DOCUMENTATION

Policies

How a verdict is decided, every rule the rule set can apply, and how institutional policies are governed.

Verdicts

VerdictMeaning
GOEvery blocking rule passed. Settlement is cleared to broadcast.
HOLDBlocking rules passed but an advisory rule failed. Manual sign-off required.
NO-GOA blocking rule failed. Settlement is refused by the compliance layer.
INSUFFICIENT DATAA rule could not be evaluated because the evidence it needs could not be read. This is not a pass, a failure or a soft refusal — it is the absence of an answer, and it says nothing about the subject.

A blocking failure gives NO-GO. Otherwise an evidence source that could not be read gives INSUFFICIENT DATA. Otherwise an advisory failure gives HOLD. Otherwise GO.

Rules

RuleCheckSeverityDomains
ACCOUNT_ACTIVATEDAccount activated on mainnetBlockingDEX-US, LEND-INST, TOKEN-PVT, MINT-US, CUST-Q, RTL-OPEN
CREDENTIAL_KYC_LEVEL_1Holds kyc level 1BlockingDEX-US, RTL-OPEN
CREDENTIAL_SANCTIONS_CLEARANCEHolds sanctions clearanceBlockingDEX-US, LEND-INST, MINT-US
RESERVE_SOLVENCYClears XRPL owner reserveBlockingDEX-US, LEND-INST, TOKEN-PVT, MINT-US, CUST-Q, RTL-OPEN
SPENDABLE_BALANCESpendable balance covers transferBlockingDEX-US, LEND-INST, TOKEN-PVT, MINT-US, CUST-Q, RTL-OPEN
TRANSFER_CEILINGWithin domain transfer ceilingBlockingDEX-US, LEND-INST, TOKEN-PVT, CUST-Q, RTL-OPEN
DOMAIN_GOVERNANCEDomain governance is activeAdvisoryDEX-US, LEND-INST, TOKEN-PVT, CUST-Q, RTL-OPEN
DOMAIN_ATTESTATIONAccount publishes a domain attestationAdvisoryDEX-US, LEND-INST, TOKEN-PVT, MINT-US, CUST-Q, RTL-OPEN
CREDENTIAL_ACCREDITED_INVESTORHolds accredited investorBlockingLEND-INST, TOKEN-PVT, MINT-US
CREDENTIAL_PEP_SCREENINGHolds pep screeningBlockingTOKEN-PVT
CREDENTIAL_KYC_LEVEL_2Holds kyc level 2BlockingMINT-US, CUST-Q
CREDENTIAL_INSTITUTIONAL_CUSTODYHolds institutional custodyBlockingMINT-US, CUST-Q
TRANSFER_CEILINGDomain accepts settlementsBlockingMINT-US
DOMAIN_GOVERNANCEDomain governance is activeBlockingMINT-US

An evidence rule (EVIDENCE_<SOURCE>, advisory) is added for each source that could not be read, so a missing reading is never treated as a pass.

Reference domains

These are reference fixtures with generic operator names, not real permissioned domains. On a live network the same fields are read from XLS-80 PermissionedDomain objects.

DomainRequiresCeiling (XRP)Governance
DEX-US
US_REGULATED_DEX
KYC_LEVEL_1, SANCTIONS_CLEARANCE250,000active
LEND-INST
INSTITUTIONAL_LENDING
ACCREDITED_INVESTOR, SANCTIONS_CLEARANCE5,000,000active
TOKEN-PVT
PRIVATE_TOKEN_SALES
ACCREDITED_INVESTOR, PEP_SCREENING1,000,000review
MINT-US
STABLECOIN_MINTING
KYC_LEVEL_2, ACCREDITED_INVESTOR, SANCTIONS_CLEARANCE, INSTITUTIONAL_CUSTODYclosedsuspended
CUST-Q
QUALIFIED_CUSTODY
KYC_LEVEL_2, INSTITUTIONAL_CUSTODY20,000,000active
RTL-OPEN
RETAIL_SETTLEMENT
KYC_LEVEL_110,000active

Institutional policies

An organization's policy moves from draft to pending to active. Drafts are written and simulated by owner, admin, compliance, risk, analyst. A pending policy is activated by owner, admin, compliance, and never by the person who submitted it. The server enforces that rule, not the app. The active version is bound into every receipt it produces.

Generated from src/lib/policy.ts · src/lib/org/governance.ts