling evidence across 14 cases
QTD
◆
New $600K/yr ModelCo mandate compiled from uploaded MSA, awaiting your co-sign
yesterday 16:40
⬣
Quarterly true-up · CMT_modelco_2026 tracking +8% above commit, on pace to meet EDP
2 days ago
Spend analytics
Actual
Budget
Forecast
Spend vs budget & forecast
Cumulative settled spend against board-approved budget, with end-of-period projection
On pace to exceed budget by 4.2%. Projected close $4.82M vs $4.63M budget · driven mainly by procurement (+22% QoQ). Consider a mid-quarter cap review.
Spend by mandate type
Composition over the trailing 6 periods
UNIT_RATE
WATERFALL
SUBSCRIPTION
FIXED / ASYNC
Budget burn by category
Spend against per-category budget envelope this period
Procurement$1.84M / $1.70M
SaaS / services$1.12M / $1.30M
Logistics$0.71M / $0.95M
FX / treasury$0.54M / $0.68M
Procurement is over its envelope at 108% with 8 days left in the period. The other three categories have headroom; reallocation could offset.
Counterparty concentration
Share of total spend · top 5 vendors
ModelCo is 29% of spend · the largest single counterparty. Concentration is healthy (HHI 0.18), but ModelCo crossing 35% would warrant a second-source mandate.
Treasurer dashboard
Liquidity, operator caps, and co-signing queue across all settlement rails · live
Co-sign queue
7
Settled today
$1.71M
In-flight
$284K
FX drift alerts
1
Forecasted commitment outflow
$1.62M
Return rate
0.21%
Operators
11
Action items
Tasks assigned to you · distinct from approvals awaiting signature
Re-confirm Macquarie FX mandate
A$120K/mo suspended on drift breach · needs decision
Raise smith.j daily cap
Hit 98% three days running · escalations queuing
Month-end liquidity sign-off
Confirm settled vs in-flight before cutover
Review new SEPA rail adapter
Pending PlatEng + CISO approval to activate
Co-signing queue
Instructions and mandates routed to you for Tier-2 signature
treasury-sweep-2a91 · step-up payment
x402 / Payload · over $25K op-threshold · watsonx agent
$48,500
step-up
basf-spot-fx-1 · FX settlement
AP2 / Payment · EUR cross-border · rate locked 11:02
$62,940
2h SLA
supplier-pay-9 · vendor payout batch
ACP / DelegTok · 14 line items · Native SVID
$31,200
batch
5 routine instructions
All under $25K · within standing operator caps
$18,640
combined
FIDO2 step-up required over $25K
Operator caps
Daily utilization across your delegated operators
smith.j Asst Treasurer
$2.0M / $2M day
okafor.n AP Manager
$218K / $250K day
patel.a Op · EMEA
$1.1M / $2M day
kim.s Op · APAC
$0.7M / $2M day
chen.l Op · AMER
$0 / $250K day
smith.j at 98% of daily cap
Further instructions will queue for your co-sign. Consider a temporary cap raise.
Settlement by rail
Today's settled volume across connected payment rails
$1.71M
ACH (NACHA) · $752K · 44%
SEPA SCT · $462K · 27%
FedNow · $308K · 18%
Stripe Invoicing · $188K · 11%
7-day settled volume
MonTueWedThuFriSattoday
FX & drift watch
Cross-currency mandates and rate tolerance
◈
Macquarie A$120K/mo SUSPENDED · AUD/USD drift exceeded ±2% tolerance band; awaiting re-confirmation
today 11:18 · M_0c4f…1ea2
◇
BASF €80K/mo within band · EUR/USD locked at 1.0842, drift 0.3%
M_5c83…2e7f
⬣
Razorpay ₹50L/mo · INR settlement on track, next true-up T+2
M_b22d…f413
Tolerance bands
AUD/USD±2.0% · breached
EUR/USD±1.5% · ok
INR/USD±2.5% · ok
Liquidity & flow analytics
Volume
Count
Settlement throughput
Daily settled volume across all rails · trailing 14 days
Throughput up 14% week-over-week. Peak settlement days cluster Tue to Thu; Monday and weekend volume is roughly half. No rail is approaching its daily ceiling.
Settlement latency
Instruction → confirmed settlement, by percentile
P50
1.4 s
P90
3.1 s
P95
4.2 s
P99
8.7 s
By rail (P95)
FedNow instant
0.8 s
ACH (NACHA)
5.1 s
SEPA SCT
3.4 s
Stripe Invoicing
6.2 s
P95 of 4.2s is well under the 30s SLA. The P99 tail is ACH-driven; routing latency-sensitive flows to FedNow would tighten it.
Operator cap utilization
Daily peak utilization % · operators × weekday
MonTueWedThuFriSatSun
<50%
50 to 85%
>85%
smith.j repeatedly peaks above 85% mid-week. A standing cap increase or load-shift to patel.a would reduce co-sign escalations on Tue to Thu.
Return rate vs threshold
ACH return rate against NACHA 0.5% admin ceiling · 8 weeks
Return rate
NACHA ceiling (0.5%)
Warning (0.3%)
Return rate steady at 0.21% · less than half the NACHA administrative ceiling and below the internal 0.3% warning line every week this quarter.
Middle Office dashboard
Reconciliation breaks, disputes, exceptions, and metering health · live
Open recon breaks
4
Match rate
99.98%
Active disputes
6
Exceptions queue
12
Commitments awaiting approval
5
Meter streams
9
Dispute win rate
94%
Mean time to detect
41ms
Action items
Tasks assigned to you · distinct from approvals awaiting signature
Submit DSP-2026-0043 evidence
CE 3.0 compelling evidence due before SLA lapse
Clear 3 quarantined meter events
Globex usage past 48h late-window · disposition needed
Re-pin Initech rate-table
ratetable_version drift auto-paused the mandate
Close over-materiality recon break
Acme field-hours +$8,730 escalated to Treasurer
Commitments awaiting approval
Above the auto-convert threshold · needs sign-off before the vendor is committed
cmt_9f21a0 · ModelCo
CC-ENG-014 · budget gate PASS · above $15,000 delegated cap
$18,400
routine
cmt_7c40e1 · Globex Corp
CC-OPS-002 · budget gate TIGHT · vendor externally-attested
$51,200
due today
2 of 5 shown
All commitments →Requisitions & sourcing in flight
Before a commitment exists
| ID | Category | Est. amount | Stage |
|---|---|---|---|
| req_8f21a0 | Cloud infra | $18,400.00 | AWAITING APPROVAL |
| req_7c40e1 | Field services | $52,000.00 | AWAITING APPROVAL |
| rfq_2291a | Cloud infra | $18,400.00 | QUOTES RECEIVED |
22 requisitions · 7 sourcing events open
All requisitions →Reconciliation breaks
Settlo meter vs counterparty file · flagged against materiality threshold
| Meter | Counterparty | Delta | USD | Status |
|---|---|---|---|---|
| mtr_proc_hours_initech | Initech | +200 | $148 | tolerance |
| mtr_units_globex | Globex | +1,104 | $2,208 | review |
| mtr_units_modelco | ModelCo | 0 | $0 | matched |
| mtr_field_hours_acme | Acme Svc | +58.2 | $8,730 | over mat. |
Materiality threshold $50,000 · breaks above auto-escalate
Dispute SLA board
Open cases by evidence-due deadline
DSP-2026-0043 · Visa CE 3.0
Reason 10.4 fraud · evidence 3/4 HIGH · ModelCo subscription
$4,275
due 2d
DSP-2026-0041 · NACHA R10
Unauthorized debit · override evidence assembling
$12,400
due 3d
DSP-2026-0038 · SEPA SDD
8-week authorized refund window · routine
$8,910
12d
3 more cases
All within window · evidence complete
$22,615
combined
Recourse status · resolved cases
Recovered
14
$182K QTD
Pending
3
$9.5K in flight
Written off
1
$640 · below pursuit cost
Metering health
CloudEvents ingestion across 9 streams
Events / min
2,418
+6%
Late-data
0.4%
within 48h window
Quarantined
3
past late window
Dedup hits
118
idempotent
mtr_proc_hours_initech rate-table drift
ratetable_version mismatch detected · bound mandate auto-paused pending re-pin
Exception feed
Items needing manual disposition
⎔
NACHA R10 return · unauthorized debit on supplier-pay-9; override evidence required
today 13:40
◇
Quarantined meter event · Globex usage timestamp beyond 48h late-window
today 12:05
◈
Recon delta $8,730 · Acme field-service hours over materiality, escalated to Treasurer
today 09:18
▣
Dispute DSP-2026-0036 won · CE 3.0 evidence accepted, $3,200 recovered
yesterday
⬣
Ad-hoc recon completed · Initech proc-hours, +200 within tolerance
yesterday
Operator dashboard
Your agents, your caps, and the decisions you own right now · live
Daily cap used
55%
My decisions / 24h
1,284
Step-up needed
2
My agents
3
Avg latency
71ms
My denials
5
Action items
Tasks assigned to you · distinct from approvals awaiting signature
Complete FIDO2 enrolment
chen.l setup pending · blocks AMER step-ups
Refresh expiring attestation
procurement-bot-3 Nitro PCR8 attestation renews in 36h
Acknowledge cap policy change
Daily cap confirmation after Treasurer review
My daily cap
Resets 00:00 UTC · step-up required for single tx over $25K
55%
Used today · $1.1M
Remaining · $0.9M
Single-tx limit · $25,000
This week
MonTueWedThuFriSatSun
Needs your step-up
Decisions paused for FIDO2 · single tx above your limit
procurement-bot-3 · vendor payment
AP2 / Payment · Salesforce Agentforce agent · EMEA supplier
$34,800
step-up
procurement-bot-3 · cart checkout
AP2 / Cart · just over $25K single-tx limit
$26,150
step-up
FIDO2 device ready
YubiKey 5C · last used 09:14 today
My agents
Agents bound to operator patel.a · instant-pause stops money movement, not just workflow
| Agent | Source | Attestation | 24h vol | Kill switch |
|---|---|---|---|---|
SF procurement-bot-3 AGENT_ID: 0ZeHs00… | Agentforce | fresh | $842K | |
EN ap-automation-emea oid: ccdd-…-eeff | Entra | fresh | $214K | |
NA supplier-pay-emea spiffe://acme.tenants… | Native SVID | fresh | $48K |
All 3 attestation-fresh (Nitro PCR8) · pause verified to stop settlement in <100ms
My recent decisions
Latest policy evaluations you own
✓
Allow · $812.40 · procurement-bot-3 AP2/Payment to EMEA supplier
14:02:10 · 71ms · pd_b22d…f413
✓
Allow · $48.20 · procurement-bot-3 x402/Payload micro-payment
14:02:09 · 54ms · pd_19f6…b8a3
⏸
Step-up · $34,800 · over single-tx limit, awaiting your FIDO2
14:01:55 · queued
✕
Deny · $51,200 · would breach remaining daily cap headroom
13:48:02 · cap
✓
Allow · $1,204.00 · ap-automation-emea AP2/Cart
13:41:18 · 63ms
AP Manager dashboard
Payables throughput, vendor payouts, and invoice-to-pay automation · live
Paid today
$218K
In approval
14
Auto-match rate
91%
Receipts pending
14
Match exceptions
9
Avg cycle time
4.2h
Action items
Tasks assigned to you · distinct from approvals awaiting signature
Resolve held Initech payout
$8,730 awaiting goods-receipt + recon clearance
Capture expiring early-pay discount
Net-15 acceleration window closes in 2 days · $2.1K
Review 4 duplicate-flagged invoices
Auto-blocked pending manual disposition
Reconcile ModelCo monthly invoice
$52K · routed to Treasurer (over your cap)
Approval queue
Vendor payouts awaiting your release · 3 exceed your $250K cap and route up
ModelCo · monthly invoice
UNIT_RATE M_8b1d…7c4a · 3-way matched · Net 45 · routes to Treasurer (over cap)
$52,000
escalate
Globex Supplies · PO #44812
3-way matched · within cap · ACH Net 30
$18,420
matched
Initech · field-service hours
2-way match · awaiting GR · recon flagged delta
$8,730
recon
11 routine invoices
All 3-way matched · within cap · no exceptions
$36,180
combined
$250K daily cap · 87% used
Matching & throughput
Invoice-to-pay automation health
78%
Touchless · 78%
Manual review · 13%
Exception · 9%
3-way matched
91%
PO · GR · invoice
Duplicate caught
4
blocked today
Early-pay disc.
$2.1K
captured QTD
Avg cycle
4.2h
-18%
Top vendors this month
By settled volume · all on active mandates
ModelCo UNIT_RATE
$52K / $60K mo cap
Globex Supplies ASYNC
$38K / $250K
Initech UNIT_RATE
$24K / $50K mo
Umbrella UNIT_RATE
$11K / $40K mo
Payables activity
Recent automated and manual events
✓
11 invoices released · all 3-way matched, ACH batch, $36,180 total
today 13:55
⎔
Duplicate blocked · Globex PO #44812 invoice submitted twice by ap-automation-7f4c, second held
today 11:32
◇
Initech payout held · recon delta $8,730 flagged by Middle Office, awaiting GR
today 09:18
◈
ModelCo invoice escalated · $52K exceeds your $250K... routed for Treasurer co-sign
today 08:40
▣
$2,100 early-pay discount captured this quarter via Net-15 acceleration
QTD
Live Decisions
Real-time policy evaluation across all Bring-Your-Own-Identity sources · streaming
Decisions / 24h
18,247
Decision p95
113ms
Mandate accept
99.42%
Attestation fresh
99.91%
Active agents
287
Open incidents
1
Decision Stream
Click a row to inspect mandate chain, checks, and dossier
| Time (UTC) | Decision | Agent | Mandate | Operator | Amount | Verdict | Latency |
|---|---|---|---|---|---|---|---|
| 14:02:11.314 | pd_7f4c…a91e | EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | AP2 / Cart | smith.j (Asst Tres) | $4,275.00 | Allow | 94 |
| 14:02:11.087 | pd_3a18…07ce | WX treasury-sweep-2a91 wx: 9c4d-…-2a91 | x402 / Payload | garcia.m (Treasurer) | $48,500.00 | Step-up | 137 |
| 14:02:10.842 | pd_b22d…f413 | SF procurement-bot-3 AGENT_ID: 0ZeHs00… | AP2 / Payment | patel.a (Op) | $812.40 | Allow | 71 |
| 14:02:10.611 | pd_d59f…21ba | SN invoice-clearer-A sys_id: e91a8… | AP2 / Cart | kim.s (Op) | $1,247.80 | Allow | 62 |
| 14:02:10.388 | pd_a04c…91dd | NA supplier-pay-9 SVID spiffe://acme.tenants… | ACP / DelegTok | chen.l (Op) | $216.55 | Allow | 58 |
| 14:02:09.974 | pd_e7b1…4408 | EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | AP2 / Cart | smith.j (Asst Tres) | $83,200.00 | Deny | 109 |
| 14:02:09.581 | pd_5c83…2e7f | WX basf-spot-fx-1 wx: 2b8a-…-1e44 | AP2 / Payment | garcia.m (Treasurer) | $12,940.00 | Allow | 88 |
| 14:02:09.222 | pd_19f6…b8a3 | SF procurement-bot-3 AGENT_ID: 0ZeHs00… | x402 / Payload | patel.a (Op) | $48.20 | Allow | 54 |
| 14:02:08.940 | pd_8aac…ff10 | SN jpm-onboarding-flow sys_id: 0c4f1… | Settlo Native | kim.s (Op) | $3,118.00 | Allow | 79 |
| 14:02:08.501 | pd_44e2…16cd | SP klarna-refunds-edge spiffe://klarna.tenants… | AP2 / Cart | chen.l (Op) | $640.10 | Allow | 67 |
Showing latest 10 of 18,247 decisions · auto-refresh every 1s
Decision detail
pd_7f4c8a2e9d1b…a91e
Allow
Decided at2026-05-19 14:02:11.314 UTC
Total latency94 ms under SLO
Agentap-automation-7f4c
BYOI sourceMicrosoft Entra Agent ID
Operatorsmith.j · Asst Treasurer
Counterpartyurn:duns:123456789
AmountUSD 4,275.00 · ACH
Mandate chain · AP2
Intent
im_3f…a01
Cart
cm_9b…7e2
Payment
pm_2a…d44
Verification checks
✓ECDSA P-256 signature
8 ms✓Checkout-hash linkage
3 ms✓Cart constraints satisfied
11 ms✓Freshness (intent_expiry)
2 ms✓Revocation: not revoked
14 ms✓Agent binding to oid
6 ms✓Operator cap: $4,275 / $25,000 day
5 ms✓Attestation fresh (Nitro PCR8)
9 msAudit dossier · sealed
{
"decision_id": "pd_7f4c8a2e…a91e",
"sealed_at": "2026-05-19T14:02:11.339Z",
"verdict": "allow",
"mandate_chain_sha256": "4b1a…f3c2",
"reasoning_trace_sha256": "e0a8…1b9d",
"policy_version": "v2026.05.18-a",
"signed_by": "ed25519:settlo-decision-2026Q2"
}
BYOI source health
Last poll · 14:02:11
5 of 5 OK
EN124●
Microsoft Entra Agent ID
WX56●
IBM watsonx Orchestrate
SN41●
ServiceNow AI Agent
SF38●
Salesforce Agentforce
NA28●
Settlo Native (SPIRE)
Operator caps · today
Per-day cap utilization · rolling 24h
garcia.mTreasurer
$184,420 / $250,000
smith.jAsst Treasurer
$87,615 / $150,000
patel.aOperator · EMEA
$22,140 / $50,000
kim.sOperator · APAC
$11,388 / $50,000
chen.lOperator · AMER
$8,210 / $40,000
Alerts & reviews
Highest severity first
1 open
INC-2026-0418 · Tier classification pending
Liability waterfall awaiting reasoning-trace root-cause for pd_e7b1…4408 (Deny: OPERATOR_CAP_EXCEEDED).
opened 14:01:48 · day 1 of 30
Step-up required · 2 agents
treasury-sweep-2a91 hit per-tx cap; FIDO2 challenge pending in Entra CA.
14:02:11 · auto-routed
Periodic review · Q2 Op entitlements
Middle Office to sample 12 of 287 active OperatorEntitlements.
due in 12 days
BR/DOA v2026.05 effective
Acme Corp BR/DOA v2026.05 activated. Per-operator caps refreshed.
today · 09:14
Agent Registry
All AI agents registered to Acme Corp · 287 active · 12 suspended · 3 pending approval
Active agents
287
Pending approval
3
Suspended
12
BYOI coverage
90%
All agents
Showing 1 to 14 of 287
| Agent | BYOI source | Operator | Purpose | State | Caps (day) | Last attested | Last decision | Kill switch |
|---|---|---|---|---|---|---|---|---|
EN ap-automation-7f4c oid: aaaa-1111-…-bbbb | Entra Agent ID | smith.j | AP_AUTOMATION | ACTIVE | $4,275 / $25,000 | 3m ago · PCR8 ✓ | 14:02:11 | |
WX treasury-sweep-2a91 wx: 9c4d-…-2a91 | watsonx Orchestrate | garcia.m | TREASURY_SWEEP | ACTIVE | $148,500 / $250,000 | 12m ago | 14:02:11 | |
SF procurement-bot-3 AGENT_ID: 0ZeHs00… | Salesforce Agentforce | patel.a | PROCUREMENT | ACTIVE | $22,140 / $50,000 | 8m ago | 14:02:10 | |
SN invoice-clearer-A sys_id: e91a8… | ServiceNow AI Agent | kim.s | AP_AUTOMATION | ACTIVE | $8,210 / $40,000 | 5m ago | 14:02:10 | |
NA supplier-pay-9 spiffe://acme.tenants… | Settlo Native (SPIRE) | chen.l | AP_AUTOMATION | ACTIVE | $640 / $20,000 | 2m ago · Nitro ✓ | 14:02:10 | |
WX basf-spot-fx-1 wx: 2b8a-…-1e44 | watsonx Orchestrate | garcia.m | FX_HEDGING | ACTIVE | $12,940 / $100,000 | 15m ago | 14:02:09 | |
EN macquarie-am-rebal oid: ddff-2222-…-9921 | Entra Agent ID | garcia.m | ASSET_MGMT | ACTIVE | $24,800 / $80,000 | 21m ago | 14:02:08 | |
SN jpm-onboarding-flow sys_id: 0c4f1… | ServiceNow AI Agent | kim.s | CLIENT_ONBOARD | ACTIVE | $3,118 / $30,000 | 9m ago | 14:02:08 | |
SP klarna-refunds-edge spiffe://klarna.tenants… | SPIFFE federated | chen.l | REFUNDS | ACTIVE | $640 / $20,000 | 4m ago | 14:02:08 | |
WX hubspot-revrec-sweep wx: 41c2-…-77a0 | watsonx Orchestrate | kim.s | REV_REC | ACTIVE | $917 / $15,000 | 11m ago | 14:02:07 | |
EN salesforce-cpq-sync oid: ee10-3333-…-7782 | Entra Agent ID | patel.a | CPQ_SYNC | PENDING_APPROVAL | n/a | awaiting Treasurer | n/a | not yet active |
SF netsuite-ar-collector AGENT_ID: 0ZeHs01… | Salesforce Agentforce | patel.a | AR_COLLECT | SUSPENDED | n/a | ATTESTATION_STALE | 2 days ago | |
SN ariba-pactum-negotiator sys_id: 4f88c… | ServiceNow AI Agent | chen.l | PROCUREMENT | PENDING_APPROVAL | n/a | awaiting Treasurer | n/a | not yet active |
NA tax-withholding-ind spiffe://acme.tenants… | Settlo Native (SPIRE) | kim.s | TAX_WHT | ACTIVE | $1,890 / $10,000 | 6m ago · Nitro ✓ | 14:01:54 |
Mandate Inbox
Inbound payment mandates verified at the boundary · AP2 / x402 / ACP / Native
Mandates / 24h
1,418
Verify p95
52ms
Accept rate
99.42%
Rejects today
8
Recent verifications
Newest first · click for full mandate payload
| Time | Mandate ID | Spec | Agent | Counterparty | Amount | Result | Failed checks |
|---|---|---|---|---|---|---|---|
| 14:02:11.301 | cm_9b7e2a4f01d3 | AP2 / Cart | EN ap-automation-7f4c | urn:duns:123456789 | $4,275.00 | PASS | n/a |
| 14:02:11.063 | x402_0xab14…f3 | x402 / Payload | WX treasury-sweep-2a91 | 0x…supplier-treasury | $48,500.00 | STEP_UP | op_cap_exceeded_per_tx |
| 14:02:10.821 | pm_2ad44b8c91 | AP2 / Payment | SF procurement-bot-3 | urn:duns:987654321 | $812.40 | PASS | n/a |
| 14:02:10.591 | cm_8ee311904a | AP2 / Cart | SN invoice-clearer-A | urn:duns:445566778 | $1,247.80 | PASS | n/a |
| 14:02:10.371 | acp_tok_3f8a91 | ACP / DelegTok | NA supplier-pay-9 | merchant_stripe_acct_… | $216.55 | PASS | n/a |
| 14:02:09.955 | cm_4408d1ee76 | AP2 / Cart | EN ap-automation-7f4c | urn:duns:123456789 | $83,200.00 | FAIL | operator_cap_exceeded |
| 14:02:09.560 | pm_2e7f5c83b1 | AP2 / Payment | WX basf-spot-fx-1 | urn:duns:334455667 | $12,940.00 | PASS | n/a |
| 14:02:09.197 | x402_0x4f88…02 | x402 / Payload | SF procurement-bot-3 | 0x…micro-api-svc | $48.20 | PASS | n/a |
| 14:02:08.921 | nat_ff108aac21 | Settlo Native | SN jpm-onboarding-flow | internal:settlement | $3,118.00 | PASS | n/a |
| 14:02:08.114 | cm_b8a319f6a4 | AP2 / Cart | SP klarna-refunds-edge | urn:duns:998877665 | $640.10 | PASS | n/a |
| 14:01:54.808 | cm_eaa10221bc | AP2 / Cart | WX hubspot-revrec-sweep | urn:duns:556677889 | $200.00 | FAIL | intent_expiry_passed |
Showing 11 of 1,418 in last 24h
View all →Incidents
Liability-waterfall incident queue · 1 open, 4 resolved this month
Incident detail
INC-2026-0418
Opened2026-05-19 14:01:48 UTC
Triggering decisionpd_e7b1…4408 (deny)
Agentap-automation-7f4c
Operatorsmith.j · Asst Treasurer
Counterpartyurn:duns:123456789
Attempted amountUSD 83,200.00
Operator per-tx capUSD 25,000.00
Reason codeOPERATOR_CAP_EXCEEDED
Exposure if executedUSD 58,200.00 over cap
Status
✓Decision rejected at boundary (no funds moved)
14:01:48✓Agent moved to SUSPENDED · operator notified
14:01:51!Reasoning trace root-cause analysis pending
in progress!Tier classification: Operator vs Platform pending
analyst assigned○30-day pre-arbitration default at 2026-06-18 14:01:48 UTC
T-29d 23hResolved this month
4 incidents · all tier-classified
INC-2026-0414 · Operator tier
$1,210 settled to wrong counterparty (Operator config error). Allocated to Operator; insurance backstop confirmed.
resolved 2026-05-12 · 4 days
INC-2026-0413 · Counterparty tier
Counterparty agent submitted invalid mandate; rejected. Logged for counterparty reputation.
resolved 2026-05-08 · 1 day
INC-2026-0411 · Principal tier
Mandate within four corners; loss accepted by Principal. No platform fault.
resolved 2026-05-03 · 2 days
INC-2026-0407 · Platform tier
Signature-verify library defect; HSM fix shipped v2026.04.21. Insurance claim filed.
resolved 2026-04-23 · 3 days
Operator Entitlements
Who can authorize what · derived from BR/DOA v2026.05 · 14 operators in scope
Operators
14
BR/DOA version
v2026.05
Reviews pending
3
Co-sign coverage
100%
Active operators
Roles, caps, and BR/DOA citations
| Operator | Role | Per-tx cap | Per-day cap | Co-sign rule | BR/DOA ref | Status |
|---|---|---|---|---|---|---|
| garcia.m Maria Garcia | Treasurer | $50,000 | $250,000 | self for ≤$50K · CFO co-sign {">"}$50K | §4.1.a | ACTIVE |
| smith.j Jane Smith | Asst Treasurer | $25,000 | $150,000 | Treasurer co-sign {">"} $25K | §4.1.b | ACTIVE |
| patel.a Anish Patel | Operator · EMEA Treasury | $10,000 | $50,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| kim.s Soo-yeon Kim | Operator · APAC Treasury | $10,000 | $50,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| chen.l Liwei Chen | Operator · AMER Treasury | $10,000 | $40,000 | Asst Treasurer co-sign {">"} $10K | §4.1.c | ACTIVE |
| okafor.n Nneka Okafor | AP Manager | $5,000 | $25,000 | AP Director co-sign {">"} $5K | §4.2.a | ACTIVE |
| nakamura.h Hiro Nakamura | AR Manager | $5,000 | $25,000 | n/a | §4.2.b | ACTIVE |
| davis.r Rachel Davis | Procurement Manager | $15,000 | $75,000 | Procurement Dir. co-sign {">"} $15K | §4.3.a | ACTIVE |
| silva.r Rafael Silva | Procurement Operator | $3,000 | $15,000 | Proc. Mgr co-sign {">"} $3K | §4.3.b | ACTIVE |
| volkov.a Anya Volkov | Tax Operator | $8,000 | $30,000 | n/a | §4.4.a | ACTIVE |
| walker.t Trevor Walker | Procurement Operator | $3,000 | $15,000 | Proc. Mgr co-sign {">"} $3K | §4.3.b | REVIEW DUE |
11 of 14 shown · all BR/DOA-anchored
View source document →Board Resolutions & Delegations of Authority
Source-of-truth governance documents · versioned, signed, machine-readable
Acme Corp BR/DOA
v2026.05 · acme-brdoa-2026-05.yaml
Acme Corp Procurement DOA
v2026.05 · acme-procurement-doa-2026-05.yaml
Version history
All historic versions · immutable, WORM-anchored
| Version | Document | Effective | Status | Signed by | Hash | Operators |
|---|---|---|---|---|---|---|
| v2026.05 | Acme Corp BR/DOA | 2026-05-19 | EFFECTIVE | CFO + GC | sha256:4f81…3c9a | 14 |
| v2026.05 | Procurement DOA | 2026-05-01 | EFFECTIVE | CPO + CFO | sha256:7e22…a015 | 6 |
| v2026.02 | Acme Corp BR/DOA | 2026-02-15 | SUPERSEDED | CFO + GC | sha256:b101…77fd | 13 |
| v2026.01 | Procurement DOA | 2026-01-15 | SUPERSEDED | CPO + CFO | sha256:a299…1108 | 5 |
| v2025.11 | Acme Corp BR/DOA | 2025-11-04 | SUPERSEDED | CFO + GC | sha256:30ab…f4c1 | 12 |
Federated Delegations
Builder → Operator → Counterparty authority chain · cross-tenant delegations
Active
6
Federated tenants
4
Hash-anchored
6 / 6
Expiring <30d
1
Active delegations
Authority flows from Acme (principal) → external operator → agents
| Delegation ID | Builder | Operator | Counterparty scope | Cap | Effective | Status |
|---|---|---|---|---|---|---|
| dlg_acn_01HZ | Accenture · BPS | Acme Corp | AP automation · NA | $2M / mo | 2026-04-01 → 2026-12-31 | ACTIVE |
| dlg_bcg_02JK | BCG · Procurement | Acme Corp | Spot purchasing · EMEA | $500K / mo | 2026-03-15 → 2026-09-15 | ACTIVE |
| dlg_kpmg_03LM | KPMG · Tax | Acme Corp | Tax withholding · IN | $100K / mo | 2026-01-01 → 2026-12-31 | ACTIVE |
| dlg_pact_04NP | Pactum AI | Acme Corp | Vendor renegotiation | $0 (advisory) | 2026-02-12 → 2026-08-12 | ACTIVE |
| dlg_lyzr_05QR | Lyzr.ai | Acme Corp | Cust support refunds | $50K / mo | 2026-04-20 → 2027-04-20 | ACTIVE |
| dlg_bain_06ST | Bain · Strategy | Acme Corp | Forecasting (read) | $0 (read-only) | 2025-12-01 → 2026-06-01 | EXPIRES SOON |
Periodic Reviews
Quarterly sampling and re-attestation cycles · SOX 404 / SOC 2 CC9.2 / DORA Art.6
Open reviews
3 reviews scheduled in next 30 days
DUE 2026-05-31 · 12 DAYS
Q2 Operator entitlement sample
Middle Office samples 12 of 287 active OperatorEntitlements. Treasurer co-signs results. Maps to SOX 404 control AC-04.
DUE 2026-06-08 · 20 DAYS
Mandate-engine quarterly re-attestation
Re-verify mandate verification engine SHA-256, Nitro Enclave PCR8 measurements, signing-key roster. Maps to SOC 2 CC6.1.
DUE 2026-06-15 · 27 DAYS
BYOI provider trust review
Confirm Entra JWKS, watsonx IAM trust anchors, ServiceNow A2A roots, Agentforce Connected App certs. Stale > 90 days triggers re-onboard.
2026-07-01 · IN 43 DAYS
Federated delegation renewal · BCG
dlg_bain_06ST · expires 2026-06-01 · principal counsel review required.
2026-08-31 · IN 104 DAYS
BR/DOA v2026.05 quarterly review
CFO + GC re-affirm or amend BR/DOA. Audit committee briefing scheduled.
Last 90 days · completed
8 reviews · all evidence sealed
| Date | Review | Reviewer | Outcome | Evidence |
|---|---|---|---|---|
| 2026-04-30 | Q1 Op entitlement sample | kim.s | PASS | ev_q1_2026 |
| 2026-03-28 | Mandate engine re-attest | auto | PASS | ev_mr_q1 |
| 2026-03-15 | BYOI provider trust | chen.l | PASS | ev_byoi_q1 |
| 2026-02-28 | Federation policy | GC | PASS | ev_fed_q1 |
| 2026-02-15 | BR/DOA quarterly | CFO | AMEND | ev_brdoa_q1 |
Decision Dossiers
Sealed audit artifacts · every decision produces one · WORM-anchored · regulator-ready
Sealed today
18,247
Total sealed
8.4M
Integrity verified
100%
Exports / 24h
3
Recent dossiers
Newest sealed first · click for full payload
| Sealed at | Dossier ID | Decision | Agent | Operator | Verdict | Chain hash | WORM anchor |
|---|---|---|---|---|---|---|---|
| 14:02:11.339 | do_7f4c8a2e | pd_7f4c…a91e | ap-automation-7f4c | smith.j | Allow | sha256:4b1a…f3c2 | s3://…anchor-918274 |
| 14:02:11.110 | do_3a1807ce | pd_3a18…07ce | treasury-sweep-2a91 | garcia.m | Step-up | sha256:7e22…a015 | s3://…anchor-918273 |
| 14:02:10.865 | do_b22df413 | pd_b22d…f413 | procurement-bot-3 | patel.a | Allow | sha256:8aab…01ff | s3://…anchor-918272 |
| 14:02:10.635 | do_d59f21ba | pd_d59f…21ba | invoice-clearer-A | kim.s | Allow | sha256:f001…22ee | s3://…anchor-918271 |
| 14:02:09.998 | do_e7b14408 | pd_e7b1…4408 | ap-automation-7f4c | smith.j | Deny | sha256:c990…7788 | s3://…anchor-918270 |
| 14:02:09.605 | do_5c832e7f | pd_5c83…2e7f | basf-spot-fx-1 | garcia.m | Allow | sha256:1234…ab98 | s3://…anchor-918269 |
| 14:02:09.245 | do_19f6b8a3 | pd_19f6…b8a3 | procurement-bot-3 | patel.a | Allow | sha256:5566…cdef | s3://…anchor-918268 |
| 14:02:08.963 | do_8aacff10 | pd_8aac…ff10 | jpm-onboarding-flow | kim.s | Allow | sha256:99aa…bbcc | s3://…anchor-918267 |
8 of 18,247 today
Audit Export
Build sealed evidence bundles for external auditors, regulators, or counsel
New export bundle
Configure scope, recipient, and signing policy
Bundle name
For your records
Date range
UTC
→
Scope
What to include in the bundle
Sampling
For statistical attestation
Recipient
Bundle will be encrypted to this party's pubkey
Co-sign
Required for SOX-scope bundles
Recent exports
Last 30 days
2026-Q1 SOX 404 sample
KPMG · 184 dossiers · 22.4 MB · co-signed CFO + GC
delivered 2026-04-30 14:12 UTC
DORA Art. 6 ICT-risk evidence
EU regulator · 412 dossiers · 51.8 MB · co-signed CFO + GC + CISO
delivered 2026-04-15 09:04 UTC
Internal audit deep-dive · AP
Internal · 88 dossiers · 11.2 MB
delivered 2026-04-08 16:48 UTC
Counsel investigation · INC-2026-0407
External counsel · 14 dossiers + reasoning trace · awaiting GC co-sign
pending
Compliance Map
Settlo primitives mapped to control frameworks · auto-attested · evidence on demand
SOX 404 · IT GC 12 / 12
- Authorization of transactionsAC-04 · Op entitlements
- Segregation of dutiesSD-01 · Co-sign rules
- Audit trail completenessAU-02 · Sealed dossier
- Periodic re-attestationAC-06 · Quarterly review
- Limits enforcementTR-03 · Cap engine
- Exception handlingIR-04 · Incident queue
SOC 2 Type II 38 / 38
- CC6.1 · Logical accessBYOI + SVID
- CC6.2 · AuthenticationSignature verification
- CC6.6 · Network restrictionSPIRE federation
- CC7.2 · Anomaly detectionCap breach & deny
- CC9.2 · Vendor riskFederated delegation
- A1.2 · AvailabilityMulti-region active-active
DORA (EU) 9 / 9
- Art. 5 · ICT risk mgmtCap + step-up policy
- Art. 6 · ICT-risk frameworkSealed dossiers
- Art. 8 · Identification & classificationAgent registry
- Art. 17 · Incident reportingLiability waterfall
- Art. 28 · Third-party riskFederation policy
- Art. 30 · Sub-contractorsDelegation chain
ISO 27001:2022 24 / 26
- A.5.15 · Access controlOp entitlements
- A.5.16 · Identity mgmtBYOI + Native
- A.5.17 · AuthenticationSig + attestation
- A.8.15 · LoggingDossier · WORM
- A.8.16 · MonitoringLive decisions
- A.5.23 · Cloud securityin progress
NIST SP 800-53 r5 52 / 52
- AC-2 · Account mgmtRegistry · Op caps
- AC-3 · Access enforcementDecision engine
- AU-2 · Event loggingDossier
- AU-10 · Non-repudiationEd25519 signing
- IA-9 · Service authSVID + JWT
- SI-7 · IntegrityHash chain
PCI DSS v4.0 8 / 8
- Req 7 · Least privilegeCap engine
- Req 8 · Identify usersAgent registry
- Req 10 · LoggingDossier
- Req 12 · Policy mgmtBR/DOA
Liability Waterfall
Tier classification: Principal · Operator · Counterparty · Platform · Insurance
Resolved YTD
23
Loss avoided
$1.84M
Loss realized
$12.4K
Insurance covered
100%
Waterfall tiers · standard
Applied to every incident in classification order
1 · Principal
Tx within four corners of mandate & BR/DOA · loss accepted by principal
unlimited
enabled
2 · Operator
Operator config error, cap-breach, or scope violation
$2M / yr
enabled
3 · Counterparty
Counterparty fraud, invalid mandate, or merchant breach
recourse
enabled
4 · Platform
Settlo engine defect (signature lib, cap engine, ledger)
$10M / yr
enabled
5 · Insurance
Lloyd's syndicate · agentic-commerce wrap policy
$25M aggregate
bound
Bring-Your-Own-Identity Connections
Federated trust into every major agent platform · 5 providers connected · 259 agents covered
EN
CONNECTEDMicrosoft Entra Agent ID
Continuous Access Eval · OIDC + signed-JWT
Agents
124
Decisions /d
8.2K
Verify p95
42ms
CAE up · JWKS rotated 12h ago · last token refresh 3m
WX
CONNECTEDIBM watsonx Orchestrate
IAM signed-action tokens · A2A v1
Agents
56
Decisions /d
4.1K
Verify p95
48ms
IAM token T-42m · trust anchor pinned
SN
CONNECTEDServiceNow AI Agent
A2A API authn · sys_id binding
Agents
41
Decisions /d
3.0K
Verify p95
51ms
Now instance ack · MID server tunnel up
SF
CONNECTEDSalesforce Agentforce
Connected App · signed-JWT bearer flow
Agents
38
Decisions /d
2.4K
Verify p95
44ms
Connected App cert valid · expires 2027-02-12
NA
NATIVESettlo Native Issuer (SPIRE)
spiffe:// SVID · X.509 + JWT · Nitro attest
SVIDs
28
Decisions /d
512
Verify p95
38ms
Trust bundle T-3h · PCR8 measurements clean
+
AVAILABLEAdd another provider
Google ADK · LangChain · CrewAI · Cognition · ServiceNow Now Assist
n/a
n/a
n/a
n/a
n/a
n/a
Native Issuer · SPIRE
Settlo-managed SPIFFE Workload Identities for agents without a BYOI source
Trust domain
spiffe://acme.tenants.settlo.io
Trust domainacme.tenants.settlo.io
IssuerSettlo SPIRE Server
Regionus-east-1 (primary) · us-west-2 (DR)
Trust bundle TTL24h · auto-rotate
SVID lifetime1h · re-attest
AttestorAWS Nitro Enclave (PCR8 measured)
Federation3 peers (klarna · jpm · macquarie)
Trust bundle (current)
// trust-bundle.json · valid until 2026-05-20 03:14:22 UTC
{
"trust_domain": "acme.tenants.settlo.io",
"keys": [
{ "kid": "settlo-spire-2026Q2", "kty": "EC", "crv": "P-256" },
{ "kid": "settlo-spire-2026Q1", "kty": "EC", "crv": "P-256" }
],
"refresh_hint": 43200
}
Registered workloads
28 SVIDs · re-attested every 1h
| SPIFFE ID | Selector | Last attest | State |
|---|---|---|---|
| spiffe://…/agent-7f4c | k8s:ns=ap, sa=agent | 2m ago | OK |
| spiffe://…/supplier-pay-9 | k8s:ns=pay, sa=supp | 2m ago | OK |
| spiffe://…/tax-wht-ind | k8s:ns=tax, sa=ind | 6m ago | OK |
| spiffe://…/sweep-batch | aws:nitro:pcr8=… | 12m ago | OK |
| spiffe://…/refund-edge-2 | k8s:ns=refund, sa=edge | 18m ago | OK |
5 of 28 shown
View all workloads →Credentials & Keys
All signing & verification material · 42 active keys · auto-rotation enforced
Active keys
42
Rotated 30d
9
Rotate next 30d
4
HSM-backed
100%
Signing keys
All keys managed in CloudHSM · never exported
| Key ID | Purpose | Algo | HSM slot | Created | Rotates | Status |
|---|---|---|---|---|---|---|
| settlo-decision-2026Q2 | Decision dossier signing | Ed25519 | hsm-us-east-1-a · slot 4 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-decision-2026Q1 | Decision dossier signing | Ed25519 | hsm-us-east-1-a · slot 3 | 2026-01-01 | retired | RETIRED |
| settlo-mandate-2026Q2 | Mandate verification root | ECDSA P-256 | hsm-us-east-1-b · slot 1 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-spire-2026Q2 | SPIRE CA root | ECDSA P-256 | hsm-us-east-1-b · slot 2 | 2026-04-01 | 2026-07-01 | ACTIVE |
| settlo-export-2026 | Audit export co-signing | Ed25519 | hsm-us-east-1-a · slot 5 | 2026-01-01 | 2026-06-01 | ROTATE SOON |
| settlo-federation-2026 | Cross-tenant federation | Ed25519 | hsm-us-east-1-a · slot 6 | 2026-01-15 | 2026-07-15 | ACTIVE |
Attestations
Workload attestation freshness · TEE measurements · runtime integrity proof
Freshness rate
99.91%
Agents attested
285/ 287
Median age
8min
PCR mismatches
0
Attestation roll · latest
Click row for full TEE quote
| Agent | Attestor | Measurement | Last attested | Quote hash | Status |
|---|---|---|---|---|---|
| supplier-pay-9 | AWS Nitro Enclave | PCR8: 4f1a…8c92 | 2m ago | sha256:b1e2…0a44 | FRESH |
| tax-withholding-ind | AWS Nitro Enclave | PCR8: 4f1a…8c92 | 6m ago | sha256:c8f3…1192 | FRESH |
| jpm-onboarding-flow | Azure CVM | RTMR0: 71ab…cc02 | 9m ago | sha256:7728…ff90 | FRESH |
| basf-spot-fx-1 | Intel SGX | MRENCLAVE: 8ab1… | 15m ago | sha256:1144…aa88 | FRESH |
| klarna-refunds-edge | AWS Nitro Enclave | PCR8: 9023…f1e0 | 4m ago | sha256:7a3f…0c19 | FRESH |
| netsuite-ar-collector | n/a | n/a | 2 days ago | n/a | STALE |
Payment rail connectors
Settlo signals · counterparty rails execute · 4 connected · rail-agnostic
S
CONNECTEDStripe
Cards · ACH · SEPA · acct_acme_prod
Tx /d
9.2K
Success
99.8%
p95
412ms
Webhook signed · idempotency keyed · last sync 14:02
B
CONNECTEDJPMorgan ACH
JPM Treasury Services · NACHA
Tx /d
1.8K
Success
100%
Settlement
T+1
SFTP cutoffs · 14:00 ET window open
V
CONNECTEDVisa TAP
Trusted Agent Protocol · cards
Tx /d
3.1K
Success
99.6%
p95
288ms
Agentic Ready · cryptogram intent signed
x
CONNECTEDx402 · Base L2
Stablecoin (USDC) · onchain settlement
Tx /d
412
Success
99.9%
Finality
2sec
Tx-receipt-hash bound to dossier
Identity provider connectors
5 BYOI sources + Settlo Native · see also Identity → BYOI Connections
EN
CONNECTEDMicrosoft Entra Agent ID
CAE · OIDC · signed-JWT
Agents
124
Trust
JWKS
Status
UP
WX
CONNECTEDIBM watsonx Orchestrate
IAM signed-action · A2A v1
Agents
56
Trust
IAM
Status
UP
SN
CONNECTEDServiceNow AI Agent
A2A API authn · sys_id
Agents
41
Trust
API
Status
UP
SF
CONNECTEDSalesforce Agentforce
Conn. App · signed-JWT
Agents
38
Trust
JWT
Status
UP
NA
NATIVESettlo Native (SPIRE)
SVID · Nitro attest
SVIDs
28
Trust
SPIRE
Status
UP
Mandate specification connectors
4 specifications supported · all verified by the same engine
AP
SUPPORTEDAP2 · Google
Intent / Cart / Payment mandate triad
/24h
9.8K
Accept
99.6%
p95
48ms
Spec v0.9.2 · upstream pinned · cart-hash verified
x4
SUPPORTEDx402 · Coinbase
Payment payload over HTTP 402
/24h
412
Accept
99.8%
p95
38ms
Onchain receipt anchored to dossier
ACP
SUPPORTEDACP · Agent Commerce Protocol
DelegationToken · open standard
/24h
2.4K
Accept
99.4%
p95
54ms
Counterparty federation · 3 trust anchors
NA
NATIVESettlo Native mandate
Settlo-issued · UNIT_RATE / WATERFALL_SPLIT
/24h
5.6K
Accept
99.9%
p95
31ms
Pricing primitives composable · 8 atomic types
General settings
Tenant Acme Corp · tenant_01HY8K3PQR
Tenant name
Shown in console and audit headers
Tenant ID
Immutable · used in API and dossiers
Audit scope
Drives default retention & co-sign rules
Default time zone
UI display only · dossiers always UTC
Primary region
Where decisions are sealed
Data residency
Mandate payloads, dossiers, reasoning traces
Security & access
Console authentication, step-up policy, and session controls
Authentication
For console users · separate from agent authn
SSO provider
MFA required
Session lifetime
IP allow-list
Console access from these CIDRs only
Console roles
8 users · role-bound
| User | Role | MFA | Last seen |
|---|---|---|---|
| p.settlo | ADMIN | FIDO2 | now |
| garcia.m | TREASURER | FIDO2 | 14:01 |
| smith.j | ASST_TREASURER | FIDO2 | 13:54 |
| patel.a | OPERATOR | FIDO2 | 13:48 |
| kim.s | OPERATOR | FIDO2 | 13:32 |
| chen.l | OPERATOR | FIDO2 | 13:21 |
| audit-kpmg-r1 | AUDITOR | FIDO2 | yesterday |
| ext-counsel-1 | VIEWER | FIDO2 | 2 days ago |
API keys
For programmatic access · base URL https://api.settlo.ai/v2
Active keys
Keys are shown once at creation · rotate every 90 days
| Key name | Prefix | Scope | Created | Last used | Expires | Status |
|---|---|---|---|---|---|---|
| Production · primary | stl_sk_live_…7f4c | FULL | 2026-04-01 | 12s ago | 2026-07-01 | ACTIVE |
| Production · readonly | stl_sk_live_…2a91 | READ | 2026-04-01 | 3m ago | 2026-07-01 | ACTIVE |
| Staging · CI | stl_sk_test_…b8a3 | SCOPED | 2026-05-12 | 1h ago | 2026-08-12 | ACTIVE |
| KPMG audit · readonly | stl_sk_live_…4408 | READ | 2026-04-29 | yesterday | 2026-06-29 | ROTATE SOON |
Notifications
Webhooks, email, and PagerDuty routes for incidents and approvals
Incident alerts
Tier-pending or unresolved > 24h
Step-up requests
Co-sign required from Treasurer
Periodic reviews
Quarterly sample notification
Webhooks
Decision dossier sealed (real-time)
Instructions
Signed Settlo Instruction Objects (SIO) · produced after /v1/policy:decide ALLOW · tracked through the Settlement State Machine
Instructions / 24h
14,218
Handoff p95
198ms
Settled rate
99.31%
In flight
142
Throughput
1.84K/s
Idempotency hits
23
Recent instructions
Newest first · click row for SSM history and rail acknowledgement
| Created | Instruction | Mandate | Rail | Beneficiary | Amount | SSM state | Settled in |
|---|---|---|---|---|---|---|---|
| 14:02:11.412 | ins_7f4c…a91e | AP2 / Cart | ACH CCD | urn:duns:123456789 | $4,275.00 | SUBMITTED | T+0 batch |
| 14:02:11.188 | ins_3a18…07ce | x402 / Payload | x402 Base USDC | 0x…supplier-treasury | $48,500.00 | PENDING | 12 of 64 blocks |
| 14:02:10.943 | ins_b22d…f413 | ACP / SPT | Stripe PSP | nbp_acme_seller_001 | $812.40 | SETTLED | 412ms |
| 14:02:10.712 | ins_d59f…21ba | AP2 / Cart | ACH CCD | urn:duns:445566778 | $1,247.80 | SUBMITTED | T+0 same-day |
| 14:02:10.489 | ins_a04c…91dd | ACP / DelegTok | FedNow | merchant_stripe_acct_… | $216.55 | SETTLED | 1.8s · pacs.002 ACSC |
| 14:02:10.075 | ins_e7b1…4408 | AP2 / Cart | n/a | n/a | $83,200.00 | REJECTED | at boundary (cap) |
| 14:02:09.681 | ins_5c83…2e7f | AP2 / Payment | SEPA SCT Inst | FR76 1010 7000 03… | €12,940.00 | SETTLED | 8.4s · VoP match |
| 14:02:09.322 | ins_19f6…b8a3 | x402 / Payload | x402 Solana USDC | SoLanaWalletAddr… | $48.20 | SETTLED | 2.1s · 32 slots |
| 14:02:09.040 | ins_8aac…ff10 | Settlo Native | RTP (TCH) | jpm-corp-acct-… | $3,118.00 | SETTLED | 1.2s |
| 14:02:08.601 | ins_44e2…16cd | AP2 / Cart | UPI Collect | vendor@hdfc | ₹52,400.00 | PENDING | NPCI switch |
| 14:02:07.214 | ins_61ab…cd29 | AP2 / Payment | SWIFT pacs.008 | Macquarie AU… | $24,800.00 | SUBMITTED | gpi UETR active |
| 14:01:54.808 | ins_2240…78b1 | AP2 / Cart | ACH CCD | urn:duns:556677889 | $200.00 | RETURNED | R01 NSF · day-1 |
Showing 12 of 14,218 in last 24h
View all instructions →SSM · ins_7f4c…a91e
State machine transitions with signed timestamps
✓INSTRUCTED · idempotency key minted
14:02:11.412✓SUBMITTED · NACHA trace 091000121234567
14:02:11.486…PENDING · same-day batch window 13:00 ET
in-flight○SETTLED · awaiting BAI v2 ack
expected T+0 17:00 ET○RETURNED / RECALLED / DISPUTED / TIMED_OUT
not yetIdempotency key
// idem_key = SHA-256(canonical_jcs(...))
mandate_id : "cm_9b7e2a4f01d3"
rail : "ach.ccd"
beneficiary_account : "091000121234567"
amount : 427500
currency : "USD"
value_date_bucket : "2026-05-19"
// =>
idem_key : "sha256:4b1a2c8e…f3c2" (dedup 7d)
SSM distribution
Live instructions by state · last 24h
SETTLED
14,011 · 98.5%
SUBMITTED in flight
98 · 0.7%
PENDING awaiting finality
44 · 0.3%
REJECTED at boundary
37 · 0.26%
RETURNED RDFI return
14 · 0.10%
RECALLED gSRP / camt.056
2 · 0.01%
DISPUTED handed off
1 · 0.01%
TIMED_OUT
11 · 0.08%
Rail Adapters
Pluggable submit / poll / cancel / reconcile components · routed by Settlo::Routing::v1
Adapters live
11
Submit p95
1.18s
Adapter health
11 / 11
Routing fallthroughs
8
Agentic rails
AP
v0.2 · FIDOGoogle AP2
Intent → Cart → Payment · SD-JWT + kb
/24h
9.8K
Open cart
12%
p95
48ms
v0.2 (28 Apr 2026) · "Human Not Present" enabled · revocation index synced
x4
CDP + selfCoinbase x402
EIP-3009 / Permit2 · HTTP 402
/24h
2.1K
Networks
5
p95
2.4s
Base · Solana · Polygon · Arbitrum · World Chain · facilitator pinned
ACP
Apache 2.0ACP · OpenAI + Stripe
delegate_payment · Stripe SPT
/24h
2.4K
Settle
412ms
PCI scope
PSP
SPT single-seller, single-amount, short-expiry · PSP webhook bound
V
RFC 9421Visa Trusted Agent
HTTP Message Signatures · Ed25519
A2A /24h
3.1K
Dir. status
UP
p95
62ms
Tenant op key registered in Visa directory · composes with AP2 / ACP / x402
MC
tokenizedMastercard Agent Pay
Agentic Tokens via MDES
/24h
1.4K
Issuers
38
p95
514ms
US complete (Nov 2025) · AU · NZ · EU (Santander 2 Mar 2026) live
MP
18 Mar 2026Stripe MPP
Machine Payments Protocol · streaming
/24h
680
Cadences
3
p95
380ms
one-shot / recurring / streaming · wraps x402 + ACP · Visa as design partner
Underlying rails
| Adapter | Region | Wire format | Finality | Per-tx cap | /24h | Submit p95 | Status |
|---|---|---|---|---|---|---|---|
| Fedwire Funds | US | pacs.008 / .009 / .002 | RTGS · 22h/day | no cap | 410 | 88 | UP |
| ACH (NACHA) | US | CCD / PPD / WEB / CIE | T+0 (SDA) / T+1 | $1M (→ $10M 17 Sep 2027) | 2.4K | 142 | UP |
| FedNow | US | pacs.008 / .002 / .004 | instant · 24x7 | $10M (since 12 Nov 2025) | 1.1K | 1.8s | UP |
| TCH RTP | US | pacs.008 / .002 / .004 | instant · 24x7 | $10M (since 9 Feb 2025) | 820 | 1.2s | UP |
| SEPA SCT Inst | Europe | pacs.008 + VoP | 10s SLA · 24x7 | no cap (IPR) | 2.0K | 8.4s | UP |
| SEPA SCT | Europe | pacs.008 | T+1 | no cap | 410 | 220 | UP |
| SEPA SDD B2B | Europe | pacs.003 / .004 | pull · T+1 | no cap | 140 | 280 | UP |
| UPI Collect | India | NPCI API + partner-bank | instant · 24x7 | P2M ₹5L · daily ₹10L | 680 | 2.1s | UP |
| UPI Circle (delegated) | India | OC 201-B · P2M only | instant | ₹15K / device / mo | 92 | 2.4s | UP |
| SWIFT pacs.008 (FINplus) | X-border | ISO 20022 + UETR | 1-3 days · gpi-tracked | no cap | 88 | 14.2m | UP |
| CCTP V2 (Circle) | X-border | burn-and-mint · Fast Transfer | 8-20s Fast · 13-19m std | no cap | 214 | 12.4s | UP |
11 adapters live · CCTP V1 phase-out 31 Jul 2026
Rail selection policy Settlo::Routing::v1 →Reconciliation Engine
Three-way match · mandate hash → instruction hash → rail acknowledgement
Break rate (T+1)
0.07%
Open breaks
9
Auto-matched 24h
14,189
Median resolution
4.2h
Break queue
Routed by ack format · BAI v2 · MT940/942 · camt.053/.052 · NACHA ACK · UPI settlement file · onchain receipt
9 open
| Opened | Break | Instruction | Rail | Type | Mandate amt | Ack amt | Owner | Path |
|---|---|---|---|---|---|---|---|---|
| 14:01:55 | brk_001 | ins_2240…78b1 | ACH CCD | amount_mismatch | $200.00 | $0.00 | analyst | 3-way miss · R01 |
| 13:48:11 | brk_002 | ins_91cd…e802 | SWIFT pacs.008 | reference_drift | $48,200.00 | $48,200.00 | analyst | EndToEndId mangled by correspondent |
| 12:24:38 | brk_003 | ins_44ee…3920 | SEPA SCT | fx_variance | €10,000.00 | $10,847.20 | analyst | FX outside tolerance band 0.8% |
| 11:55:02 | brk_004 | ins_77b1…4422 | x402 Base | ack_missing | $1,250.00 | n/a | auto-retry | tx not in 12-block window |
| 10:14:08 | brk_005 | ins_2202…11ab | UPI Collect | amount_mismatch | ₹52,400.00 | ₹52,381.00 | analyst | partner-bank rounded 0.04% |
| 09:32:11 | brk_006 | ins_88aa…0091 | ACH CCD | duplicate_ack | $3,118.00 | $3,118.00 ×2 | Treasurer | ODFI re-submitted file |
| 08:18:54 | brk_007 | ins_5577…aaff | SWIFT pacs.008 | ack_missing | $215,000.00 | n/a | Treasurer | 4h fallback poll · gpi UETR silent |
| 07:44:30 | brk_008 | ins_91f0…1142 | x402 Solana | reference_drift | $120.00 | $120.00 | analyst | Memo program ref not parsed |
| 07:02:08 | brk_009 | ins_42cd…aa01 | FedNow | amount_mismatch | $2.5M | $2.5M | Treasurer | pacs.002 RJCT · liquidity |
9 of 9 open breaks · auto-match ran at 14:02
Three-way match policy →Returns, Reversals & Recalls
NACHA R-codes · SEPA R-transactions · SWIFT gSRP / camt.056 · blockchain reorg
Returns 30d
14
Unauthorized rate
0.02%
WSUD windows open
3
Reversed YTD
$48.2K
NACHA returns · 30 days
R-code distribution · 2026 Operating Rules
| Date | R-code | Reason | Window | Instruction | Amount | WSUD | Action |
|---|---|---|---|---|---|---|---|
| 2026-05-19 | R01 | Insufficient Funds | 2 banking days | ins_2240…78b1 | $200.00 | n/a | auto-retry |
| 2026-05-17 | R10 | Not Authorized | 60 days | ins_0918…3344 | $1,400.00 | captured | reverse + notify |
| 2026-05-15 | R02 | Account Closed | 2 banking days | ins_71aa…8800 | $315.00 | n/a | onboarding flag |
| 2026-05-14 | R03 | No Account | 2 banking days | ins_6688…cc01 | $2,100.00 | n/a | onboarding flag |
| 2026-05-12 | R05 | Unauthorized via Corp SEC | 60 days | ins_1199…aaff | $8,420.00 | captured | reverse + investigate |
| 2026-05-09 | R07 | Authorization Revoked | 60 days | ins_aab2…1402 | $640.00 | captured | reverse · mandate retired |
| 2026-05-07 | R11 | Not in Accordance w/ Authorization | 60 days | ins_77f1…22b8 | $310.00 | captured | reverse · UEF assessed |
SEPA + SWIFT R-transactions
pacs.004 returns · gSRP / camt.056 recalls
| Date | Type | Code | Rail | Instruction | Amount | Status |
|---|---|---|---|---|---|---|
| 2026-05-19 | SCT Inst neg-resp | AB05 | SEPA SCT Inst | ins_42cd…aa01 | €500.00 | released T+10s |
| 2026-05-16 | SDD Return | AC04 | SEPA SDD B2B | ins_5588…0001 | €2,140.00 | reversed |
| 2026-05-11 | gSRP recall | PDCR | SWIFT pacs.008 | ins_91cd…e802 | $48,200.00 | pending camt.029 |
| 2026-05-08 | gSRP recall | RJCR | SWIFT pacs.008 | ins_2202…bbff | $8,800.00 | rejected by bene bank |
| 2026-05-04 | gSRP recall | ARDT | SWIFT pacs.008 | ins_6677…11dd | $1,200.00 | already returned |
| 2026-04-29 | Blockchain reorg | depth<safe | x402 Base | ins_88aa…ee01 | $340.00 | re-broadcast |
Exception Channels
Non-API rails · full dual-control · OCR audit · multi-language templates · Exception Channel Artifact (ECA) per dispatch
ECAs / 30d
42
Dual-control
100%
Locales served
6
Awaiting scan-back
3
✉
DUAL-CONTROLManual letter to bank
Server-rendered PDF · physical signature · courier reference
/30d
12
Scan-back
9
Templates
23
OCR byte-for-byte match against artifact · 7 locales
⌖
DUAL-CONTROLManual wire (bank portal)
Browser-extension / RDP capture · screen-recording evidence
/30d
2
URL/shot env
100%
Sig attest
2
Operator signed-attestation: screen matches Settlo artifact byte-for-byte
▣
BR/DOACheque issuance
Cheque-book inventory · signature-card linkage · CTS / Check 21
/30d
4
Drawn
4
Cleared
3
BR/DOA verified at draw · post-clear recon against image-cash-letter
⌬
REGULATOR-REQIn-portal manual
China · Japan · LatAm · India · regulator-required flows
/30d
24
CN · JP
18
CAMT recon
21
Full timestamp capture · post-hoc CAMT / MT statement reconciliation
Active ECAs
Open exception flows · dual-control state
3 awaiting scan-back
| Opened | ECA | Channel | Locale | Operator | Delegate | Bank | Amount | State |
|---|---|---|---|---|---|---|---|---|
| 2026-05-19 11:18 | eca_44a1 | Letter | ZH-Hans | kim.s | chen.l | ICBC Shanghai | ¥820,000 | SCAN_BACK |
| 2026-05-19 09:22 | eca_44a2 | In-portal | JA | kim.s | garcia.m | SMBC Tokyo | ¥3.4M | PORTAL_CAPTURE |
| 2026-05-18 16:08 | eca_4498 | Cheque | EN | okafor.n | nakamura.h | JPMorgan NY | $14,200 | CLEARED |
| 2026-05-18 14:31 | eca_4497 | Wire (portal) | ES | silva.r | garcia.m | BBVA Mexico | MX$240,000 | SETTLED |
| 2026-05-17 10:55 | eca_4492 | Letter | ZH-Hant | kim.s | chen.l | CTBC Taipei | NT$1.2M | SCAN_BACK |
5 active of 42 last 30d · Merkle-anchored hourly
Template library →Ledger-of-Record
Double-entry, tenant-scoped, immutable journal · not a custodial ledger · no posting is final until 3-way match closes
Journal entries / 24h
28,436
Pairs reconciled
99.93%
Durability
11×9
RPO / RTO
5m / 30m
Journal · latest entries
Sequence numbers · debit/credit · event type · finality state
| Seq | Time | Instruction | Event | Debit account | Credit account | Amount | Cy | State |
|---|---|---|---|---|---|---|---|---|
| #284,361 | 14:02:11.486 | ins_7f4c…a91e | PENDING_OUTFLOW | mandate_pending::AP | rail.virtual::ach | 4,275.00 | USD | pending |
| #284,360 | 14:02:11.218 | ins_3a18…07ce | PENDING_OUTFLOW | mandate_pending::TRY | rail.virtual::x402.base | 48,500.00 | USDC | pending |
| #284,359 | 14:02:11.012 | ins_b22d…f413 | EFFECTIVE_OUTFLOW | rail.virtual::stripe | counterparty::nbp_acme | 812.40 | USD | final |
| #284,358 | 14:02:10.943 | ins_b22d…f413 | PENDING_OUTFLOW | mandate_pending::PROC | rail.virtual::stripe | 812.40 | USD | closed |
| #284,357 | 14:02:10.498 | ins_a04c…91dd | EFFECTIVE_OUTFLOW | rail.virtual::fednow | counterparty::merch_str | 216.55 | USD | final |
| #284,356 | 14:02:10.489 | ins_a04c…91dd | PENDING_OUTFLOW | mandate_pending::PROC | rail.virtual::fednow | 216.55 | USD | closed |
| #284,355 | 14:02:09.690 | ins_5c83…2e7f | EFFECTIVE_OUTFLOW | rail.virtual::sct_inst | counterparty::FR76... | 12,940.00 | EUR | final |
| #284,354 | 14:02:09.681 | ins_5c83…2e7f | PENDING_OUTFLOW | mandate_pending::TRY | rail.virtual::sct_inst | 12,940.00 | EUR | closed |
| #284,353 | 14:01:54.890 | ins_2240…78b1 | REVERSAL | rail.virtual::ach | mandate_pending::AP | 200.00 | USD | R01 unwind |
| #284,352 | 2026-05-17 | ins_0918…3344 | REVERSAL | counterparty::445566 | mandate_pending::AP | 1,400.00 | USD | R10 WSUD |
Showing 10 of 28,436 entries today
DecisionDossier-E for ins_7f4c → →Boundary contract
Settlo does not hold funds at the platform layer
Native engine roleSmart routing + orchestration + LoR
CustodyNone · rails execute
Instrument issuanceNone
FloatZero
Dispute roleSigned forensic record only
FinalityNo posting final until 3-way match closes
DecisionDossier-E
Execution-side extension of the Identity PRD Dossier
{
"dossier_id": "de_b22df413c98a",
"mandate_id": "cm_9b7e2a4f01d3",
"instruction_id": "ins_b22d…f413",
"settlement_id": "stl_b22d2a91e",
"reconciliation_state": "matched",
"ssm_history": ["INSTRUCTED", "SUBMITTED", "SETTLED"],
"rail_ack_ref": "pi_3OqXr1AbCdEfGh",
"worm_anchor": "s3://settlo-audit-…/918274",
"merkle_root": "sha256:f1e2d3c4…b1a0"
}
Mandate Registry
Typed, signed, versioned commercial-terms objects · compiled to rail primitives by Cedar · lifecycle gated by Operational Threshold
Active mandates
412
Pending approval
7
Create gate p95
142ms
Templates
24
FX drift breaches
2
Compile coverage
100%
By type
Distribution across the six Mandate types
UNIT_RATE per-unit pricing
184 · 44.7%
SUBSCRIPTION recurring
98 · 23.8%
WATERFALL_SPLIT multi-party
62 · 15.0%
FIXED_FEE one-time, evidence-gated
31 · 7.5%
ASYNC deferred · exposure-capped
22 · 5.3%
EXTERNAL_INSTRUCTION SWIFT/SEPA/cheque
15 · 3.6%
Approval queue
Pending Treasurer co-sign above Operational Threshold
5 awaiting
M_8b1d…7c4a · UNIT_RATE · ModelCo service units
$50K/mo cap · counterparty did:web:modelco.ai · rate-table-bound · drafted by patel.a
SLA 8h · Treasurer garcia.m
M_91cd…2e0f · WATERFALL_SPLIT · model 60 / tool 25 / platform 15
3-party split · $500K monthly ceiling · banker's rounding · residual to model
SLA 6h · Treasurer garcia.m
M_4488…1102 · ASYNC · supplier-pay-9 · monthly post-paid
Max unsettled exposure $250K · 5th business day cadence · drafted by chen.l
SLA 12h · Treasurer garcia.m
M_aaff…3340 · SUBSCRIPTION · $99/seat · 25 seats included
Renewal annual · overage at $4/seat via Stripe Billing Meter
SLA 4h · Treasurer garcia.m
M_7711…ddee · FIXED_FEE · deal-closed success fee · $50K
Evidence predicate: signed term sheet PDF hash match
SLA 24h · Asst Treas (under Op Threshold)
All mandates
Showing 1 to 12 of 412 · click row for full mandate detail
| Mandate | Type | Counterparty | Principal (agent) | Nom / Settle | Period cap | Effective | State | Compiled to |
|---|---|---|---|---|---|---|---|---|
| M_8b1d…7c4a | UNIT_RATE | did:web:modelco.ai | payables-bot | USD / USD | $50K / mo | 2026-05-20 | PENDING | ACH · SEPA SCT |
| M_3a18…07ce | UNIT_RATE | did:web:globex.com | research-bot-7 | USD / USD | $25K / mo | 2026-05-01 | ACTIVE | Stripe Invoicing |
| M_91cd…2e0f | WATERFALL | did:web:platform.example | checkout-orchestrator | USD / USD | $500K / mo | 2026-05-20 | PENDING | Stripe Connect |
| M_b22d…f413 | WATERFALL | did:web:razorpay-route | indian-ap-bot | INR / INR | ₹50L / mo | 2026-04-15 | ACTIVE | Razorpay Route |
| M_4488…1102 | ASYNC | urn:duns:123456789 | supplier-pay-9 | USD / USD | $250K unsettled | 2026-05-20 | PENDING | EXT_INSTR + ACH |
| M_aaff…3340 | SUBSCRIPTION | did:web:settlo-saas | account-mgr | USD / USD | $99 × 25 seats | 2026-05-20 | PENDING | Stripe Subscription |
| M_7711…ddee | FIXED_FEE | did:web:bcg.com | deal-closer-2 | USD / USD | $50,000 one-time | 2026-05-19 | PENDING | Stripe Invoicing |
| M_aae2…1801 | UNIT_RATE | did:web:initech.com | embedding-svc | USD / USD | $15K / mo | 2026-04-22 | ACTIVE | SEPA SCT |
| M_5c83…2e7f | WATERFALL | did:web:basf.com | basf-spot-fx-1 | EUR / USD | €80K / mo | 2026-03-12 | ACTIVE | Stripe Connect |
| M_19f6…b8a3 | UNIT_RATE | did:web:umbrella.co | research-aux | USD / USD | $8K / mo | 2026-04-08 | ACTIVE | ACH |
| M_ee10…7782 | EXT_INSTR | did:web:jpm-treas | jpm-onboarding-flow | USD / USD | unconstrained | 2026-03-01 | ACTIVE | SWIFT / MT940 |
| M_0c4f…1ea2 | WATERFALL | did:web:macquarie.com | macquarie-am-rebal | AUD / USD | A$120K / mo | 2026-04-30 | SUSPENDED | FX drift > 50 bps |
Page 1 of 35 · 412 active · 22 suspended · 7 pending
View all mandates →UNIT_RATE · ModelCo service units
M_8b1d7c4a3201f9e8 · per-unit pricing · rate-table-bound · PENDING_APPROVAL
Type
UNIT_RATE
Period cap
$600K/yr
Counterparty
modelco.ai
Rate-table hash
sha256:7c1b…
Rate card
USD per service unit · banker's rounding · rate-table-pinned
Unitservice_unit
Per1 unit
Standard rate$120.00 / unit
Overage rate$180.00 / unit (overage)
Volume tier$108.00 / unit (volume) 10% disc.
Currency nominal / settleUSD / USD
FX drift bandN/A · same-currency
Period caps & thresholds
Annual cap$600,000.00
Monthly cap$60,000.00
Early warning80%
Hard stop100%
Operational Threshold$25K/mo · co-sign req'd ✓
Mandate envelope
{
"mandate_id": "01J9Z2X7TFR3WP4RT0K8VBQ7M5",
"tenant_id": "ten_8b1d…",
"type": "UNIT_RATE",
"principal": "spiffe://settlo/agent/treasury/payables-bot",
"counterparty": "did:web:modelco.ai",
"rate_card": {
"unit": "service_unit",
"ratetable_hash": "sha256:7c1b…",
"prices": [
{"tier":"standard", "unit_price_micro":"120000000"},
{"tier":"overage", "unit_price_micro":"180000000"},
{"tier":"volume", "unit_price_micro":"108000000", "above_units": 2500}
]
},
"period_caps": {"annual_max_usd":"600000.00", "early_warning_pct": 80},
"effective_from": "2026-05-20T00:00:00Z",
"signature": {"alg":"Ed25519", "kid":"settlo-hsm-2026Q2"}
}
Compilation & checks
Cedar static validator · rail-adapter plan
Cedar static validator
✓Schema type-check against Mandate envelope
12 ms✓Period caps bounded
3 ms✓Symbolic verification: monthly_cap reachable
48 ms✓Rate-table hash present (unit-priced)
1 ms✓Cedar deny-by-default policy emitted
22 msRail compilation
✓ACH (NACHA) · monthly arrears, Net 45
primary✓SEPA SCT · cross-border EUR settlement
fallback✓Stripe Billing Meter · end-of-cycle invoice
batchApproval chain
✓DRAFT created · patel.a (Asst Treasurer)
14:01:12✓Static validation passed
14:01:13✓Above Op Threshold ($25K/mo) · routed to Treasurer
14:01:14!PENDING_APPROVAL · awaiting garcia.m co-sign (FIDO2)
SLA 8h○ACTIVE · HSM-seal & Dossier-T anchor
on co-signLinked artefacts
Metering Engine
CloudEvents v1.0.2 ingestion · authoritative & reconciliatory modes · streaming
Events / 24h
142.4M
Ingest p95
38ms
Throughput
8,420/s
Dedup rate
0.31%
Sig-verify
100%
Late-data quarantine
82
Live CloudEvents
v1.0.2 envelopes · auto-refresh 1s · (source, id) dedup window 24h
| Time | Type | Source | Subject (agent) | Mandate | Data | Sig | Status |
|---|---|---|---|---|---|---|---|
| 14:02:11.918 | unit | billing.modelco.ai | payables-bot | M_8b1d…7c4a | units:42 · lines:7 · vol:3 | Ed25519 | ACCEPTED |
| 14:02:11.802 | unit | billing.globex.com | research-bot-7 | M_3a18…07ce | svc-tier2 · units:18 | Ed25519 | ACCEPTED |
| 14:02:11.624 | unit | billing.modelco.ai | payables-bot | M_8b1d…7c4a | units:31 · lines:5 · vol:0 | Ed25519 | ACCEPTED |
| 14:02:11.341 | proc_hour | ops.initech.com | training-coord | M_44e2…1801 | proc:1.0h · job_8821 | ECDSA P-256 | ACCEPTED |
| 14:02:11.118 | outcome | crm.acme.com | deal-closer-2 | M_7711…ddee | deal_closed · evidence_uri | Ed25519 | ACCEPTED |
| 14:02:10.802 | unit | billing.modelco.ai | payables-bot | M_8b1d…7c4a | units:12 · lines:2 · vol:4 | Ed25519 | ACCEPTED |
| 14:02:10.412 | duration | field.acme-svc.com | voice-narrator | M_aae2…1801 | 38.2h · wo_4488 | Ed25519 | ACCEPTED |
| 14:02:10.121 | unit | billing.modelco.ai | payables-bot | M_8b1d…7c4a | units:24 · lines:6 · vol:2 | Ed25519 | DEDUP |
| 14:02:09.882 | unit | billing.umbrella.co | research-aux | M_19f6…b8a3 | svc-tier3 · units:9 | Ed25519 | ACCEPTED |
| 14:02:09.412 | unit | billing.modelco.ai | payables-bot | M_8b1d…7c4a | units:55 · lines:11 | Ed25519 | RATETABLE_DRIFT |
10 of 142,442,108 events today
OpenMeter-parity query API →Sample CloudEvent v1.0.2
Latest accepted · unit meter for M_8b1d…7c4a
{
"specversion": "1.0",
"type": "unit",
"id": "ev_01J9Z3A2QYV8ZK0M1ENR2P4HXB",
"time": "2026-05-20T14:02:11.918Z",
"source": "https://billing.modelco.ai/v1/usage",
"subject": "spiffe://settlo/agent/treasury/payables-bot",
"datacontenttype": "application/json",
"data": {
"line_item": "ModelCo service units · standard",
"ratetable_version": "modelco-unitdef-v1",
"billable_units": 42,
"overage_units": 7,
"discounted_units": 3
},
"settlosig": {
"alg": "Ed25519",
"kid": "ctr-modelco-2026Q2"
}
}
Aggregations supported
SUM
COUNT
AVG
MIN
MAX
LAST
OpenMeter-parity
JSONPath value extraction (e.g. $.overage_units) · windowed query HOUR · DAY · MONTH
Meter streams
Active across the 5 metering granularities
| Stream ID | Granularity | Source | Bound mandate(s) | Mode | Events 24h | Aggregation | Status |
|---|---|---|---|---|---|---|---|
| mtr_units_modelco | service_unit | billing.modelco.ai | M_8b1d…7c4a | authoritative | 48.2M | SUM(units) · SUM(overage) · SUM(vol) | healthy |
| mtr_units_globex | service_unit | billing.globex.com | M_3a18…07ce | reconciliatory | 22.1M | SUM(units) · SUM(overage) | healthy |
| mtr_units_umbrella | unit | billing.umbrella.co | M_19f6…b8a3 | authoritative | 412K | COUNT(*) | healthy |
| mtr_proc_hours_initech | proc_hour | ops.initech.com | M_44e2…1801 | reconciliatory | 1.2M | SUM(proc_hours) | healthy |
| mtr_outcome_dealclosed | outcome | crm.acme.com | M_7711…ddee | authoritative | 8 | COUNT(*) w/ evidence_handle | healthy |
| mtr_field_hours_acme | duration | field.acme-svc.com | M_aae2…1801 | reconciliatory | 214K | SUM($.field_hours) | drift +0.12% |
6 active streams · 5 granularities covered
Daily reconciliation →Daily Reconciliation
Settlo shadow meter vs counterparty meter · daily cutover 23:59 UTC · Materiality Threshold escalation
Recon today
82 / 82
Within tolerance
78
Breaks (analyst)
3
Materiality breaches
1
Reconciliation status · last 7 days
Per-meter delta vs counterparty file
| Day | Meter | Mode | Settlo total | Counterparty total | Δ | Δ % USD | State |
|---|---|---|---|---|---|---|---|
| 2026-05-20 | mtr_units_modelco | auth | 42,108 units | 42,107 units | +1 unit | +$0.0017 | PASS |
| 2026-05-20 | mtr_units_globex | recon | 18,402 units | 18,400 units | +2 units | +$0.014 | PASS |
| 2026-05-20 | mtr_proc_hours_initech | recon | 1,184,920 s | 1,184,720 s | +200 s | +$148.00 | BREAK · analyst |
| 2026-05-20 | mtr_field_hours_acme | recon | 214,108 s | 213,890 s | +218 s | +$8.72 | BREAK · analyst |
| 2026-05-20 | mtr_outcome_dealclosed | auth | 8 outcomes | 10 outcomes | −2 outcomes | −$100,000 | MATERIALITY |
| 2026-05-19 | mtr_units_modelco | auth | 41,820 units | 41,820 units | 0 | $0.00 | PASS |
| 2026-05-19 | mtr_units_umbrella | auth | 412,108 req | 412,102 req | +6 req | +$0.06 | PASS |
| 2026-05-18 | mtr_units_globex | recon | 18,118 units | 18,118 units | 0 | $0.00 | PASS |
Cutover 23:59 UTC · Late-Data Window 48h
Export delta files →Materiality breach · open
mtr_outcome_dealclosed · pending Treasurer
auto-suspended
MandateM_7711…ddee
Counterpartydid:web:bcg.com
Detected2026-05-20 23:59:14 UTC
Paged at23:59:42 (T+28s · SLA <60s ✓)
Auto-suspendM_7711…ddee · new settlements blocked
Investigation ownergarcia.m (Treasurer)
Delta payload
{
"report_id": "rec_2026-05-20_outcome_dealclosed",
"meter_stream": "mtr_outcome_dealclosed",
"day": "2026-05-20",
"settlo_outcomes": 8,
"counterparty_outcomes": 10,
"delta": -2,
"delta_usd": "-100000.00",
"materiality_threshold_usd": "50000.00",
"materiality_breach": "true",
"format": "json-delta-v1"
}
Dispute Register
90-day default investigation window · VAMP / CE 3.0 / SEPA SDD / NACHA windows recognised · signed forensic record only
Open
5
Resolved 30d
14
VAMP ratio (30d)
0.42%
Avoided 30d
$184K
VAMP fees YTD
$0
Median resolution
12d
Active disputes
Click row for evidence bundle and acquirer submission status
| Opened | Case | Channel | Mandate | Counterparty | Amount | Reason | Window | State | Owner |
|---|---|---|---|---|---|---|---|---|---|
| 2026-05-19 | DSP-2026-0042 | Visa CE 3.0 | M_aaff…3340 | cust-77a8 | $4,275.00 | 10.4 fraud | 90d | EVIDENCE | Dispute Analyst |
| 2026-05-17 | DSP-2026-0041 | NACHA R10 | M_4488…1102 | urn:duns:123456789 | $1,400.00 | not authorized | 60d | UNAUTH · WSUD | garcia.m |
| 2026-05-15 | DSP-2026-0040 | SEPA SDD auth | M_5c83…2e7f | FR76 1010 7000 03… | €2,140.00 | refund request | 8w window | PROCESSING | patel.a |
| 2026-05-12 | DSP-2026-0039 | Visa CE 3.0 | M_b22d…f413 | cust-31bb | $812.40 | 10.4 fraud | 90d | EVIDENCE WIN | Dispute Analyst |
| 2026-05-08 | DSP-2026-0038 | NACHA R11 | M_3a18…07ce | urn:duns:445566778 | $310.00 | not per auth | 60d | UEF assessed | patel.a |
5 of 14 active in last 30 days · acquirer submission via Visa Resolve Online
VAMP dashboard →DSP-2026-0042 · CE 3.0 evidence bundle
$4,275 chargeback · 10.4 fraud · awaiting submission
Compelling Evidence 3.0 · 4 core data elements
✓User ID · matches 4 prior tx (≥120d history)
cust-77a8✓IP address · matches 6 prior tx
198.51.100.42✓Device ID / fingerprint · matches 8 prior tx
fpr_8ab1…−Shipping address · digital good (N/A)
n/aVisa CE 3.0 (15 Apr 2023): at least 2 of 4 core elements must match prior transactions; one must be IP or device ID · ✓ satisfied · remedy expansion to multi-merchant effective 24 October 2026
Submission
AcquirerStripe (VRoL)
Issuer reasonVCR 10.4 (fraud)
Evidence due2026-05-26 (T+7d)
ConfidenceHIGH · 3/4 with IP+device
Predicted outcomein customer favour
VAMP & rail-window reference
Active enforcement thresholds · SEPA & NACHA windows
Visa VAMP · Excessive merchant
US · Canada · EU · APAC effective 1 Apr 2026
1.5% · $8/eventUS · Canada · EU · APAC effective 1 Apr 2026
VAMP monitoring floor
combined TC40 + TC15
≥ 1,500 events / mocombined TC40 + TC15
Visa CE 3.0 base
effective 15 Apr 2023
2-of-4 elementseffective 15 Apr 2023
CE 3.0 multi-merchant
Visa Core Rules 18 Apr 2026 ed.
eff. 24 Oct 2026Visa Core Rules 18 Apr 2026 ed.
SEPA SDD authorised refund
8 weeksSEPA SDD unauthorised
13 monthsNACHA unauthorised (R05/R07/R10/R11/R29/R51)
consumer extended
60 days · WSUDconsumer extended
NACHA unauthorised rate cap
0.5%Settlo default window
90 days from settlementICC Expedited Arbitration
Art 30 + App VI Art 1(2)
≤ $3M defaultArt 30 + App VI Art 1(2)
Rate cards, Promos & Volume Commits
Tiered / graduated pricing · Stripe-style coupons · AWS-EDP-style commits with drawdown · dimensional pricing
Rate cards
38
EDP commits
$3.2M
Active promo codes
22
True-up due
1
Tiered / graduated rate cards
Volume-bracketed pricing with rebate clawback
| Rate card | Bound mandate | Shape | Tiers | Clawback | State |
|---|---|---|---|---|---|
| RC_modelco_volume_2026 | M_8b1d…7c4a | tiered | 0-10M · 10-50M · 50M+ | enabled · 90d | ACTIVE |
| RC_globex_graduated | M_3a18…07ce | graduated | 0-1M · 1-10M · 10-100M · 100M+ | enabled · 60d | ACTIVE |
| RC_umbrella_flat | M_19f6…b8a3 | flat | $0.20 / req | n/a | ACTIVE |
| RC_initech_dimensional | M_44e2…1801 | dimensional | region × util-class | n/a | ACTIVE |
| RC_fieldsvc_tiered | M_aae2…1801 | tiered | 0-1Kh · 1-10Kh · 10Kh+ | n/a | ACTIVE |
| RC_bcg_dealfee | M_7711…ddee | flat | $50K / outcome | n/a | PENDING |
Volume commitments (AWS-EDP style)
Multi-quarter spend commits with drawdown & quarterly true-up
CMT_modelco_2026 $1.2M / yr · Q2 of 4
$684K / $1.2M
CMT_globex_2026 $800K / yr · Q2 of 4
$412K / $800K
CMT_initech_proc $500K / yr · Q2 of 4
$240K / $500K
CMT_bcg_advisory $700K / yr · Q2 of 4 · clawback risk
$210K / $700K
True-up calendar
!Q2 true-up · CMT_bcg_advisory · projected miss $115K
due 2026-07-15✓Q2 true-up · CMT_modelco_2026 · on track +8%
due 2026-07-15✓Q2 true-up · CMT_globex_2026 · on track +4%
due 2026-07-15✓Q2 true-up · CMT_initech_proc · on track
due 2026-07-15Promo codes & coupons
Stripe-style Coupon (rule) + Promotion Code (redeemable artefact) · redemption rate-limited per code & per principal
| Code | Coupon (rule) | Bound to | Redemption limit | Per principal | Redeemed | Expires | State |
|---|---|---|---|---|---|---|---|
| DESIGN-PARTNER-2026 | 25% off · forever | Tenant-scope | ∞ | 1 | 18 / ∞ | 2027-01-01 | ACTIVE |
| PILOT-PACTUM-Q2 | $2,500 credit | M_4488…1102 | 10 | 1 | 3 / 10 | 2026-06-30 | ACTIVE |
| VOICE-FREE-MIN-1K | 1,000 minutes free | M_aae2…1801 | 500 | 1 | 142 / 500 | 2026-08-31 | ACTIVE |
| DEAL-CLOSER-LAUNCH | 50% off first deal-fee | M_7711…ddee | 25 | 1 | 0 / 25 | 2026-12-31 | ACTIVE |
| BLACK-FRIDAY-25 | $500 credit | Tenant-scope | 100 | 1 | 100 / 100 | 2025-11-30 | EXPIRED |
5 of 22 shown · velocity check on per-principal redemption
Cedar deny-by-default policy →DecisionDossier-T · Audit Linkage
Mandate-scoped tamper-evident chain · extends Dossier-E with Merkle anchoring · daily seal · 7-year SOX retention
Dossier-T entries (24h)
14,891
Merkle root (today)
f01c…3b91
Retention
7yrs
Seal integrity
100%
Dossier-T entries · live
Each Mandate event seals one signed entry into the per-tenant Merkle log
| Sealed at | Entry | Event | Mandate | Actor | Prev hash | Merkle day | Seal |
|---|---|---|---|---|---|---|---|
| 14:02:11.486 | ddt_01J9Z3B… | METER_EVENT | M_8b1d…7c4a | ctr-modelco | sha256:7c1b… | 2026-05-20 | Ed25519 |
| 14:02:11.218 | ddt_01J9Z3A… | SETTLEMENT_INSTR | M_3a18…07ce | settlo-engine | sha256:0c4f… | 2026-05-20 | Ed25519 |
| 14:01:42.802 | ddt_01J9Z2Y… | MANDATE_PENDING | M_8b1d…7c4a | patel.a | sha256:f01c… | 2026-05-20 | Ed25519 |
| 14:01:12.418 | ddt_01J9Z2X… | MANDATE_CREATED | M_8b1d…7c4a | patel.a | sha256:c8f3… | 2026-05-20 | Ed25519 |
| 13:48:11.302 | ddt_01J9Z1F… | RECON_BREAK | M_7711…ddee | settlo-engine | sha256:b1e2… | 2026-05-20 | Ed25519 |
| 11:18:02.118 | ddt_01J9YPL… | DISPUTE_OPENED | M_aaff…3340 | visa-vrol | sha256:7728… | 2026-05-20 | Ed25519 |
| 09:14:02.802 | ddt_01J9YKQ… | MANDATE_APPROVED | M_aae2…1801 | garcia.m | sha256:4488… | 2026-05-20 | Ed25519 |
| 2026-05-19 23:59:14 | ddt_01J9XZY… | MERKLE_ROOT | tenant-wide seal | settlo-hsm | root:f01c…3b91 | 2026-05-19 | Ed25519 + WORM |
8 of 14,891 entries today · daily Merkle root sealed at 23:59 UTC
Dossier-E extension · Audit ▸ Decision Dossiers →Sample Dossier-T entry · sealed
MANDATE_APPROVED for M_aae2…1801 at 09:14:02
{
"dossier_id": "ddt_01J9YKQH8M…",
"mandate_id": "01J9Z2YAAE21801",
"event": "MANDATE_APPROVED",
"actor": "spiffe://settlo/human/treasurer/garcia.m",
"ts": "2026-05-20T09:14:02Z",
"prev_hash": "sha256:4488e2a1801f9c3d…b1a0",
"merkle_root_day": "2026-05-20",
"seal": {
"alg": "Ed25519",
"kid": "settlo-hsm-2026Q2",
"sig": "4f81c3a9…3c9a"
}
}
Cryptographic surface
Algorithms & key rotation per PRD §12
Mandate signingEd25519 · HSM (JCS canon.)
Meter event signingEd25519 (default) / ECDSA P-256
Dossier-T sealingEd25519 + Merkle root daily
Rate-table integritySHA-256 of canonical config
Webhook callbacksRFC 9421 HTTP Message Sig
HSM rotation≤ 365 days · rolling re-seal
WORM retention7 years · 11×9 durability
Compliance anchors
SOX 404 ITGC
SOC 2 CC1 to CC9
DORA Arts 5/6/9/17/25/28/30
ISO/IEC 42001:2023
PCI DSS 4.0.1 Req 10
NIST SP 800-53 AU-2/12
Onboard agent
Register a new AI agent into Acme Corp · ends in PENDING_TREASURER_APPROVAL
Choose identity source
Where will this agent's identity be anchored? · 5 BYOI providers connected · click a card to select
EN
Microsoft Entra Agent ID
WX
IBM watsonx Orchestrate
SN
ServiceNow AI Agent
SF
Salesforce Agentforce
NA
Settlo Native (SPIRE)
SP
SPIFFE federated
Agent details
Identify the agent for the registry · these fields appear in every decision dossier
Short, descriptive · lowercase, hyphens, ≤ 40 chars · visible in logs
From Entra Admin Center → Enterprise Applications → Object ID
Drives entitlement match
Owning operator · drives co-sign rule
DUNS, DID, or pattern
Override per-transaction
Caps & policy
Hard limits enforced at decision time · Cedar deny-by-default · over-threshold settlements require co-sign
Spend caps
Hard ceiling on a single decision
Rolling 24h aggregate
Co-sign rule
Single-tx threshold that triggers FIDO2 step-up by garcia.m
Sliding 1h window
Sliding 24h
Calendar day
Mandate-spec acceptance
Which mandate specs may this agent present to the decision engine?
Attestation
Bind the agent's identity to a hardware-attested execution environment · PCR / MRENCLAVE measured at each decision
Choose attestor
AW
AWS Nitro Enclaves
AZ
Azure Confidential VM
SG
Intel SGX
NA
No attestation
Expected measurement
Settlo verifies this matches the attestation doc on every decision
Nitro attestor reachable
verified PCR8 against the configured enclave image · 142 ms round-trip
Review & submit
Final read-only snapshot · submitting triggers FIDO2 step-up by Treasurer garcia.m
BYOI sourceMicrosoft Entra Agent ID
Object IDaaaa-1111-…-dddd
Agent nameap-automation-7f4d
PurposeAP_AUTOMATION
Operatorsmith.j · Asst Treas
Default railACH (NACHA CCD)
Per-tx cap$5,000
Per-day cap$25,000
Per-month cap$400,000
Co-sign >$10,000
AttestorAWS Nitro Enclaves
AcceptsAP2, x402
What happens next
1Cedar policy compiled and HSM-signed (Ed25519)
~120ms2Approval routed to garcia.m (over Op Threshold)
FIDO2 step-up3DecisionDossier-I entry sealed and WORM-anchored
on approval4Agent appears in registry as ACTIVE
≤ 5s
Step 1 of 5
Verify mandate
Ad-hoc mandate verification · paste payload · runs all 8 checks · produces a sealed verification report
1 · Mandate payload
Paste an AP2 Cart / Payment, x402 PaymentPayload, ACP DelegToken, or Settlo Native mandate
Click to switch parser
AP2 Cart
AP2 Payment
x402 Payload
ACP DelegTok
Settlo Native
Auto-detect format · canonicalised per RFC 8785 JCS before verification
// AP2 Cart Mandate · SD-JWT skeleton
{
"alg": "ES256",
"typ": "vc+sd-jwt",
"kid": "entra:aaaa-1111-…-bbbb"
}.{
"iss": "https://creds.acme.com",
"vct": "AP2/CartMandateV02",
"cart_id": "cm_9b7e2a4f01d3",
"checkout_hash": "sha256:4b1a…f3c2",
"amount": { "value":"4275.00", "currency":"USD" },
"payment_method": {
"type": "push",
"rail": "ach.ccd",
"beneficiary": "urn:duns:123456789"
},
"intent_expiry": "2026-05-20T18:30:00Z",
"agent_oid": "aaaa-1111-bbbb-2222-cccc3333dddd"
}.eyJhbGc…ZHpRT2x6 // signature
2 · Verification result
cm_9b7e2a4f01d3 · verified 92 ms
Pass
Spec detectedAP2 / Cart Mandate v0.2
Issuerhttps://creds.acme.com
Bound to agentap-automation-7f4c (oid aaaa-1111-…)
Counterpartyurn:duns:123456789
AmountUSD 4,275.00 · ACH push
Expiry2026-05-20 18:30 UTC · fresh
Checks · 8 / 8 passed
✓ES256 signature verified against Entra JWKS
11 ms✓Checkout-hash bound to enclosed Cart JWT
4 ms✓Cart constraints type-checked
9 ms✓Intent expiry within freshness window
2 ms✓Revocation: not in mandate_revoked index
18 ms✓Agent binding to oid · BYOI source UP
8 ms✓Operator cap: $4,275 / $25,000 day (17%)
5 ms✓Attestation fresh (Nitro PCR8 ✓)
14 msSigned verification report · sealed
{
"verification_id": "vr_01J9Z3MAND8210e",
"mandate_id": "cm_9b7e2a4f01d3",
"result": "pass",
"checks_total": 8,
"checks_passed": 8,
"latency_ms": 92,
"sealed_at": "2026-05-20T14:02:11Z",
"signed_by": "ed25519:settlo-verify-2026Q2"
}
2 · Verification result
Waiting for you to run the 8 checks
◇
No verification run yet
Paste a mandate payload on the left, pick your verification options, then click Run all 8 checks. The result and signed report will appear here.
Add identity provider
Federate a new BYOI source · agents from this provider will route through the same decision engine
Choose provider
5 already connected · pick from the catalog or add a custom OIDC source
G
Google ADK
⛓
LangChain Hub
C
CrewAI Enterprise
⌘
Cognition Devin
N
ServiceNow Now Assist
A
AutoGen Studio
L
Lyzr.ai
U
UnifyApps
+
Custom OIDC source
Display name & region
Shown in the console
Token verification anchor
us-east-1
eu-west-1
ap-south-1
Trust anchor
How Settlo will verify tokens issued by LangChain Hub · JWKS auto-rotation enabled by default
Issuer & keys
The iss claim must match this value exactly
JSON Web Key Set endpoint · will be auto-fetched every 24h
Verification config
RS256
ES256
Ed25519
Tokens missing any of these will be rejected at the boundary
Identity mapping
Map LangChain claims to Settlo agent identity primitives · deny by default if claim missing
Which token claim contains the LangChain agent identifier?
sub
deployment_id
agent_id
Custom claim path
Tenant & namespace
Must map to a known Settlo tenant
Synthesized identity for downstream
Claim → property mapping
| Settlo property | Source claim | Transform | Required |
|---|---|---|---|
| agent_id | $.sub | n/a | yes |
| tenant_id | $.org_id | lookup | yes |
| deployment | $.deployment_id | n/a | yes |
| env | $.env | lower() | recommended |
| labels | $.metadata.labels | n/a | optional |
| model | $.model | n/a | optional |
Allow-list (optional)
Comma-separated · leave blank to allow all deployments under tenant
Test connection
Round-trip a JWT from LangChain Hub through Settlo · verifies trust anchor and mapping end-to-end
Settlo will verify signature, claim mapping, and emit a mock decision
// Header
{ "alg": "RS256", "kid": "lc-prod-2026Q2" }
// Payload
{
"iss": "https://hub.langchain.com",
"sub": "agent_8b2d_payables_router",
"aud": "settlo.acme.tenant_01HY8K3PQR",
"org_id": "acme-corp",
"deployment_id": "dep_a1b2c3",
"env": "prod",
"exp": 1747603600
}
Trust anchor verified · 8 / 8 checks passed
RS256 signature ok · JWKS rotated 2h ago · SPIFFE-ID synthesized to spiffe://settlo/lc/agent_8b2d_payables_router · round-trip 184ms
Sample resolved identity
{
"agent_id": "agent_8b2d_payables_router",
"tenant_id": "ten_8b1d…",
"deployment": "dep_a1b2c3",
"env": "prod",
"spiffe_id": "spiffe://settlo/lc/agent_8b2d_payables_router",
"verified_at": "2026-05-20T14:02:11Z"
}
Review & activate
Tenant Admin co-sign required · once active, LangChain agents can present tokens to /v1/policy:decide
ProviderLangChain Hub
Displaylangchain-prod
Regionus-east-1
AlgorithmRS256
Issuerhub.langchain.com
JWKS…/jwks.json
Agent ID claim$.sub
Tenant claim$.org_id
SPIFFE template…/lc/{{sub}}
Required claimsiss · sub · aud · exp
Allow-listall deployments
Test8/8 passed
What happens next
1Trust anchor written to identity store
~50ms2Tenant Admin notified (FIDO2 step-up required)
co-sign3Provider appears in BYOI Connections as ACTIVE
on co-sign4DecisionDossier-I sealed with provider config hash
async
Step 1 of 5
Add payment connector
Connect a new payment rail · rail-agnostic · Settlo signals, the rail executes
Choose rail
4 already connected · rail-agnostic catalog covers cards, bank rails, stablecoins, and cross-border
All
US
Europe
India
Cross-border
Stablecoin
United States
F
FedNow
R
TCH RTP
W
Fedwire Funds
Europe
SI
SEPA SCT Inst
SD
SEPA SDD B2B
India
U
UPI Collect
C
UPI Circle
Stablecoin & cross-border
C2
CCTP V2 (Circle)
S
SWIFT pacs.008
+
Custom rail adapter
Display name
Shown in connector list and decision dossiers
Credentials
FedNow participation credentials · HSM-bound · never logged · stored in vault://settlo/conn/fednow/…
Routing & BIC
9 digits · from Federal Reserve participant directory
Settlement account at the Federal Reserve
FedLine Solution
FedLine Direct (VPN)
FedLine Web Plus (API)
Third-party service provider
Stored HSM-bound · never displayed after save
mTLS
FedLine endpoint reachable
mTLS handshake ok · participant account verified active · 96ms round-trip
Routing & caps
When should the routing engine prefer this rail? · what caps apply per mandate?
Priority
Lower number = higher priority · current order: TCH RTP (1) · FedNow (2) · ACH SDA (3) · SWIFT (4)
1 (primary)
2 (secondary)
3
4
When to select
Caps
Fed-set ceiling since 12 Nov 2025
FI-configured override · default $100K
Hard ceiling per signed mandate
Across all mandates routed here
Fallthrough on failure
Webhook & reconciliation
Settlement acknowledgements feed the 3-way match · BAI v2, MT940, camt.053, pacs.002 supported
Inbound webhook
Configure this URL at the FedLine portal as the pacs.002 status destination
RFC 9421 HTTP Sig
Shared secret HMAC
mTLS client cert
Acknowledgement format
Reconciliation
Field used to bind ack to instruction
UETR
EndToEndId
TxId
When ack not received in window
Real-time webhook
Webhook + 4h fallback poll
Polling only
Test & activate
Send a $1.00 test transaction to your own settlement account · verifies submit → ack → reconcile end-to-end
Test transaction
Defaults to your own participant account
Test passed · round-trip 1.4 s
pacs.008 submitted · pacs.002 ACSC received · 3-way match closed · LoR entry sealed
Settlement trace
✓SIO constructed and HSM-signed (Ed25519)
42 ms✓pacs.008 submitted to FedLine
216 ms✓pacs.002 ACSC ack received (status: settled)
1.18 s✓3-way match (mandate ⨯ instruction ⨯ ack) closed
8 ms✓LoR entry & DecisionDossier-E sealed
31 msWhat happens next
Submitting for activation will route the connector config to Treasurer garcia.m for co-sign. Once approved, FedNow will appear in the Payment rails list as ACTIVE and become available for mandate routing within ~5 seconds.
Step 1 of 5
New entitlement
Grant an operator the authority to act on a defined scope · ends in PENDING_CFO_COSIGN
Choose operator
Pick the human operator who will hold this entitlement · bound to a BR/DOA tier
GM
garcia.m
SJ
smith.j
PA
patel.a
KS
kim.s
CL
chen.l
ON
okafor.n
Entitlement label
Short, human-readable name for this grant · shows in the registry
Scope of authority
Which agents may act · against which counterparties · over which rails
Agents covered
Specific agents
All agents under purpose
Pattern match
Any number, comma-separated · resolved against the agent registry
basf-spot-fx-1
fx-hedging-bot-eur
fx-hedging-bot-gbp
fx-hedging-bot-jpy
Counterparties
Pattern
Specific list
Any whitelisted
Rails allowed
Currencies
USD
EUR
GBP
JPY
INR
AUD
Caps
Hard ceilings · aggregated across all agents under this entitlement · rolling windows
Per-transaction
Ceiling on a single decision
Useful for FX hedging volume floor
Rolling aggregates
Early-warning thresholds
60% utilization
80% utilization
90% utilization
95%
100% utilization
105% (grace)
Escalation & co-sign
When this entitlement requires additional human approval beyond the operator
Co-sign rules
FIDO2 step-up by CFO required above this
CFO
Treasurer
CEO
CFO + GC
Automatic escalation
When to page on top of the per-decision rule
Review cadence
Annual
Quarterly
Monthly
7 days past due
14 days past due
30 days past due
Review & submit
Submitting routes to CFO for FIDO2 co-sign · ends in PENDING until co-signed
Operatorgarcia.m · Treasurer
Labeltreasury-fx-hedging-q3
PurposeFX_HEDGING
Effective2026-05-21
Agents4 selected
Counterpartydid:web:*.bank
RailsSEPA SCT Inst, FedNow, SWIFT
CurrenciesUSD, EUR, GBP, JPY
Per-tx$2,000,000
Per-day$10,000,000
Per-month$180,000,000
Co-sign >$500K · CFO
Early warn80% utilization
Re-attestQuarterly
What happens next
1Cedar policy compiled, validator green
~90ms2CFO paged for co-sign (FIDO2 + WebAuthn)
SLA 4h3Entitlement appears under garcia.m as ACTIVE
on co-sign4DecisionDossier-I sealed and WORM-anchored
async
Step 1 of 5
Publish new BR/DOA version
Banking Resolution & Delegation of Authority · supersedes the current effective version once CFO + GC co-sign
Source documents
Upload the signed BR/DOA documents · PDF hash sealed into the version manifest
Version label
Format: vYYYY.MM · current latest v2026.05
Files
Signed PDF from the Board · max 25 MB · SHA-256 hash sealed
📄
UPLOADED
acme-corp-br-2026-08.pdf
2.4 MB · uploaded just now · sha256:8f1c4d…7a9e
Spreadsheet or PDF with role → cap mapping
📊
UPLOADED
acme-corp-doa-matrix-2026-08.xlsx
128 KB · uploaded just now · sha256:b22d…3340
CFO + GC digital signatures over the BR PDF
Tier mapping
Cap ceilings per signing tier · values parsed from DOA matrix · review and confirm
Tier ceilings
| Tier | Role | Per-tx cap | Daily cap | Co-sign req'd above | Auto-imported |
|---|---|---|---|---|---|
| 1 | CFO | unlimited | unlimited | $50M (CEO) | parsed |
| 2 | Treasurer | $10M | $50M | $5M (CFO) | parsed |
| 3 | Asst Treasurer · Regional | $2M | $10M | $1M (Treasurer) | parsed |
| 4 | AP Manager · Operator | $250K | $1M | $100K (Asst Treas) | parsed |
| 5 | Bot operator (system) | $25K | $100K | $10K (AP Mgr) | parsed |
Changes vs v2026.05
+Tier 2 daily cap raised $40M → $50M
section 4.2+Tier 3 per-tx cap raised $1.5M → $2M
section 4.3~Tier 5 daily cap reduced $150K → $100K
section 4.5+New geographic split: APAC sub-DOA referenced
section 5Authorized signers
Map BR/DOA roles to identified people · each must have FIDO2 enrolled
| Role | Person | Tier | FIDO2 | Sample range | Effective |
|---|---|---|---|---|---|
| CFO | cfo@acme.com | 1 | enrolled · 2 keys | unlimited | 2026-08-01 |
| General Counsel | gc@acme.com | 1 | enrolled · 1 key | unlimited | 2026-08-01 |
| Treasurer | garcia.m | 2 | enrolled · 2 keys | $10M | 2026-08-01 |
| Asst Treasurer | smith.j | 3 | enrolled · 1 key | $2M | 2026-08-01 |
| Asst Treasurer · APAC | kim.s | 3 | enrolled · 1 key | $2M | 2026-08-01 |
| Asst Treasurer · EMEA | patel.a | 3 | enrolled · 1 key | $2M | 2026-08-01 |
| AP Manager | okafor.n | 4 | enrolled · 1 key | $250K | 2026-08-01 |
| AP Operator | chen.l | 4 | setup required | $250K | awaiting |
1 signer needs FIDO2 enrollment
chen.l (AP Operator, tier 4) must complete enrollment before this version can take effect for that tier
Effective dates & supersession
When this version becomes effective · how the prior version is retired
Effective window
UTC midnight on this date
Open-ended unless superseded
Supersedes
Will be marked SUPERSEDED at the effective-from boundary
Both versions accepted during this window (eases caches & in-flight)
No grace
24-hour grace
72-hour grace
7-day grace
Notice & distribution
Impact preview
i14 operator entitlements will inherit new tier ceilings
at T+0i3 entitlements will gain headroom (Tier 2 daily cap up)
at T+0i2 entitlements will be auto-suspended (Tier 5 reduction)
at T+0iDecisionDossier-I entries will reference new BR/DOA hash
from T+0Review & publish
Publishing routes to CFO + GC for FIDO2 co-sign · 2-of-2 required
Versionv2026.08
TypeAcme Corp BR/DOA
BR file…br-2026-08.pdf
DOA matrix…doa-2026-08.xlsx
BR sha2568f1c4d…7a9e
DOA sha256b22d…3340
Tiers5 (1 unlimited · 4 capped)
Signers8 mapped · 7 ready
Effective2026-08-01 00:00 UTC
Supersedesv2026.05
Grace24-hour overlap
Co-signCFO + GC (2-of-2)
What happens next
1Version manifest hashed and stored to WORM
~80ms2CFO & GC paged for FIDO2 co-sign in parallel
SLA 24h3All signers notified 14 days before effective date
scheduled4At T+0: v2026.05 → SUPERSEDED, v2026.08 → EFFECTIVE
automatic
Step 1 of 5
New federated delegation
Let an SI / ISV / counterparty act under an Acme Corp principal · scope-bound · time-bound · instantly revocable
Choose delegate
Who is being granted federated authority? · SI & ISV partners shown first
AC
Accenture (Naveen team)
PT
Pactum AI
OR
Oro Labs
AK
Arkestro
CR
CrewAI
DV
Cognition (Devin)
DT
Deloitte
+
Custom delegate
Delegate identity
Delegation label
Short name · visible in delegation registry
Scope of delegation
What can this delegate do on Acme's behalf? · Cedar deny-by-default · allow-list only
Acting under principal
Delegate's actions will be evaluated as if performed by this principal
Allowed actions
Counterparties allowed
Pattern
Specific list
Any whitelisted
Cap inheritance
Inherit principal caps
Custom (override below)
Period & renewal
When this delegation is active · whether it auto-renews
Window
Hard expiry · required for SOX-scope
Renewal
No auto-renew
Renew on CFO re-attest
Auto-renew quarterly (light)
Annual
Quarterly
Monthly
Working windows
24/7
Mon to Fri business hours
Delegate's local business hours
No restriction
India operations only
EU operations only
Specific country list
Revocation policy
What triggers automatic revocation · who can manually revoke · notification chain
Automatic revocation triggers
Manual revocation
No co-sign required · immediate effect
Notification chain
Review & sign
CFO co-sign required · signed delegation sealed to Dossier-I and pushed to delegate's identity store
DelegateAccenture (Naveen)
Labelaccenture-ap-h2-2026
DID…/agents/naveen-team
Trust anchorPartner JWKS
Acts asap-orchestrator
Actions3 of 6 allowed
Counterpartiesurn:duns:*
Per-tx cap$50,000
Per-day cap$500,000
Period2026-07-01 → 12-31
RenewalCFO re-attest
Auto-revoke4 triggers enabled
What happens next
1Cedar policy compiled, JWKS fetched and verified
~140ms2CFO paged for co-sign (FIDO2 + WebAuthn)
SLA 24h3Signed delegation pushed to Accenture's identity store
on co-sign4Delegation appears in registry as ACTIVE
~5s5Quarterly re-attest reminder scheduled (3 cycles)
async
Step 1 of 5
New instruction
Manually construct a signed Settlo Instruction Object (SIO) · rare: most instructions come from agent decisions · full audit trail
Pick parent mandate
Every instruction must reference an ACTIVE mandate · freshness verified at submit
All types
UNIT_RATE
WATERFALL
ASYNC
FIXED_FEE
SUBSCRIPTION
EXT_INSTR
Matching mandates
| Mandate | Type | Counterparty | Period cap | Used | Remaining | State | |
|---|---|---|---|---|---|---|---|
| ● | M_4488…1102 | ASYNC | urn:duns:123456789 | $250K unsettled | $148K | $102K | ACTIVE |
| ○ | M_ee10…7782 | EXT_INSTR | did:web:jpm-treas | unconstrained | $2.4M | ∞ | ACTIVE |
| ○ | M_b22d…f413 | WATERFALL | did:web:razorpay-route | ₹50L / mo | ₹18L | ₹32L | ACTIVE |
Selected mandate
M_4488…1102 · ASYNC · supplier-pay-9
$102K remaining unsettled exposure · monthly cadence · 5th business day · counterparty urn:duns:123456789
Beneficiary
Counterparty & receiving account · verified against Beneficiary Directory · new-counterparty cooling-off applies
Counterparty
Verified against the directory
Receiving account
US ACH
IBAN (SEPA)
UPI VPA
EVM wallet
SWIFT BIC
9-digit ABA
Verification of Payee: NAME_MATCH
Counterparty bank confirms "GLOBEX SUPPLIES INC" matches account holder · last verified 4 min ago
Counterparty status
✓In Beneficiary Directory · KYB tier 2
since 2024-03✓Not on sanctions watchlist (OFAC · EU · UN)
last screen 14:02✓Past cooling-off window (added > 30 days ago)
no extra co-signRail selection
Routing engine surfaces viable rails · you can override
Recommended (by routing engine)
CCD
ACH (NACHA CCD)
F
FedNow
R
TCH RTP
Other allowed rails
W
Fedwire
EXT
External instruction
Routing options
Instant
Same-day (T+0)
Next-day (T+1)
Amount & references
Value date · references for reconciliation · FX if cross-currency
Amount
USD
EUR
GBP
INR
OUR
SHA
BEN
FX
Same-currency settlement · no FX required
Mandate nominal USD · settle USD · skip FX evaluation
References
Up to 140 chars · appears on counterparty bank statement
Review & submit
Submitting will HSM-sign the SIO and hand off to the rail adapter · under per-tx cap, no co-sign required
MandateM_4488…1102 (ASYNC)
Principalsupplier-pay-9
CounterpartyGlobex Supplies Inc.
DUNS123456789
Routing091000019
Account•••••••3210
VoPNAME_MATCH
RailACH (NACHA CCD)
FallthroughFedNow
Amount$4,275.00
Value date2026-05-20
ChargesSHA
InvoiceINV-2026-04-8821
POPO-A24-119
Cap check
✓$4,275 ≤ mandate remaining $102,000
no breach✓$4,275 ≤ operator per-tx $25,000
17% util✓No co-sign required (under $10,000 threshold)
auto-approveWhat happens next
1SIO canonicalised (JCS / RFC 8785) and HSM-signed (Ed25519)
~42ms2NACHA trace number minted · idempotency key sealed
~8ms3SSM transitions: INSTRUCTED → SUBMITTED
~12ms4Batch picks up at 13:00 ET · settlement T+0 ~17:00 ET
~3h5DecisionDossier-E sealed and WORM-anchored
on SETTLED
Step 1 of 5
Add rail adapter
Register a new rail adapter type into the Settlo platform · each adapter implements submit · poll · cancel · reconcile
Adapter source
Where does the adapter code come from? · built-ins ship signed by Settlo
B
Built-in (Settlo-signed)
M
Marketplace
C
Custom code
Pick from built-in library
| Adapter | Region | Wire | Finality | Status | |
|---|---|---|---|---|---|
| ○ | FedNow | US | pacs.008/.002 | instant 24x7 | live in catalog |
| ○ | ACH (NACHA) | US | CCD / PPD / WEB | T+0 SDA | live |
| ● | India IMPS | India | NPCI partner-bank API | instant 24x7 | not yet enabled |
| ○ | Pix (Brazil) | LATAM | Bacen DICT | instant 24x7 | live |
| ○ | FPS (UK) | UK | CHAPS gateway | 2h SLA | live |
| ○ | PromptPay (TH) | APAC | ITMX QR / proxy | instant | live |
Adapter version
Settlo-signed releases use semver
Verified against Settlo platform key
Rail metadata
Surface the rail to routing · metadata feeds Settlo::Routing::v1
Identity
Used in routes and dossiers
Geography & currency
US
Europe
India
APAC
LATAM
X-border
INR
USD
EUR
multi
Finality & SLA
Instant
Same-day
T+1
T+2
Probabilistic
Caps & limits
Network-side regulatory ceiling
24x7
Business hours
Custom window
Implementation
Configure the four rail-adapter methods · built-ins ship sane defaults
submit(SIO)
poll(instruction_id)
Long-poll
Webhook + poll fallback
Polling only
cancel(instruction_id, reason)
Synchronous
Best-effort async
Not supported (instant)
reconcile(window)
txnId
UTR
EndToEndId
Status mapping
Map rail-native status codes to canonical SSM states
| Rail code | SSM state | Auto-mapped |
|---|---|---|
| RC=00 (SUCCESS) | SETTLED | ✓ |
| RC=BT (TIMEOUT) | TIMED_OUT | ✓ |
| RC=91 (BENE_DECLINE) | REJECTED | ✓ |
| RC=96 (PENDING) | PENDING | ✓ |
Test harness
Dry-run against mocked responses · verifies the 4 method contracts · no real money moved
Mock scenarios
4 of 4 scenarios passed
Method contracts compliant · status mappings correct · idempotency enforced · total runtime 8.4s
Per-scenario results
✓Happy path: SIO → submit (1.8s) → ack (180ms) → SETTLED
2.0s✓Beneficiary decline: RC=91 mapped to REJECTED · LoR reversal
2.1s✓Timeout: no ack in 30s → TIMED_OUT · auto-retry queued
30.0s mock✓Idempotent retry: dedup window held · original instruction returned
12msReview & deploy
Deploys to staging region first · promoted to prod after 24h shadow traffic · Platform Eng + CISO sign
SourceBuilt-in (Settlo-signed)
AdapterIndia IMPS
Versionv2.4.1
Adapter idrail.in.imps
RegionIndia
CurrencyINR
FinalityInstant · 24x7
Submit p952.0s target
Network cap₹5,00,000
Daily cap₹10,00,000
Submit authPartner-bank mTLS
PollWebhook + 30s fallback
CancelBest-effort async
Ack formatNPCI daily file
3-way keytxnId
Test harness4/4 passed
Deployment plan
1Signature verified against Settlo platform key
~28ms2Platform Eng + CISO paged for deploy approval
SLA 4h3Deploy to ap-south-1 staging region
on approval424h shadow traffic on real instructions (read-only)
soak5Promote to prod if shadow break rate < 0.1%
automatic6Adapter appears in Rail Adapters list as LIVE
~25h total
Step 1 of 5
New mandate
Upload a commercial document or pull from a connector · Settlo extracts the terms and compiles them into a machine-enforceable Mandate · ends in PENDING_TREASURER_APPROVAL
Choose source
Bring the commercial relationship in whatever shape it already lives · Settlo accepts the customer's preferred format
Upload a document
Negotiated contract, SOW, rate sheet, or order form
Pull from connector
Pactum, SAP Ariba, Icertis, or ERP export
Upload
Drop a file here, or click to browse
Settlo will read it and extract the commercial terms · max 50 MB
PDF
DOCX
XLSX
EML
PNG/scan (OCR)
JSON
YAML
CSV
Pactum export
Ariba CIF
modelco-msa-2026-rate-schedule.pdf
Connector alternative
Or skip the upload and pull structured terms directly from a connected system
PT
Pactum AI
AR
SAP Ariba
IC
Icertis CLM
Extraction
Settlo parses the document and locates the commercial primitives · each value is traced back to its source span
modelco-msa-2026-rate-schedule.pdf
Extraction pipeline
✓Document classified: Master Service Agreement + pricing schedule
410 ms✓Layout & pricing tables reconstructed
1.2 s✓Pricing primitives located: per-unit rate + volume tier
680 ms✓Payment terms & contract-value cap located
540 ms✓Counterparty resolved to did:web:modelco.ai
220 ms!Dispute / termination window clause ambiguous · flagged for review
low confSource trace
Highlighted spans show where each value was found
Pricing Schedule
"Services shall be billed at USD 120.00 per unit, invoiced
monthly in arrears on Net 45 terms. A 5% volume discount
applies above 2,500 units per month. Aggregate annual charges shall not
exceed USD 600,000. Overdue amounts accrue interest at
1.5% per month."
Review extracted fields
Confirm or correct each value · low-confidence fields are pre-flagged · you are the system of record, not the parser
Counterpartycover page & signature block
98% high
Legal entity namepreamble
97% high
Pricing basispricing schedule
96% high
Unit rate"USD 120.00 per unit"
95% high
Billing frequency"invoiced monthly in arrears"
94% high
Contract value cap"shall not exceed USD 600,000 / yr"
99% high
Volume discounttiered pricing table
86% med
Payment terms"Net 45 from invoice date"
93% high
Late-payment interest"1.5% per month"
82% med
Currencythroughout · USD
95% high
Dispute windowtermination clause · ambiguous
52% low
1 field needs your attention
Dispute window parsed at low confidence · the clause language was ambiguous, so Settlo applied the 90-day default. Confirm or override before compiling.
Mandate type
Settlo recommends a type from the extracted shape · you can override
Recommended: UNIT_RATE
Per-unit pricing with a contract-value cap maps cleanly to a UNIT_RATE mandate
Choose type
UR
UNIT_RATE
WF
WATERFALL_SPLIT
AS
ASYNC
FF
FIXED_FEE
SU
SUBSCRIPTION
EX
EXTERNAL_INSTRUCTION
Metering mode
Authoritative (Settlo is meter of record)
Reconciliatory (shadow counterparty meter)
Approval routing
$600K/yr cap exceeds Op Threshold ($300K/yr)
This mandate will route to Treasurer garcia.m for FIDO2 co-sign before activation
Compiled output
The extracted terms, compiled to a signed Mandate envelope + Cedar policy + rail-adapter plan
Mandate envelope
{
"mandate_id": "01J9ZNEW7TFR3WP4RT0K8VBQ",
"tenant_id": "ten_8b1d…",
"type": "UNIT_RATE",
"source": { "doc": "modelco-msa-2026-rate-schedule.pdf", "sha256": "7c1b…f3c2" },
"counterparty": "did:web:modelco.ai",
"currency_nominal": "USD",
"currency_settlement": "USD",
"rate_card": {
"unit": "service_unit",
"unit_price_micro": "120000000",
"volume_tier": { "above_units": 2500, "discount_pct": 5 }
},
"billing": { "frequency": "monthly_arrears", "payment_terms": "net_45", "late_interest_pct_mo": 1.5 },
"period_caps": {"annual_max_usd":"600000.00", "early_warning_pct": 80},
"dispute_window_days": 90,
"policy_ref": "cedar://settlo/mandates/01J9ZNEW…/v1"
}
Compilation checks
✓Cedar schema type-check against Mandate envelope
12 ms✓Period caps bounded · volume tier well-formed
4 ms✓Symbolic verification: annual cap reachable
48 ms✓Rail plan: ACH (primary) · SEPA SCT (fallback) · Stripe Invoicing (batch)
22 msRail compilation
ACH (NACHA)
SEPA SCT
Stripe Invoicing
Review & submit
Submitting HSM-signs the mandate and routes to Treasurer for co-sign · full provenance chain sealed to Dossier-T
Source doc…rate-schedule.pdf
Doc sha2567c1b…f3c2
TypeUNIT_RATE
Counterpartydid:web:modelco.ai
Legal entityModelCo Services Pvt. Ltd.
Unit rate$120.00 / unit
Volume tier5% above 2,500/mo
BillingMonthly arrears
Payment termsNet 45
Late interest1.5% / mo
Annual cap$600,000
Dispute window90 days
MeteringAuthoritative
RailsACH, SEPA, Stripe
Provenance & what happens next
1Source doc hash + extraction trace sealed into mandate
~60ms2Mandate canonicalised (JCS) and HSM-signed (Ed25519)
~120ms3Routed to Treasurer garcia.m (over Op Threshold)
FIDO24DecisionDossier-T entry sealed & WORM-anchored
on approval5Mandate appears in registry as ACTIVE
≤ 5s
Step 1 of 6
New meter stream
Define a CloudEvents v1.0.2 ingestion stream · bound to one or more mandates · authoritative or reconciliatory
Metering granularity
Pick one of the five supported metering granularities
TK
Token
RQ
Request / API-call
GP
GPU-second
OC
Outcome
DU
Duration / streaming
Stream identity
Lowercase, underscores · prefix mtr_
Source & schema
Where events come from · CloudEvents v1.0.2 envelope · signature requirements
Event source
CloudEvent source field
CloudEvent type field
Signature
Ed25519
ECDSA P-256
Unsigned (dev only)
Sample envelope
{
"specversion": "1.0",
"type": "prompt",
"source": "https://api.anthropic.com/v1/messages",
"subject": "spiffe://settlo/agent/treasury/payables-bot",
"data": { "prompt_tokens": 1842, "completion_tokens": 612 },
"settlosig": { "alg": "Ed25519" }
}
Aggregation
How event values roll up · JSONPath value extraction (OpenMeter-parity)
Aggregation functions
input
output
cached
Query windows
HOUR
DAY
MONTH
Tokenizer binding
SHA-256 of canonical tokenizer config · divergent tokenizer_version auto-pauses the mandate
Mode & binding
Authoritative vs reconciliatory · which mandates consume this meter · late-data handling
Metering mode
Authoritative · Settlo is meter of record
Reconciliatory · shadow counterparty
Bound mandates
| Mandate | Type | Counterparty | |
|---|---|---|---|
| ● | M_8b1d…7c4a | UNIT_RATE | did:web:anthropic.com |
| ○ | M_aae2…1801 | UNIT_RATE | did:web:cohere.com |
Idempotency & late data
(source, id) tuple dedup
Events for past timestamps still accepted
Quarantine → Middle Office review
Reject (409)
Review & create
Creating the stream opens the ingestion endpoint immediately · no approval required (config, not money)
Stream IDmtr_prompt_claude_opus_4
Granularitytoken
Sourceapi.anthropic.com
Typeprompt
SignatureEd25519
AggregationsSUM × 3 dims
WindowsHOUR · DAY · MONTH
ModeAuthoritative
BoundM_8b1d…7c4a
Dedup24h
Late-data48h → quarantine
Tokenizersha256:7c1b…
What happens next
1Ingestion endpoint opens at /v1/meters/events
immediate2Kafka topic partitioned by (tenant, stream)
~2s3ClickHouse aggregation view created
~3s4Stream appears in Metering as healthy
≤ 5s
Step 1 of 5
Trigger ad-hoc reconciliation
Run reconciliation outside the daily cutover · compare Settlo's meter against a counterparty file · surface breaks against Materiality Threshold
Reconciliation scope
Which meter stream and which time window to reconcile
Meter stream
Window
Today
Yesterday
Last 7 days
Custom
Reason for ad-hoc run
Logged to Dossier-T · required for off-cycle reconciliation
Counterparty file
Upload the counterparty's meter file, or fetch it from their endpoint
Upload file
CSV, BAI v2, camt.053, or JSON
Fetch from endpoint
Counterparty's published meter API
Drop the counterparty meter file
Settlo will parse and align it to the selected window
CSV
BAI v2
camt.053
JSON
together-gpu-usage-2026-05-20.csv
Schema mapping
Align counterparty columns to Settlo meter dimensions · pick the match key
Column mapping
Settlo: timestamp
auto
Settlo: subject
auto
Settlo: seconds
auto
Match key
job_id
request_id
timestamp + subject
Materiality threshold
Deltas above this page Treasurer and auto-suspend the affected mandate
Run reconciliation
Both meters snapshot to WORM · delta computed per (meter_stream, window)
Reconciliation complete · 1.8s
18,842 counterparty rows aligned to 18,840 Settlo events · 2 unmatched · delta computed
Pipeline
✓Settlo shadow meter snapshot → WORM
320 ms✓Counterparty file snapshot → WORM
280 ms✓Rows aligned on job_id (99.99% match)
1.1 s!Delta exceeds Materiality Threshold
see resultResult
Delta summary · this run exceeded Materiality and produced an escalation
Metermtr_gpu_second_h100
Window2026-05-20 full day
Settlo total1,184,920 s
Counterparty1,184,720 s
Delta+200 s
Delta USD+$148.00
Materiality$50,000
Breachwithin tolerance
Unmatched2 rows
Bound mandateM_44e2…1801
Delta payload
{
"report_id": "rec_2026-05-20_adhoc_gpu_second",
"meter_stream": "mtr_gpu_second_h100",
"settlo_total": 1184920,
"counterparty_total": 1184720,
"delta": 200,
"delta_usd": "148.00",
"materiality_breach": "false",
"format": "json-delta-v1"
}
Step 1 of 5
Open dispute
Open a dispute case against a settled transaction · 90-day default window · channel-specific evidence requirements auto-applied
Disputed transaction
Find the settled transaction the dispute concerns
Matching transactions
| Tx | Mandate | Counterparty | Amount | Settled | Age | |
|---|---|---|---|---|---|---|
| ● | pd_a17c…4275 | M_aaff…3340 | cust-77a8 | $4,275.00 | 2026-05-04 | 16d |
| ○ | pd_88b2…4271 | M_3a18…07ce | cust-31bb | $427.10 | 2026-05-11 | 9d |
Selected
pd_a17c…4275 · $4,275.00 · SUBSCRIPTION M_aaff…3340
Settled 2026-05-04 via card · 16 days ago · within 90-day window · counterparty cust-77a8
Channel & reason
The settlement rail determines which dispute regime & window applies
Dispute channel
CE
Visa CE 3.0
NA
NACHA return
SD
SEPA SDD
IC
ICC Arbitration
Reason code
Window check
Within CE 3.0 window
16 days since settlement · 74 days remaining of 90-day investigation window · evidence due T+7d if escalated
Disputed amount
Full amount
Partial
Evidence bundle
CE 3.0 requires ≥ 2 of 4 core data elements to match prior transactions; one must be IP or device ID
Core data elements
✓User ID · matches 4 prior tx (≥120d history)
cust-77a8✓IP address · matches 6 prior tx
198.51.100.42✓Device ID / fingerprint · matches 8 prior tx
fpr_8ab1…−Shipping address · digital good (N/A)
n/aCE 3.0 satisfied · 3 of 4 with IP + device
Confidence HIGH · predicted outcome in customer favour
Supporting documents
Attach supporting evidence (optional)
Receipts, prior-tx logs, ToS acceptance, delivery confirmation
PDF
PNG
JSON log
prior-tx-fingerprint-log.json
Assignment & SLA
Who investigates · escalation rule · acquirer submission path
Owner
Auto-assign (queue)
patel.a
silva.r
Resolution authority
Treasurer (garcia.m)
CFO
Acquirer submission
Notifications
Review & open
Opening files the case in the Dispute Register and starts the SLA clock
Transactionpd_a17c…4275
MandateM_aaff…3340
Counterpartycust-77a8
Amount$4,275.00 (full)
ChannelVisa CE 3.0
Reason10.4 fraud
Window74d remaining
Evidence3/4 · HIGH
OwnerAuto-assign
AcquirerStripe VRoL
Evidence due2026-05-27
Predictedcustomer favour
What happens next
1Case DSP-2026-0043 filed in Dispute Register
immediate2CE 3.0 evidence bundle assembled & sealed
~200ms3Analyst paged · SLA clock started (T+7d evidence)
on open4DecisionDossier-T entry sealed (DISPUTE_OPENED)
async
Step 1 of 5
New rate card
Author a tiered, graduated, flat, or dimensional rate card · optionally attach a volume commit and rebate clawback
Rate card shape
How does price change with volume?
TI
Tiered
GR
Graduated
FL
Flat
DI
Dimensional
Card identity
Prefix RC_
Tiers
Volume brackets and the price at each · tiered means the whole volume bills at the reached tier
Brackets
| Tier | From | To | Input / 1M | Output / 1M |
|---|---|---|---|---|
| 1 | 0 | 10M | $3.00 | $15.00 |
| 2 | 10M | 50M | $2.70 | $13.50 |
| 3 | 50M | ∞ | $2.40 | $12.00 |
Discounts & promos (Stripe-style)
Volume commitment
Optional AWS-EDP-style commit with drawdown & quarterly true-up · rebate clawback if missed
Attach a commitment?
Yes · EDP commit
No commitment
Quarterly
Annual
Rebate clawback
60 days
90 days
No clawback
Binding
Which mandate(s) this card prices · optional promo code
Bound mandate
| Mandate | Type | Counterparty | |
|---|---|---|---|
| ● | M_8b1d…7c4a | UNIT_RATE | did:web:anthropic.com |
| ○ | M_3a18…07ce | UNIT_RATE | did:web:openai.com |
Promotion code (optional)
Review & create
Creating the card makes it available for binding · clawback rules compile to Cedar
Card IDRC_claude_opus_volume_2026
ShapeTiered
Unittoken
Tiers3 brackets
Top rate$2.40 / $12.00
Commit$1.2M / yr
True-upQuarterly
Clawback90 days
BoundM_8b1d…7c4a
PromoVOLUME-2026-LAUNCH
Redemption25 · 1/principal
Promosenabled
What happens next
1Tier & clawback rules compiled to Cedar
~70ms2EDP commit registered with quarterly true-up schedule
~40ms3Promotion code activated (rate-limited per principal)
~20ms4Card appears in Rate cards as ACTIVE
≤ 5s
Step 1 of 5
Requisition Inbox
Agent-raised requests to spend, before a vendor is chosen or a commitment exists
Open requisitions
22
Awaiting approval
6
Converted to sourcing
148
Rejected
9
Requisitions
Newest first · click for detail
| Requisition ID | Raised by | Category | Cost center | Est. amount | Budget check | Status | Age |
|---|---|---|---|---|---|---|---|
| req_8f21a0 | SF procurement-bot-3 | Cloud infra | CC-ENG-014 | $18,400.00 | AVAILABLE | AWAITING APPROVAL | 2h |
| req_7c40e1 | EN ap-automation-7f4c | Field services | CC-OPS-002 | $52,000.00 | TIGHT | AWAITING APPROVAL | 5h |
| req_6a91bc | SN ariba-pactum-negotiator | MRO supplies | CC-OPS-002 | $4,120.00 | AVAILABLE | APPROVED | 1d |
| req_5512df | WX treasury-sweep-2a91 | FX hedging desk | CC-TRE-001 | $120,000.00 | AVAILABLE | CONVERTED | 2d |
| req_402c8a | SF procurement-bot-3 | SaaS renewal | CC-ENG-014 | $8,900.00 | OVER CAP | REJECTED | 2d |
| req_31a9f0 | NA supplier-pay-9 | Logistics | CC-OPS-002 | $14,250.00 | AVAILABLE | CONVERTED | 3d |
Showing 6 of 22 open
View all →Sourcing Events
RFQs and vendor evaluations in flight, prior to commitment
Active RFQs
7
Quotes awaiting review
11
Avg. cycle time
3.2d
Network-verified quotes
64%
Sourcing events
Linked to originating requisition
| Event ID | Requisition | Category | Quotes | Lowest / selected | Vendor trust | Status |
|---|---|---|---|---|---|---|
| rfq_2291a | req_8f21a0 | Cloud infra | 3 | $18,400.00 | NETWORK-VERIFIED | QUOTES RECEIVED |
| rfq_1187f | req_7c40e1 | Field services | 2 | $51,200.00 | EXTERNALLY-ATTESTED | VENDOR SELECTED |
| rfq_0093c | req_6a91bc | MRO supplies | 4 | $3,980.00 | NETWORK-VERIFIED | CLOSED |
| rfq_5540b | req_31a9f0 | Logistics | 1 | $14,250.00 | UNVERIFIED | CLOSED |
Showing 4 of 7 active
View all →Vendor Registry
Know-your-counterparty for the other side of a commitment · three trust tiers
Network-verified
22
Externally-attested
31
Unverified / flagged
11
Avg. risk score
82/100
Vendors
Sorted by open commitment exposure
| Vendor | DUNS / domain | Trust tier | Agent identity | Risk score | Open commitments | Status |
|---|---|---|---|---|---|---|
| ModelCo | urn:duns:123456789 | NETWORK-VERIFIED | agt_modelco_svc | 94 | $482,000.00 | ACTIVE |
| Globex Corp | urn:duns:445566778 | EXTERNALLY-ATTESTED | did:web:globex.com | 76 | $118,900.00 | ACTIVE |
| Initech | urn:duns:334455667 | EXTERNALLY-ATTESTED | did:web:initech.io | 71 | $64,200.00 | ACTIVE |
| Acme Field Services | urn:duns:987654321 | NETWORK-VERIFIED | agt_acme_fieldsvc | 88 | $51,200.00 | ACTIVE |
| Riverside MRO Supply | urn:duns:998877665 | UNVERIFIED | n/a | 48 | $14,250.00 | FLAGGED |
| BASF | urn:duns:556677889 | NETWORK-VERIFIED | agt_basf_spotfx | 91 | $960,000.00 | ACTIVE |
Showing 6 of 64
View all →Commitment Registry
Every obligation an agent has committed the org to · upstream of the Mandate that eventually pays it
Open commitment value
$1.62M
Pending approval
5
Auto-converted to Mandate
89%
Match exceptions
3
Commitments
Click a row for the full lifecycle · PO / contract through to Mandate handoff
| Commitment ID | Vendor | Cost center | Amount | Policy gate | Stage | Convert mode |
|---|---|---|---|---|---|---|
| cmt_9f21a0 | ModelCo | CC-ENG-014 | $18,400.00 | PASS | PENDING APPROVAL | manual · above threshold |
| cmt_7c40e1 | Globex Corp | CC-OPS-002 | $51,200.00 | TIGHT | PENDING APPROVAL | manual · above threshold |
| cmt_6a91bc | Riverside MRO Supply | CC-OPS-002 | $3,980.00 | PASS | COMMITTED | auto · below threshold |
| cmt_31a9f0 | Acme Field Services | CC-OPS-002 | $14,250.00 | PASS | RECEIPTED | auto · below threshold |
| cmt_28b7f2 | Initech | CC-OPS-002 | $64,200.00 | PASS | EXCEPTION | manual · qty mismatch |
| cmt_115de4 | BASF | CC-TRE-001 | $960,000.00 | PASS | CONVERTED | auto · below threshold |
Showing 6 of 41 open
View all →cmt_9f21a0 · ModelCo
Process type PROCUREMENT (P2P) · PO/contract commitment · PENDING APPROVAL
Commitment detail
cmt_9f21a0
Raised byprocurement-bot-3
Originating requisitionreq_8f21a0
Sourcing eventrfq_2291a · 3 quotes compared
VendorModelCo · NETWORK-VERIFIED
Cost centerCC-ENG-014 · Cloud infra
Commitment amountUSD 18,400.00
Budget available beforeUSD 62,000.00
Budget available afterUSD 43,600.00
Auto-convert thresholdUSD 15,000.00 · this commitment is above it
Convert modeManual approval required
Lifecycle
✓Requisition approved
2 days ago✓Vendor selected via sourcing event
2 days ago✓Policy gate passed · budget, org, tech, AI & data checks
1 day ago!Awaiting Treasurer approval · above auto-convert threshold
pending○Goods/service receipt
not yet○Invoice match
not yet○Convert to Mandate
not yetLine items
3 line items
| Line | Description | Qty | Unit price | Total |
|---|---|---|---|---|
| 1 | Compute reserved instance · 12mo | 1 | $14,000.00 | $14,000.00 |
| 2 | Object storage · committed tier | 1 | $3,200.00 | $3,200.00 |
| 3 | Support plan add-on | 1 | $1,200.00 | $1,200.00 |
Total commitment
$18,400.00
Budget & Cost-Center Registry
The gate every Commitment checks before it can be approved · allocated, committed, spent, available
Total allocated
$4.80M
Committed
$1.62M
Spent (settled)
$2.11M
Available
$1.07M
Cost centers
FY2026 Q3 · click for allocation history and open commitments
| Cost center | Owner | Allocated | Committed | Spent | Available | Status |
|---|---|---|---|---|---|---|
| CC-ENG-014 Cloud infra | chen.l | $800,000.00 | $182,400.00 | $460,000.00 | $157,600.00 | HEALTHY |
| CC-OPS-002 Field & logistics | patel.a | $620,000.00 | $133,630.00 | $410,000.00 | $76,370.00 | TIGHT |
| CC-TRE-001 FX hedging desk | garcia.m | $2,000,000.00 | $960,000.00 | $720,000.00 | $320,000.00 | HEALTHY |
| CC-AR-009 Collections | nakamura.h | $180,000.00 | $0.00 | $142,000.00 | $38,000.00 | HEALTHY |
| CC-TAX-004 Tax & WHT | volkov.a | $1,200,000.00 | $345,970.00 | $378,000.00 | $476,030.00 | HEALTHY |
Showing 5 of 18
View all →Receipts
Confirmation that a committed obligation's goods or services actually arrived
Pending receipt
14
Complete this week
22
Disputed
2
Agent-attested
71%
Receipts
Linked to originating commitment
| Receipt ID | Commitment | Vendor | Attested by | Qty received / ordered | Status |
|---|---|---|---|---|---|
| rcpt_44a1 | cmt_31a9f0 | Acme Field Services | agent | 200 / 200 | COMPLETE |
| rcpt_38b2 | cmt_28b7f2 | Initech | okafor.n | 1,184 / 1,384 | DISPUTED |
| rcpt_20f7 | cmt_6a91bc | Riverside MRO Supply | agent | 40 / 40 | COMPLETE |
| rcpt_19e0 | cmt_9f21a0 | ModelCo | n/a | n/a | PENDING |
Showing 4 of 36
View all →Invoice Matching
Two-way and three-way match: commitment, receipt, and invoice reconciled before conversion to a Mandate
Clean match rate
91.4%
Open exceptions
9
Awaiting conversion approval
4
Auto-converted to Mandate
128
Invoice match queue
Commitment · receipt · invoice, line by line
| Invoice ID | Commitment | Vendor | Invoice amt | Match result | Convert mode |
|---|---|---|---|---|---|
| inv_00214 | cmt_31a9f0 | Acme Field Services | $14,250.00 | 3-WAY MATCH | auto · below threshold |
| inv_00219 | cmt_28b7f2 | Initech | $64,200.00 | QTY VARIANCE | escalated to Middle Office |
| inv_00227 | cmt_6a91bc | Riverside MRO Supply | $3,980.00 | 3-WAY MATCH | auto · below threshold |
| inv_00231 | cmt_115de4 | BASF | $960,000.00 | 3-WAY MATCH | manual · awaiting Treasurer |
| inv_00233 | cmt_7c40e1 | Globex Corp | $52,500.00 | PRICE VARIANCE | $300.00 over PO · escalated |
Showing 5 of 9 in queue
View all →Process Types
The generic obligation lifecycle that every commitment is governed by · Procurement is the first configured instance
Configured process types
Each defines which lifecycle stages apply, what a Commitment represents, and what gates it
| Process type | Commitment object | Active stages | Budget gate | Status |
|---|---|---|---|---|
| Procurement (P2P) | Purchase order / contract | Requisition · Sourcing · Commitment · Receipt · Match · Convert | Cost Center | ACTIVE |
| Spend Management / T&E | Expense authorization | Trigger · Commitment · Fulfillment · Match · Convert | Cost Center | NOT CONFIGURED |
| Loan Origination | Loan agreement / sanction | Trigger · Commitment · Fulfillment · Convert · Servicing | Credit Limit | NOT CONFIGURED |
1 of 3 configured
Procurement (P2P) · lifecycle definition
Read-only reference · edit via versioned config export
1. TriggerRequisition raised by an agent
2. Counterparty selectionSourcing event / RFQ against the Vendor Registry
3. CommitmentPurchase order or contract · gated by Cost Center availability
4. FulfillmentGoods/service receipt, agent-attested or human-confirmed
5. Matching2-way or 3-way match against commitment and receipt
6. Convert to payableAuto below threshold, manual approval above it · becomes a Mandate
7. SettlementExisting Instructions / Rail Adapters / Ledger-of-Record
8. Post-settlementReturns, reversals, disputes
New commitment
Create the financial obligation an agent is authorized to commit the org to
Choose process type & source
Every commitment belongs to a process type · Procurement is the only configured type today
P2P
Procurement (P2P)
T&E
Spend Management
LOAN
Loan Origination
Originating requisition
Vendor & terms
Confirm the counterparty and the obligation's line items
Vendor
MC
ModelCo
Line items
| Description | Qty | Unit price | Total |
|---|---|---|---|
| Compute reserved instance · 12mo | 1 | $14,000.00 | $14,000.00 |
| Object storage · committed tier | 1 | $3,200.00 | $3,200.00 |
| Support plan add-on | 1 | $1,200.00 | $1,200.00 |
Policy gate
Every commitment is checked against your budget and against non-financial policies with financial impact
Financial · budget availability
✓CC-ENG-014 has $62,000.00 available
as of now✓Commitment amount $18,400.00 is within available headroom
passed!Commitment exceeds your delegated per-commitment cap of $15,000.00
routes to TreasurerCC-ENG-014 available before$62,000.00
CC-ENG-014 available after$43,600.00
Non-financial policies
✓ORGSegregation of duties · requester and approver differ
passed✓TECHModelCo is on the approved SaaS & cloud vendor list
passed✓AINo AI-influenced decision above $25,000 threshold in this commitment
passed✓AI FRAMEWORKSVendor risk-tier classified Limited-risk under EU AI Act
passed✓DATANo PII leaves the EEA under this commitment
passedConversion rule
How this commitment converts to a Mandate once matched
Below this amount, a clean match converts to a Mandate automatically. Above it, conversion waits for manual approval.
Auto-convert
Manual approval · above threshold
Review & submit
Submitting routes this commitment to garcia.m for approval · ends in PENDING_APPROVAL
Process typeProcurement (P2P)
Requisitionreq_8f21a0
Sourcing eventrfq_2291a
VendorModelCo · NETWORK-VERIFIED
Cost centerCC-ENG-014
Amount$18,400.00
Policy gatePASS · all 5 domains · $43,600.00 available after
Convert modeManual · above $15,000.00 threshold
Approvergarcia.m · Treasurer
What happens next
1Commitment sealed as DecisionDossier-C entry, WORM-anchored
~120ms2Routed to garcia.m for approval
FIDO2 step-up3On approval, cost center CC-ENG-014 marked committed
on approval4Appears in Commitment Registry as PENDING APPROVAL
≤ 5s
Step 1 of 5
Onboard vendor
Establish trust for the counterparty on the other side of a commitment
Vendor details
Basic legal-entity information for the counterparty
Choose trust tier
How is this vendor's agent identity established
NV
Network-verified
EA
Externally-attested
UV
Unverified
External attestation source
Risk assessment
Sets the category commitment cap this vendor is eligible for
✓Business registration verified
automated✓No sanctions list match
automated!No prior transaction history with this vendor
new counterpartyNew, externally-attested vendors start capped until a transaction history builds
Review & activate
Once active, this vendor can be selected in Sourcing Events and Commitments
Legal entityRiverside MRO Supply LLC
DUNS998877665
CategoryMRO supplies
Trust tierExternally-attested
Identitydid:web:riversidemro.com
Risk score48 / 100
Commitment cap$15,000.00
What happens next
1Vendor record sealed and added to registry
~120ms2Available for Sourcing Events and Commitments up to its cap
immediately3Risk score recomputed after 5 clean transactions
ongoing
Step 1 of 4
New requisition
Raise a request to spend, before a vendor is chosen
What does the agent need
A short description and estimated cost is enough to start sourcing
Budget check
A requisition can be raised even if headroom is tight · the hard gate is at Commitment
✓CC-ENG-014 has sufficient available budget
$62,000.00 availableReview & submit
Submitting routes this requisition for approval, then to sourcing
DescriptionCloud compute reserved instance renewal
CategoryCloud infra
Estimated amount$18,400.00
Cost centerCC-ENG-014
Budget checkAVAILABLE
What happens next
1Routed for approval per delegated authority
≤ 1 day2On approval, eligible to start a Sourcing Event
immediately after
Step 1 of 3
Policy Registry
Every non-financial policy with financial impact · evaluated at the Commitment's Policy gate
Active policies
37
Native to Settlo
19
Imported / manual
18
Policy-gate blocks (30d)
6
Policies
Click a row for the full rule and evaluation history
| Policy | Domain | Source | Owner | Trigger stage | Rule type | Status |
|---|---|---|---|---|---|---|
| Per-commitment cap by cost center | FINANCIAL | native | garcia.m · Treasurer | Commitment | Threshold | ACTIVE |
| Segregation of duties · requester ≠ approver | ORGANIZATIONAL | native | legal@acme.com | Commitment | Required attestation | ACTIVE |
| Sanctioned-country vendor block | ORGANIZATIONAL | native | legal@acme.com | Vendor onboarding | Deny-list | ACTIVE |
| Approved SaaS & cloud vendor list | TECHNOLOGY | imported · Vanta | chen.l · CISO office | Commitment | Allow-list | ACTIVE |
| SOC 2 Type II required before commitment >$10K | TECHNOLOGY | imported · Vanta | chen.l · CISO office | Commitment | Required attestation | ACTIVE |
| Approved AI model / vendor list | AI POLICY | manual | okafor.n · AI governance | Commitment | Allow-list | ACTIVE |
| Human review required for AI-influenced decisions >$25K | AI POLICY | manual | okafor.n · AI governance | Commitment | Threshold | ACTIVE |
| EU AI Act risk-tier gate | AI FRAMEWORKS | imported · Credo AI | okafor.n · AI governance | Vendor onboarding | Risk-tier gate | ACTIVE |
| NIST AI RMF documentation required · high-risk use | AI FRAMEWORKS | imported · Credo AI | okafor.n · AI governance | Commitment | Required attestation | DRAFT |
| EU data residency · no PII storage outside EEA | DATA | imported · OneTrust | dpo@acme.com | Commitment | Deny-list | ACTIVE |
| Data retention terms required in vendor contract | DATA | imported · OneTrust | dpo@acme.com | Commitment | Required attestation | ACTIVE |
Showing 11 of 37
EU AI Act risk-tier gate
AI FRAMEWORKS · imported from Credo AI · ACTIVE
Rule definition
Read-only · source of truth is Credo AI
DomainAI frameworks
SourceImported · Credo AI · synced daily
Ownerokafor.n · AI governance
Trigger stageVendor onboarding
Rule typeRisk-tier gate
RuleIf vendor's AI system is classified High-risk under EU AI Act Annex III, require documented human-oversight plan before any commitment is approved
Applies to process typesProcurement (P2P)
Applies to categoriesAI / ML services, Cloud infra with embedded AI
Last synced2026-07-04 06:00 UTC
Recent evaluations
✓ModelCo · classified Limited-risk · passed
2 days ago!Globex Corp · classified High-risk · oversight plan missing
5 days ago · blocked✓BASF · classified Minimal-risk · passed
1 week agoBlocked commitments
Held at the Policy gate by this rule
| Commitment | Vendor | Amount | Reason |
|---|---|---|---|
| cmt_7c40e1 | Globex Corp | $51,200.00 | oversight plan missing |
1 open block
All commitments →New policy
Register a policy for enforcement at the Commitment's Policy gate
Choose domain & trigger
Which policy domain this belongs to, and which stage of the Commitment lifecycle it fires at
FIN
Financial
ORG
Organizational
TEC
Technology
AI
AI policy
AIF
AI frameworks
DAT
Data
Trigger stage
Requisition
Sourcing
Vendor onboarding
Commitment
Where does this policy live
AI policy usually has no external system of record yet · manual entry keeps this policy enforceable regardless
NAT
Native to Settlo
IMP
Imported
MAN
Manual entry
Manual entry
Define the rule
What the Policy gate actually checks
Allow-list
Deny-list
Threshold
Required attestation
Risk-tier gate
Scope & owner
What this policy applies to, and who's accountable for keeping it current
Procurement (P2P)
Spend Management
Loan Origination
Review & activate
Once active, every Commitment's Policy gate evaluates against this rule
DomainAI policy
Trigger stageCommitment
SourceManual entry
Rule typeThreshold
RuleAI-influenced decisions > $25,000 require human review
Ownerokafor.n · AI governance
Applies toProcurement (P2P)
What happens next
1Policy sealed and added to the registry
~120ms2Every new Commitment's Policy gate now evaluates this rule
immediately3Re-attestation reminder sent to owner quarterly
ongoing
Step 1 of 5
Per-commitment cap by cost center
FINANCIAL · native to Settlo · ACTIVE
Rule definition
Native · authored and enforced entirely in Settlo
DomainFinancial
SourceNative to Settlo
Ownergarcia.m · Treasurer
Trigger stageCommitment
Rule typeThreshold
RuleAny single commitment above $15,000 per cost center requires manual Treasurer approval before it can be committed; below it, a clean commitment converts automatically
Applies to process typesProcurement (P2P)
Applies to categoriesAll categories
Last edited2026-06-02 · garcia.m
Recent evaluations
!cmt_9f21a0 · ModelCo · $18,400.00 · above threshold, routed
1 day ago✓cmt_6a91bc · Riverside MRO Supply · $3,980.00 · below threshold, auto-converted
1 day ago!cmt_115de4 · BASF · $960,000.00 · above threshold, routed to Treasurer + CFO
2 days agoCost centers governed
Threshold applies per cost center, not tenant-wide
| Cost center | Threshold | Routed this month |
|---|---|---|
| CC-ENG-014 | $15,000.00 | 3 |
| CC-OPS-002 | $15,000.00 | 2 |
| CC-TRE-001 | $100,000.00 | 1 |
Higher-trust cost centers get a higher threshold
All cost centers →Segregation of duties
ORGANIZATIONAL · native to Settlo · ACTIVE
Rule definition
Native · maker/checker enforced at the Policy gate
DomainOrganizational
SourceNative to Settlo
Ownerlegal@acme.com
Trigger stageCommitment
Rule typeRequired attestation
RuleThe agent or operator who raised the originating requisition may not also be the approver of the resulting commitment
Applies to process typesProcurement (P2P)
Applies to categoriesAll categories
Last edited2026-05-01 · legal@acme.com
Recent evaluations
✓cmt_9f21a0 · raised by procurement-bot-3, approved by garcia.m · passed
1 day ago✓cmt_7c40e1 · raised by ap-automation-7f4c, approved by garcia.m · passed
5 hours ago✕Blocked attempt · smith.j tried to self-approve a requisition they raised
2 weeks agoRelated governance
Where this rule is anchored
✓Acme Corp Procurement DOA · §3.1 maker/checker clause
v2026.05✓Reviewed quarterly alongside operator access review
Q2 ✓Sanctioned-country vendor block
ORGANIZATIONAL · native to Settlo · ACTIVE
Rule definition
Native · checked against OFAC and EU consolidated sanctions lists
DomainOrganizational
SourceNative to Settlo · list refreshed weekly
Ownerlegal@acme.com
Trigger stageVendor onboarding
Rule typeDeny-list
RuleVendor onboarding is blocked if the legal entity's country of domicile appears on the OFAC SDN list or the EU consolidated sanctions list
Applies to process typesProcurement (P2P)
Applies to categoriesAll categories
Last synced2026-06-30 · weekly refresh
Recent evaluations
✓ModelCo · US domiciled · cleared
onboarding✓Riverside MRO Supply · US domiciled · cleared
onboarding✓No onboarding attempts blocked this quarter
QTDCoverage
Screened at every vendor onboarding
Vendors screened
64
100% coverage
Blocked all-time
0
no matches yet
List source
OFAC + EU
refreshed weekly
Approved SaaS & cloud vendor list
TECHNOLOGY · imported from Vanta · ACTIVE
Rule definition
Read-only · source of truth is Vanta
DomainTechnology
SourceImported · Vanta · synced daily
Ownerchen.l · CISO office
Trigger stageCommitment
Rule typeAllow-list
RuleAny commitment to a SaaS or cloud vendor must appear on the CISO office's approved vendor list · otherwise the commitment is blocked pending security review
Applies to process typesProcurement (P2P)
Applies to categoriesCloud infra, SaaS renewal
Last synced2026-07-04 06:00 UTC
Recent evaluations
✓ModelCo · on approved list · passed
1 day ago!ShadowStack Analytics · not on approved list · blocked pending security review
4 days ago✓Globex Corp · on approved list · passed
1 week agoBlocked commitments
Held at the Policy gate by this rule
| Vendor | Attempted | Reason |
|---|---|---|
| ShadowStack Analytics | $4,200.00 | not on approved vendor list |
1 open block
All commitments →SOC 2 Type II required before commitment >$10K
TECHNOLOGY · imported from Vanta · ACTIVE
Rule definition
Read-only · source of truth is Vanta
DomainTechnology
SourceImported · Vanta · synced daily
Ownerchen.l · CISO office
Trigger stageCommitment
Rule typeRequired attestation
RuleCommitments over $10,000 to a vendor handling company data require a current SOC 2 Type II report on file, less than 12 months old
Applies to process typesProcurement (P2P)
Applies to categoriesCloud infra, SaaS renewal
Last synced2026-07-04 06:00 UTC
Recent evaluations
✓ModelCo · SOC 2 Type II on file, renewed 2026-03 · passed
1 day ago✓Globex Corp · SOC 2 Type II on file, renewed 2025-11 · passed
5 hours ago!Initech · SOC 2 report expires in 18 days · renewal requested
todayAttestation coverage
Vendors with a commitment >$10K
Current
21
SOC 2 on file, valid
Expiring <30d
1
Initech
Blocked
0
no active blocks
Approved AI model / vendor list
AI POLICY · manual entry · ACTIVE
Rule definition
Manual · no external system of record yet
DomainAI policy
SourceManual · AI Governance Charter v1.2
Ownerokafor.n · AI governance
Trigger stageCommitment
Rule typeAllow-list
RuleAny commitment where the vendor's product is an AI model or AI-driven service must appear on the AI governance function's approved list
Applies to process typesProcurement (P2P)
Applies to categoriesAI / ML services
Re-attestation cadenceQuarterly
Recent evaluations
✓ModelCo · on approved list · passed
1 day ago✓BASF · not an AI vendor, rule does not apply
2 days agoApproved list
Maintained by AI governance
| Vendor | Model / product | Status |
|---|---|---|
| ModelCo | Foundation model API | APPROVED |
| OpenAI | GPT family | APPROVED |
| Anthropic | Claude family | APPROVED |
3 approved vendors
Manage list →Human review required for AI-influenced decisions >$25K
AI POLICY · manual entry · ACTIVE
Rule definition
Manual · no external system of record yet
DomainAI policy
SourceManual · AI Governance Charter v1.2
Ownerokafor.n · AI governance
Trigger stageCommitment
Rule typeThreshold
RuleIf an AI-influenced decision (vendor selection, price negotiation, risk scoring) contributed to a commitment above $25,000, a human must review before approval
Applies to process typesProcurement (P2P)
Applies to categoriesAll categories
Re-attestation cadenceQuarterly
Recent evaluations
✓cmt_9f21a0 · $18,400.00 · below threshold, no review needed
1 day ago!cmt_7c40e1 · $51,200.00 · AI-assisted vendor selection, human review required
5 hours ago✓cmt_115de4 · $960,000.00 · no AI influence on this commitment, rule does not apply
2 days agoPending human review
Held at the Policy gate by this rule
| Commitment | Vendor | Amount | Status |
|---|---|---|---|
| cmt_7c40e1 | Globex Corp | $51,200.00 | AWAITING REVIEW |
1 awaiting review
All commitments →NIST AI RMF documentation required · high-risk use
AI FRAMEWORKS · imported from Credo AI · DRAFT
Rule definition
Draft · not yet enforced at the Policy gate
DomainAI frameworks
SourceImported · Credo AI · synced daily
Ownerokafor.n · AI governance
Trigger stageCommitment
Rule typeRequired attestation
RuleFor any AI system mapped to NIST AI RMF's "high" risk category, require documented Map/Measure/Manage evidence before the commitment is approved
Applies to process typesProcurement (P2P)
Applies to categoriesAI / ML services
Last synced2026-07-04 06:00 UTC
Status
!Draft · evaluated in simulation mode only, does not block commitments yet
since 2026-06-28✓Simulation: would have applied to 1 commitment this month (ModelCo)
simulatedBefore activating
What changes once this leaves draft
!Commitments to high-risk AI systems will require Map/Measure/Manage documentation
on activation!1 vendor (ModelCo) would need documentation on file before its next commitment
estimatedEU data residency · no PII storage outside EEA
DATA · imported from OneTrust · ACTIVE
Rule definition
Read-only · source of truth is OneTrust
DomainData
SourceImported · OneTrust · synced daily
Ownerdpo@acme.com
Trigger stageCommitment
Rule typeDeny-list
RuleBlock any commitment where the vendor's data processing terms allow storage of EU-subject PII outside the European Economic Area
Applies to process typesProcurement (P2P)
Applies to categoriesCloud infra, SaaS renewal, AI / ML services
Last synced2026-07-04 06:00 UTC
Recent evaluations
✓BASF · EU-hosted, data processing agreement on file · passed
2 days ago✓ModelCo · no EU PII in scope for this commitment · rule does not apply
1 day agoCoverage
Vendors handling EU-subject data
EU-hosted, compliant
8
DPA on file
Under review
1
DPA pending
Blocked
0
no active blocks
Data retention terms required in vendor contract
DATA · imported from OneTrust · ACTIVE
Rule definition
Read-only · source of truth is OneTrust
DomainData
SourceImported · OneTrust · synced daily
Ownerdpo@acme.com
Trigger stageCommitment
Rule typeRequired attestation
RuleAny commitment involving data sharing requires the vendor contract to specify retention period and a deletion mechanism on termination
Applies to process typesProcurement (P2P)
Applies to categoriesCloud infra, SaaS renewal, AI / ML services
Last synced2026-07-04 06:00 UTC
Recent evaluations
✓Globex Corp · retention & deletion terms confirmed in MSA · passed
5 hours ago!Initech · contract silent on deletion mechanism · flagged, amendment requested
2 days agoContract gaps
Vendors missing required retention language
| Vendor | Gap | Status |
|---|---|---|
| Initech | no deletion mechanism specified | AMENDMENT REQUESTED |
1 open gap
Vendor registry →