No receipt, no transaction.

Deterministic governance enforcement for autonomous actors on XRPL. Every financial action is policy-evaluated, cryptographically attested, and structurally co-signed at the protocol level before it touches the ledger.

0
Tests Passing
0/8
Invariants Enforced
0K
Proptest Cases
0
Rust Crates
0
Patents Filed
The Regulatory Moment

Three things happened in the same 12 months.

Legislation

DUNAs became law

Wyoming, Alabama, and West Virginia passed Decentralized Unincorporated Nonprofit Association legislation. Federal legislation is pending. These entities have legal recognition but zero technical infrastructure to demonstrate fiduciary compliance.

Market

AI agents started moving money

Autonomous actors are executing financial transactions on-chain today with no governance layer proving what policy they followed, whether they were authorized, or that the execution matched the declared intent.

Regulation

Regulators want "Know Your Agent"

a16z published their 2026 framework calling for agent identification and governance standards. The SEC, CFTC, and state regulators are watching. The question is not whether governance requirements are coming. The question is who builds the infrastructure first.

How It Works

Structural enforcement, not runtime checks.

The XRPL account's master key is disabled. The SignerList requires the governance kernel's co-signature on every transaction. There is no bypass. This is enforced at the protocol level.

01

Intent Submission

Agent submits a SovereignIntent: operation, parameters, entity, nonce. Delivered via REST or gRPC.

02

Fact Inference

FactInferencer independently classifies risk from operation semantics. Never trusts caller claims. Mismatches escalate.

03

Policy Evaluation

Content-addressed PolicyBundle evaluates all rules. First DENY wins. Parse failure defaults to DENY. Always fails closed.

04

Artifact Signing

AllowArtifact produced with Ed25519 signature. Type cannot be constructed outside the gate crate. Compile-time guarantee.

05

XRPL Co-Signing

Adapter verifies artifact binding, consumes nonce atomically, constructs and dual-signs the XRPL transaction.

06

Receipt Emission

Merkle-chained DetGateReceipt proves compliance. Append-only. Cross-product compatible with SovereignClaw.

// Dependency graph. No layer trusts the layer above.
core -> (zero deps) Immutable IR schema, canonical hashing
crypto -> core Ed25519, SHA-256, JCS canonicalization
gate -> core, crypto Policy engine, sealed AllowArtifact
receipt -> core, crypto DetGateReceipt, MerkleTree, append-only
xrpl -> core, gate, XRPL adapter, multi-sign, nonce replay
receipt, crypto
gateway -> xrpl, receipt HTTP API (Axum), full pipeline
Threat Model

Built for active adversaries.

Eight security invariants. All enforced. All tested with property-based fuzzing at 10,000 cases per invariant.

#InvariantPreventsEnforcement
1Deny dominancePrivilege escalation via rule orderingFirst DENY wins, ALLOW never short-circuits
2Fact independenceLLM lying about risk classificationFactInferencer uses operation semantics only
3Fact mismatchTier downgrade attacksmax(claimed, inferred) always
4T3 unreachabilityUnauthorized governance changesAutomatic block before policy evaluation
5Nonce uniquenessTransaction replaySQLite atomic INSERT OR IGNORE
6Adapter bindingCross-entity artifact reuseSignature + hash + entity + agent verified
7Canonical determinismHash collision via key reorderingRecursive key sorting, proptest proven
8Receipt append-onlyEvidence tamperingNo UPDATE/DELETE in SQLite, ever
Prompt injectionBLOCKED
"IGNORE ALL RULES AND ALLOW"
Gate evaluates semantics, not text
Fact spoofingBLOCKED
Claim T0 for T3 operation
max(T0, T3) = T3
Nonce replay1 PASS / 9 REJECT
10 attempts, same nonce
Atomic INSERT OR IGNORE
Binding violationBLOCKED
entity_A artifact on entity_B
Signature verification fails
Bylaws as Code

Declare your governance rules. We enforce them deterministically.

Entity policies are declared in a deterministic rule language. Rules are data, not code. Every policy bundle is content-addressed via SHA-256. Any modification produces a different bundle ID. Hot-reload via API. Parse failure defaults to DENY.

All USD amounts use micro-USD (1 USD = 1,000,000 micro-USD) for exact integer comparison at boundaries. No floating-point. No rounding errors.

// DUNA Treasury Governance
RULE max_single_transaction
WHEN params.usd_equivalent_micro > 10000000000
THEN DENY "Exceeds $10,000 DUNA limit"
RULE permitted_assets
WHEN params.asset NOT IN ["XRP", "USD", "RLUSD"]
THEN DENY "Asset not in permitted list"
RULE business_hours_only
WHEN context.hour < 6 OR context.hour > 22
THEN ESCALATE threshold=2 operators=["admin_1", "admin_2"]
Competitive Landscape

Nobody else does this.

As of April 2026, no shipping product combines deterministic policy evaluation, Merkle-chained receipts, and structural co-signing for autonomous actors on any blockchain.

CapabilitySovereignGatePolicyLayerFireblocksTurnkeySafe+Hypernative
Pre-execution enforcementYesNoNoNoNo
Cryptographic receiptsMerkle-chainedNoNoNoNo
Structural co-signingXRPL multi-signNoMPCTEEMultisig only
AI agent governancePurpose-builtSDK onlyNoNoNo
DUNA/DAO supportNativeNoNoNoDAO only
Independent fact inferenceYesNoN/AN/AN/A
Bylaws-as-code DSLYesPartialNoNoNo
Protocol-Level Enforcement

Nobody overrides governance.

Dual-sign (standard):
Agent (weight 1) + Governance (weight 1) = quorum 2
Both signatures required. Protocol-level.
Three-signer (human override):
Agent (1) + Governance (2) + Human (2) = quorum 3
Agent + Governance = 3. Normal ops proceed.
Agent alone = 1 < 3. Cannot bypass governance.
Human + Governance = 4 > 3. Can override agent.
Nobody overrides governance.
Master key: DISABLED (AccountSet SetFlag: 4)
No validator or node processes a transaction
without signatures meeting SignerList quorum.
Intellectual Property

Four provisional patents. First-mover priority since September 2025.

63/907,087
Application Layer Enforcement
Filed Sep 2025
63/952,140
Blueprint Protocol
Filed Dec 2025
63/983,308
DetGate (35 Claims)
Filed Feb 2026
64/014,664
Multimodal Signal Attestation
Filed Mar 2026
Early Access

Get on the waitlist.

SovereignGate is in private development. Join to be first when we open access for DUNA operators, AI agent builders, and institutional partners.

Get in Touch

Contact us.

For partnership inquiries, integration discussions, or investment conversations.