Six specialized agents — coordinating compliance, risk scoring, atomic execution, and programmable reversibility — that move institutional capital across Solstice in seconds, with auditability from the first byte.
Agent-initiated transactions will dwarf human ones. Phone calls and T+2 batch jobs can't supervise machines.
compliance post-hoc · overnight batch risk · clawback by litigation — the legacy posture
An operator mandate — or an autonomous treasury policy — lands with Maestro, the orchestrator. It classifies the intent and owns the pipeline.
Concord runs six deterministic checks before anything moves — jurisdiction, status, balance, purpose, sanctions, eligibility. Before, not after.
Fermata scores the transaction across four dimensions and returns a composite. The score isn't advice — it decides the finality.
Maestro reviews and dispatches. No agent can bypass another — compliance can't be skipped to reach execution; the sequence is the security model.
Canto settles — atomic burn-and-mint PvP with an ISO 20022 memo, deterministic, no LLM in the loop. 387 ms later, it's final.
Separation of concerns as a security model — each agent owns a distinct step in the settlement lifecycle, and none can act outside its role.
The brain. Interprets operator commands or autonomous mandates, decides the action, and coordinates every downstream agent.
POST /agent-thinkSix deterministic checks before any movement: jurisdiction, bank status, balance, purpose code, sanctions, counterparty eligibility.
POST /compliance-checkScores counterparty, jurisdiction, asset, and behavior — the composite maps deterministically to a settlement finality.
POST /risk-scoreAtomic burn-and-mint PvP on Solstice with ISO 20022 (pacs.009) memo attached. Deterministic — no LLM in the loop.
POST /agent-executeNetwork supervisor. Monitors reversibility windows, detects anomalies, auto-reverses per rule, escalates uncertainty to humans.
POST /cadenza-monitorNatural-language config. Operators state intent in plain English; Aria translates it to parameter changes across the other five.
POST /agent-configLow composite risk settles instantly — straight to Canto, atomic PvP, 387 ms p99, no reversibility window.
The gate diverts to the extended path: soft settlement with a 24-hour window. Cadenza watches before anything becomes final.
Higher medium risk holds a 72-hour window — and the parked principal isn't idle: yield accrues during the hold.
High risk never self-executes. The transaction locks pending human review, with an AI-drafted briefing on the escalation dashboard.
Proceeds directly to on-chain execution — atomic PvP, 387 ms p99, no window.
Fermata's composite maps to a settlement type with no discretion in the loop — the same score always produces the same finality.
| Composite | Risk level | Finality | Window | What happens |
|---|---|---|---|---|
| 0 – 30 | Low | Instant | None | Proceeds directly to on-chain execution. ~387ms p99. |
| 31 – 50 | Medium | Deferred 24h | 24 hours | Soft-settled with three-token lockup; Cadenza monitors before finalization. |
| 51 – 70 | Medium | Deferred 72h | 72 hours | Longer lockup for higher-risk medium transactions. Yield accrues during hold. |
| 71 – 100 | High | Held | Indefinite | Locked pending human review. Escalation dashboard surfaces the AI-drafted briefing. |
At t+0 Canto burns the sender's deposit and mints the principal as a yield-bearing instrument, parked with the network custodian.
A T-bill-backed claim lands in the receiver's wallet as a pending balance — ownership intent transfers instantly; clearance waits.
Cadenza monitors the window — anomaly scans against network rules, auto-reverse authority, escalation to humans when uncertain.
On all-clear both lockup tokens burn and the receiver's deposit mints — hard finality, yield to the network. On flag: automatic clawback.
The originating tokenized deposit is burned the moment the extended path begins.
The principal parks in a yield-bearing instrument held by the designated network custodian.
A proof-of-claim token lands as a pending balance while Cadenza's review runs.
burn both lockup tokens
mint receiver deposit · hard finality
clawback to sender
re-mint original deposit
Agent commerce isn't human transactions executed faster — it's a class of transactions the legacy per-message floor priced out of existence. The Solstice ledger settles nano-payments natively on-chain, gas-free, each carrying its own compliance record.
Operators don't file tickets. They tell Aria what posture they want, and the parameters change across all five agents — immediately, auditably.
Make the European corridor more conservative.
Three classes of workflow prioritized for the first institutional pilots.
Standing mandates drafted in Aria, executed by Maestro on market events. Treasurers set the policy; agents execute the rebalances — 24/7, across corridors.
Two banks' Maestros negotiate settlement directly. Concord on both sides, Fermata scores the corridor, Canto settles atomically. Phone trees retired.
Per-call inference billing, machine-mediated data marketplaces, autonomous procurement loops — nano-payments to $0.000001, each settled and logged on-chain at the cadence of the workload.
Talk to our team about agent-mediated workflows on Solstice. Early-access institutional partners onboarding now.