The how is the moat
Who sees what. Where it sits. When it unlocks.
Beyond the match: a permissioned vault. Members, shippers and banks each get a dashboard. Default deny. Every open is an event. The house is agent — it holds the object, it does not leak the object.
Preview ACL. Production wraps each object in KMS, pins the region, and watermarks every download. This screen is the control plane.
Act as
Singapore ops. Sees every object. Cannot export the payment file without dual control.
Tickets
Files on this ticket
State Docs held. Switch role above — the same folder reads differently.
Identity
Buyer KYB pack
Singapore · house vault · 0xc0b16304a14
House holds the pack. Cannot send it out without a ticket reason.
The matrix
Same ticket. Six dashboards.
Cells evaluate against Docs held. Change the ticket on Escrow to watch files unlock. This table is the product — not a permissions afterthought.
| File | Buyer | Seller | Shipper | Bank | House | Auditor |
|---|---|---|---|---|---|---|
| Buyer KYB packSingapore · house vault | ||||||
| Seller KYB packSingapore · house vault | ||||||
| Assay / specOrigin lab · copy in SG | ||||||
| Export / dual-useOrigin state · sealed copy SG | ||||||
| Commercial invoiceSingapore · ticket folder | ||||||
| Packing listWarehouse · carrier write | ||||||
| Electronic bill of ladingDCSA network · MLETR | ||||||
| Cargo policyLondon · copy SG | ||||||
| Escrow deedEnglish law · SG original | ||||||
| SWIFT instructionBank HSM · never the house laptop |
Ticket states: Instructed → Identity clear → Funded → Docs held → Released → Closed. Default deny if a cell has no rule.
Build scope
Four phases. The matrix does not change.
Now
P0 · this preview
ACL matrix, role dashboards, time-gates on ticket state, dual-control SWIFT, append-only view log.
6–8
P1 · object store
KMS-wrapped objects, region pin (SG / EU / AU), watermarked PDF on download, legal hold.
10–14
P2 · writers
DCSA eBL as the title object, bank HSM signs the instruction, carrier writes packing list — house never re-keys.
16–24
P3 · attest
ISO 27001 A.8, MLETR eBL recognition, regulator export of the view log, independent key ceremony.
Path A funds P1–P3 with the Chair and the correspondent. Path B stops at P0: a bank can buy the matrix without holding client money. Pitch.