Product brief · beta

NOSHASHI: proof for every decision made on the XRP Ledger.

NOSHASHI is a read-only compliance and risk layer for the XRP Ledger. Before money moves it answers three questions: can this move under our policy, is there enough real liquidity to exit at the price we mark, and can we prove later why we said yes. It reads validated ledger state, never holds keys and never signs anything.

How it solves XRPL's problems Revenue model Every feature in the build

How it solves XRPL's problems

Each of these is a property of the ledger itself, not a bug in it. They become problems when a wallet, a spreadsheet or a compliance file reads the ledger the easy way.

The problem	What NOSHASHI does	Where
Holders cannot see what an issuer can still do to a tokenAn issuer can keep the power to freeze a balance, claw it back, or require its approval to hold the token at all. A wallet shows none of this.	Reads the issuer's own account flags and signer list from validated ledger state and states each power plainly, with the ledger index it was read at and a digest anyone can recompute.	Authority certificate Issuer badge Issuer alerts AUTHORITY EXPOSURE ANALYSIS
Order books advertise depth that nobody can fillAn offer stays on the book at its full size after its owner has spent the money behind it. Depth summed from the advertised sizes can be many times what would actually trade.	Counts only what each offer's owner still holds (taker_gets_funded), within a stated band around the mid, and shows quoted and fillable side by side.	ORDER BOOK Treasury report EXPOSURE ANALYSIS
A payment can deliver far less than it saysA partial payment can state 1,000,000 USD and deliver 0.000001 USD. Tools that record the stated amount record money that never arrived.	Reads the delivered amount the ledger recorded, flags partial payments, and screens deposits on what arrived before they are credited.	SETTLEMENT LEDGER WATCH Delivered-amount export
Counterfeit tokens, phishing dust and lookalike addressesAnyone can issue a token called USD. A drop of dust can carry a link. An address can be made to match the first and last characters of a real one.	Flags a familiar ticker whose issuer owes nothing, dust carrying a link, lookalike addresses, and senders funded by a sanctioned account up to three hops back.	LEDGER WATCH CHECK AN ADDRESS INBOX SECURITY CENTER PROVENANCE
Who can move an account is easy to misreadA signer list is a weighted vote, not a headcount. A regular key signs alone. An account with no usable key cannot move at all.	Lists every route to a signature (master key, regular key, signer list counted by weight) and leads with the weakest, which is the one an auditor has to rely on.	CONTROL SURFACE Treasury report
A compliance check is a private log nobody else can verifyWhen a firm says it checked a counterparty, there is usually no way to prove the check ran, on what data, or under which rules.	Every verdict is GO, HOLD or NO-GO with the rule that decided it, sealed in a SHA-256 receipt over the ledger index, the rules and the policy version, and written to an append-only audit log.	VERIFICATION LEDGER & POLICY AUDIT TRAIL
One public server can be wrongPublic XRPL servers lag, rate-limit and occasionally disagree. A reading from one server is only as good as that server.	Reads only validated ledgers, compares several public servers, and issues no GO when the sources it needs do not agree.	LEDGER SYNC MISSION CONTROL
New compliance primitives are hard to readXLS-70 credentials and XLS-80 permissioned domains decide who may transact, but their state lives in raw ledger objects.	Resolves credential acceptance, expiry and revocation from ledger flags, and shows what each domain requires and how far a wallet is from meeting it.	CREDENTIALS DOMAIN GRID
Regulatory scoping is done by handTravel Rule thresholds and counterparty concentration are worked out in spreadsheets, after the fact.	Marks which settlements cross the Travel Rule (FATF R.16) threshold in a chosen jurisdiction and lack counterparty data, and scores concentration with the Herfindahl-Hirschman Index.	EXPOSURE ANALYSIS PORTFOLIO & RADAR

LIVE FROM MAINNET

Reading the XRP/USD.Bitstamp order book from the latest validated ledger…

Within 10% of the reference mid (a chosen parameter). DEX order book only; AMM pools are not included. At most 100 offers per side. Raw reading

Revenue model

NOSHASHI earns three ways: subscriptions by plan, prepaid API checks, and annual contracts for Enterprise and Strategic Infrastructure. The free tools on this site bring people in. Every paid plan sells proof that a check was done properly, never the customer's data.

Plan	Price	Who buys it	What they pay for
Free	Freeforever	Developers, analysts and individual holders	The desktop console, unlimited gate checks by a person, the on-device agent, CSV export and every free tool on this site.
Pro	$749per seat / month · $7,490 / year	Trading desks and analyst teams	Portfolios, alerts, the receipt vault, issuer analysis, an institutional policy, stress testing, incident response and the Compliance API with 5,000 verifications a month.
Institutional	$4,000per month · $40,000 / year	Regulated firms and exchange compliance teams	Everything in Pro, plus 100,000 API verifications a month, webhooks, regulator seats, Travel Rule scoping, offline adjudication, signed exports, the immutable audit log, bulk monitoring, custom alerts and proof of reserves.
Enterprise	$10,000per month · $120,000 / year	Large exchanges, banks and custodians	Everything in Institutional, plus deposit and withdrawal screening, asset passports, forensic trace, market surveillance, Customer Asset Protection and the embeddable screening widget.
Strategic Infrastructure	$20,833per month · $250,000 / year	Institutions building their own XRPL data layer	Everything in Enterprise, plus XRPL event feeds, custom schemas and bulk export, protection monitoring, the phishing link feed and Security Guardian.

PREPAID API CHECKS

For systems that call the Compliance API beyond their plan's allowance. A check run by a person in the console is never billed.

10,000 checks	$450	$0.045 each
50,000 checks	$2,000	$0.040 each
250,000 checks	$8,750	$0.035 each

HOW THE MODEL HOLDS TOGETHER

The fee attaches to automation and to institutions, not to people checking an address. Annual prepay is the monthly price times ten for Pro and Institutional. Enterprise and Strategic are priced by the year. NOSHASHI holds no keys and no funds, so it never earns from custody, spreads or order flow.

Full plan comparison: pricing. Prices are in US dollars and exclude tax.

Every feature in the build

Every screen in the desktop app, grouped as the app groups them; every paid feature with the plan that includes it; what runs underneath; the free tools on this site; and what is not built yet.

Every screen in the desktop app

OVERVIEW

OVERVIEW: What NOSHASHI is, what it does, and what is coming.
MISSION CONTROL: Live mainnet telemetry and the wallet gate.

COMPLIANCE

VERIFICATION: Run a settlement through the compliance gate and get GO, HOLD or NO-GO with the deciding rule.
LEDGER WATCH: Screen deposits before you credit them; watch accounts every minute with signed webhooks and a feed.
CREDENTIALS: The XLS-70 credential registry: acceptance, expiry and revocation read from the ledger.
DOMAIN GRID: XLS-80 permissioned domains: what each requires and how far a wallet is from it.
PROVENANCE: Account age and funding source: who this counterparty came from.
AUTHORITY: What the issuer of an asset can still do to it, digested so the reading can be re-checked.
SECURITY CENTER: Harden an account against takeover, catch lookalike addresses, and investigate a drained account.

LIQUIDITY

EXPOSURE ANALYSIS: Issuer freeze rights, Travel Rule scope and counterparty concentration.
ORDER BOOK: How much quoted depth is backed by someone who still holds the asset.
POOL GOVERNANCE: Who votes an AMM's fee, on what share of liquidity, and who holds the discount.
PORTFOLIO & RADAR: Multi-wallet surveillance, the compliance radar and scheduled stress monitoring.

EVIDENCE

AUDIT TRAIL: Wallet history with compliance metadata, exportable to CSV.
LEDGER & POLICY: Adjudication history, the institution's own policy, and signed export.
SETTLEMENT: What a transaction actually delivered, not what it requested.

ISSUERS & TREASURY

CONTROL SURFACE: Who can move a treasury: signers, quorum, master key and locked reserve.
ISSUANCE: Holder concentration and enforcement history for any issuance.
PASSPORT: A signed, portable record of an asset's posture: authority, freeze rights and concentration.

INTELLIGENCE

NOSHX: A compliance agent that reads the live ledger with the app's own read-only tools, on its own engine or a model you choose.
LEDGER GARDEN: Walk issuer, asset, holder, transaction and evidence, then ask the agent.

PUBLIC TOOLS

CHECK AN ADDRESS: Read what the ledger publishes about any account before you pay it.
INBOX: Unsolicited claims addressed to an account, and whether the tokens exist.
TOKEN RIGHTS: What an NFT's issuer can still do to it after you own it.
LEDGER SYNC: What four public nodes each report, and where they disagree.
LEARN: Hands-on labs with spaced review, plus short animated explainers.

ACCOUNT AND SETTINGS

PRICING: Plans, checkout and verification credits.
ACCOUNT: Subscription, two-factor authentication and API keys.
TRUST & SECURITY: What NOSHASHI reads, what it never does, and where data goes.
LEGAL & ACCESSIBILITY: Policies, the accessibility statement and contact routes.
SETTINGS: Appearance, accessibility, wallet and desktop integration.

Every paid feature, by the plan that first includes it

FROM PRO

Multi-wallet portfolios: Watch a book of accounts at once, with a live gate verdict on each.
Drift and expiry alerts: Know when a domain tightens or a credential is about to lapse.
Receipt vault: Every verdict stored, searchable and exportable months later.
Issuer freeze-rights analysis: Which balances an issuer can immobilise without notice.
Counterparty concentration: How much of the book rests on one counterparty, by the HHI index.
Persistent adjudication ledger: Every verdict kept on disk for when an examiner asks.
Institutional policy: Your own versioned thresholds, simulated against past verdicts before activation and named in every receipt.
Issuer drift monitor: Re-reads every issuer you hold and alerts when its flags change.
Authority certificate: Seven questions about an issuance, answered at a named ledger index and digested.
Compliance API: Your own systems ask the gate the same question through API keys.
Redemption stress testing: What the book would realise as cash across DEX and AMM, with frozen balances discounted.
Incident response: For a drained account: what changed, where the value went hop by hop, the real recovery paths, and a dossier.
Asset recovery suite: Stuck-funds and exposure scans across many addresses, valuation at the live bid, and the scam cluster mapper.

FROM INSTITUTIONAL

Offline adjudication: Adjudicate on a segregated network from captured validated state.
Signed audit export: A SHA-256 digest over the exact bytes of every export.
Travel Rule scoping: Transfers over the FATF R.16 threshold that lack counterparty data.
Webhooks: Revocation, drift and alert events pushed into your systems.
Regulator seats: Scoped, time-boxed read-only access for an examiner.
Immutable audit log: Append-only record of who changed what, and when.
Bulk portfolio monitoring: Unlimited watched wallets with scheduled stress runs.
Custom alert logic: Your own triggers over measured facts, sent where you choose.
Proof of reserves: A Merkle sum tree built on your machine, with reserve accounts attested daily from the ledger.
Shared scam registry: Reviewed scam reports that screen deposits and withdrawals for every organization.
Single sign-on (coming soon): Not available yet; sign-in is by email, password and two-factor authentication.

FROM ENTERPRISE

Asset passports: A signed, portable record of an asset's posture any counterparty can verify.
Forensic trace: Incident response at investigator depth: five hops, custodial landings and sanctioned addresses named.
Customer Asset Protection: A protection fund verified on the ledger, with a public page customers can check. Verification, not insurance.
Withdrawal screening: Every outbound payment checked before it is signed, including lookalike and sanctioned destinations.
Market surveillance: An issuer's order-book history read for manipulation indicators, with the transactions behind each.
Embeddable screening widget: One script tag that lets customers check an address is really yours before they pay.
Deposit screening: Every incoming payment judged before it is credited, on what actually arrived.
Dedicated environment (coming soon): Not offered yet; scoped per contract after architecture review.

FROM STRATEGIC INFRASTRUCTURE

Protection monitoring: A signed alert when reserves fall below customer balances.
Phishing link feed: Every domain advertised in XRPL micro-payment memos, read every minute, as an API feed.
Security Guardian: A signed alert within a minute of a watched account's keys or signer list changing.
XRPL event feeds: Up to 100 accounts read every minute, as signed webhooks and a JSON/NDJSON feed with history.
Custom schemas & bulk export: Your own record shapes and retention from 7 days to 10 years.

Underneath, free on this site, and not built yet

UNDERNEATH EVERY SCREEN

SHA-256 receipts: Every verdict hashed over a canonical body, so an auditor can prove a check ran and was not edited.
Local adjudication ledger: Every verdict written to disk on the operator's machine; it survives a restart and never leaves it.
Operator-owned policy: Concentration limits, reserve headroom, Travel Rule thresholds and freeze handling, versioned and editable.
Offline adjudication: Capture validated state while connected and adjudicate on a segregated network, with the capture's age on every verdict.
Organizations and roles: Owner, admin, analyst, compliance, risk, reviewer, auditor and viewer roles, plus API and regulator seats, enforced by the database, with four-eyes approval: a policy is never activated by its author.
Regulator seats: A read-only seat for an examiner for 1 to 180 days, ended by itself and recorded in the audit log.
Compliance API and signed webhooks: Scoped API keys, the same verdicts and receipts as the console, and events such as deposit_screened and custom_alert.
XRPL event feeds: Watched accounts read every minute, delivered by webhook or pulled as JSON, NDJSON or CSV, with a history endpoint.
Append-only audit log: Every export with its SHA-256, every verdict, setting change, scheduled run and fired alert.
White-label reports: The organization's name and colour on the console, exported audit files and passports.
Two-factor sign-in: On every account; API keys never enter the app window.
Binary integrity check: Hashes the running app so an operator can confirm it was not altered after download. Free on every plan.
Menu bar residency: The gate verdict one keystroke away on macOS, with native notifications.
Desktop on macOS, Windows and Linux: Built in public by CI from the source on GitHub.

FREE ON THIS SITE, NO ACCOUNT

Authority certificate: What an issuer can still do, for any XRPL issuer, with a recomputable digest.
Issuer badge: A live badge for a token page that links to the certificate.
Issuer alerts: A Discord message when an issuer's powers change.
Delivered-amount export: Every payment's stated and delivered amounts in a CSV, partial payments flagged.
Treasury report: Period-end holdings, who can move them, and what funded offers could absorb. Prints to PDF.
Book health: Quoted versus funded depth on the main XRP books, today and at each of the last seven daily closes.
Check an address: Screen an address before you pay it, from any phone browser.
Public JSON endpoints: /api/authority, /api/book, /api/book-health, /api/issuer-state, /api/delivered and /api/treasury, free and without a key.
Learn NOSHASHI: A free course on reading the ledger the way the product does.

NOT IN THE BUILD YET

Selective disclosure proofs: Proving one predicate (accredited, not sanctioned) without revealing the credential behind it. In progress.
Code signing and notarisation: Builds are reproducible and hash-verified, but not yet signed. In progress.
Uptime SLA, single sign-on and dedicated environments: Marked coming soon on every plan until they are funded.
SOC 2 report and independent security review: Policies, a control map and an internal assessment exist; no SOC 2 report is held and no outside review has run.
JavaScript SDK on npm: The SDK is in the repository (packages/sdk) and not yet published.

Source code, releases and the changelog are public on GitHub. Build state, counted rather than claimed: progress.