The settlement layer beneath your institution — where digital assets and traditional money finally work as one machine.
Today's rails move messages, then money. Everything in between is risk.
batch windows · T+1 · pre-funded nostros · Herstatt risk
Solstice Core is the permissioned source of truth — every transaction recorded, enforced by programmable rules, and provably final.
Solstice Network is the bank-facing surface — connect your tokenization platform, route through compliance, settle atomically with any counterparty.
They click into one settlement machine — rules below, movement above. Nothing settles that the ledger can't prove.
What each layer owns — before the story moves on.
Bank A submits a payment instruction — a tokenized deposit, ISO 20022 mapped, destination Bank B.
Compliance runs before money moves: identity, sanctions, policy. Attestations attach to the transaction itself.
Both legs bind cryptographically. Either everything settles, or nothing does — no partial fills, no daylight exposure.
One slot, deterministic. At t+387ms the payment is done — not "probably done."
Value redeems to Fed rails on your schedule. Solstice settles M1; the Fed settles M0. Additive — not replacement.
Four fields carry the whole story — amount, corridor, hooks, delegate. Scroll walks them the way the network reads them.
The amount is a 1:1 mirror of a regulated bank deposit — value that never leaves the issuing bank's balance sheet — transferable only under protocol compliance.
Payment-versus-payment: both currency legs settle together or not at all. No correspondent chain, no timing gap.
Transfer hooks evaluate jurisdiction and sanctions in-line. A failed check means nothing moves — there is no unwind queue.
The permanent delegate authority enables confirmed-fraud clawback inside the reversibility window — under network rules, never unilaterally.
The origin leg burns, the destination leg mints — one operation, no partial state to unwind.
From settlement through the governed clawback window to sealed — scrub the timeline.
Burn and mint legs execute as one operation. There is no intermediate state to unwind.
Confirmed fraud can be clawed back by the permanent delegate inside the configurable 24–72h window — under network rules, never unilaterally.
The window closes. The entry is irreversible and lives in the compliance log for supervisory audit.
One legible receipt, then its place among millions — every entry inspectable by a supervisor.
Benchmarked on a single Solstice cluster, DvP-01 workload.
Settlement records live for decades. "Harvest now, decrypt later" targets exactly this data — recorded today, broken when the machine arrives.
Solstice is PQC-native: every key exchange, every signature, every hash — NIST-standard post-quantum cryptography, from the first commit.
No migration event. No retrofit. The armor is the architecture — records trustworthy in 2045.
Consensus to message standard — and what settles on it today. Click any row for the detail.
Talk to our team about how Solstice Protocol can modernize your institution's settlement infrastructure.