Whitepaper · Transaction Trust Infrastructure · Version 1.0 · 2026-05-30
Payment Integrity Attestation Platform Trust Before Money Moves.
JIL Payment Integrity is a real-time, pre-settlement transaction trust infrastructure platform. It sits between payment authorization and settlement and produces, for every payment, a deterministic composite risk score, a signed attestation, and a court-ready evidence record. It is not a payment processor, not a gateway, not a fraud-only vendor, and not just an API. It is the platform that decides whether money should move, and proves the decision.
Risk scores and PASS / REVIEW / BLOCK decisions are produced by deterministic rules and sanctions-list matching with human review, never by machine learning or large language models. JIL attests and evidences; the customer and the courts adjudicate.
Abstract
Every payment, attested before it settles.
Modern payment networks have solved movement. Money moves instantly, globally, and at enormous scale. What they have not solved is trust. Authorization confirms that a card is valid and that funds exist; it does not confirm that the payment should happen. Stolen cards, account takeovers, synthetic identities, mule accounts, payout laundering, and sanctioned counterparties all pass authorization cleanly. The gap between authorization and settlement is where integrity is lost.
JIL Payment Integrity closes that gap. The platform ingests a payment intent before settlement, evaluates it against more than 150 data sources spanning identity, sanctions, device, and IP intelligence, and renders a deterministic composite risk score on a 0 to 100 scale: 0 to 30 PASS, 31 to 70 REVIEW, 71 to 100 BLOCK. Every decision is recorded as a signed, metered attestation, and disputed or high-exposure events generate a sealed Court Ready Evidence Bundle (CREB™) anchored on CourtChain™ under Federal Rule of Evidence 902(14). The result is transaction trust infrastructure: a platform layer that operates above processors, fraud engines, and compliance systems, gives every transaction an attestation, gives every participant a reputation profile, and turns any disputed event into court-ready evidence.
Thesis
The challenge is no longer moving money. It is knowing whether money should move.
For two decades the payments industry optimized for speed, reach, and approval rates. Those problems are largely solved. The unsolved problem is integrity: separating the payment that should move from the payment that should not, in the moment, before settlement is irreversible. Fraud engines score risk but do not attest. Compliance systems screen lists but do not produce evidence. Processors move money but do not own the trust decision. No layer in the stack issues a signed, durable record that says this payment was evaluated, here is the score, here are the rules that fired, here is the evidence, and here is who decided.
JIL fills that role. Trust Before Money Moves is not a tagline; it is the operating model. The platform converts a payment intent into a verdict and a proof before settlement, so that the decision is defensible afterward. The future of payments is not authorization. The future of payments is attestation.
Positioning
A platform, not an API. Transaction Trust Infrastructure.
JIL Payment Integrity is a platform and a category, Payment Integrity Attestation, not a feature inside someone else's stack. It does not compete as a cheaper fraud score. It operates above processors, fraud engines, and compliance systems as transaction trust infrastructure. An API is one of the ways customers reach the platform; the platform is the engine, the reputation network, the bad-actor repository, the evidence framework, and the governance underneath it.
What JIL is
A Payment Integrity Attestation Platform and Transaction Trust Infrastructure. A trust decision layer, a deterministic risk engine, an attestation engine, a global reputation intelligence network, a global bad-actor repository, and a court-ready evidence framework. It produces, for every payment, a risk score, an attestation, and an evidence package.
What JIL is not
Not a payment processor. Not a payment gateway. Not a merchant acquirer. Not a fraud-only vendor or fraud score. Not just an API. It takes no custody of funds, performs no money transmission, and never sits on the settlement rail as the mover of value. It identifies, scores, attests, and evidences; the customer and the courts adjudicate.
Where it sits
Between authorization and settlement, above the processor and the fraud engine. The customer keeps its existing processors, acquirers, and gateways. JIL is the trust layer they call before releasing money, and the evidence layer they call when a decision is challenged.
The integrity gap
Where money should not move but does.
Large consumer platforms, and games, digital storefronts, and creator economies most of all, face overlapping integrity failures that authorization alone never catches. JIL maps every one of them to a check that produces an attestation. The next section answers the gaming case directly.
Consumer payment fraud
Stolen cards, chargebacks and friendly fraud, account takeovers, refund and gift-card abuse, and stolen-instrument purchases that authorize cleanly and dispute later.
Creator and payout fraud
Fake engagement and bot farms inflating revenue, payout laundering, revenue manipulation, and mule payout accounts that move value out of the ecosystem.
Cross-border risk
VPN and proxy abuse, synthetic identities, mule accounts, and jurisdiction spoofing across the many countries and territories a global platform serves.
Sanctions and compliance
OFAC, EU, UK, and UN sanctioned counterparties, politically exposed persons, and watchlist matches on both purchasers and creator payees that must be screened before money is released.
Games, digital goods, and creator economies
How JIL answers the gaming payment-integrity problem.
Games platforms are the hardest payment-integrity case there is: hundreds of millions of low-value microtransactions, an in-game-currency economy, creator payouts flowing back out, and players in 200-plus countries, all at once. Digital goods are non-recoverable, so a chargeback is a pure loss. The challenge is not moving the money. It is knowing, before a coin pack is granted or a creator is paid, whether the money should move. JIL attests every one of those events before settlement.
In-game currency and item purchases
In-game currency packs, battle passes, and cosmetics authorize cleanly on a stolen card or a taken-over account, then dispute later. JIL attests each purchase before authorization in under 50 milliseconds, scoring device, IP, velocity, reputation, and payment-instrument signals, so stolen-instrument, account-takeover, gift-card-funded, and refund-abuse purchases are blocked before the currency is granted, not clawed back after.
Digital-goods chargeback and friendly fraud
Because the good is digital and non-recoverable, every chargeback is a loss and friendly fraud is rampant. Every purchase carries a deterministic, evidenced verdict, and a disputed event seals a CREB™ (transaction, device, IP, risk, and the original attestation) that serves as representment evidence, self-authenticating under FRE 902(14).
Creator-economy payout integrity
Fake engagement and bot farms inflate revenue, payouts launder value out, and cross-border payees carry sanctions exposure. JIL attests each creator payout before settlement, folding in suspected-bot-rate and engagement signals, prior payout-reversal history, OFAC, EU, UK, and UN plus PEP screening on the payee, and reputation-graph links between creators, devices, and payout instruments.
Multi-accounting, mules, and collusion
Bonus farming, refund rings, and payout-mule networks share devices, cards, and IPs across many accounts. The reputation graph clusters those shared-signal rings and the global bad-actor repository carries a confirmed fraudster from one event to the next, catching the structure that single-event scoring misses.
200-plus countries, AML, and sanctions
A global player base means VPN and proxy abuse, synthetic identities, jurisdiction spoofing, and AML obligations everywhere at once. IP intelligence resolves country, ASN, hosting, proxy, and TOR at the moment of the transaction, and sanctions screening runs on both purchasers and payees with rescreening on list updates.
Never a game token
The JIL token is solely the settlement and metering rail for attestation volume. It never represents or touches an in-game balance, currency, wager, or player asset, and JIL is never marketed as a gaming token. That discipline is what keeps the platform credible to a games platform's compliance team and to a regulator.
Consider the archetype: a global games platform processing on the order of $1B in annual storefront spend across tens of millions of transactions, with 1 to 5 million in-game purchase events per day at peak and roughly $350M in annual creator payouts across 200-plus countries. JIL sits between that platform and its existing processors and payout providers, attesting every purchase before authorization and every creator payout before settlement. At that scale, reducing fraud and chargeback loss by even a fraction of a percent of protected volume returns multiples of the platform cost, while every disputed event leaves a court-ready evidence trail. Adoption is phased lowest-exposure first: creator-payout attestation, then high-volume purchase attestation, then the full ecosystem.
Solution architecture
One engine, nine components, one attestation.
A payment intent enters before settlement. The platform evaluates it across its components, renders a deterministic composite verdict, records a signed attestation, and on dispute or high exposure assembles a CREB. The processor and settlement happen only after the trust decision. The flow is: payment intent, JIL attestation, deterministic risk evaluation, trust verdict, then processor and settlement.
Attestation engine
The system of record. It accepts the payment intent (user, device, country, amount, payment token, payee), orchestrates the checks, and emits a signed attestation per event with a stable check ID, the verdict, the score, the triggered rules, and the reason codes. Latency target under 50 milliseconds, maximum under 200 milliseconds. Every attestation is metered and recorded in one audit trail.
Deterministic risk engine
Computes a composite risk score by summing weighted sub-scores across user risk, device risk, geographic risk, velocity risk, and reputation risk. Thresholds are fixed and published: 0 to 30 PASS, 31 to 70 REVIEW, 71 to 100 BLOCK. The score and verdict are produced by deterministic rules and sanctions-list matching, not by machine learning. Every rule that fires is named and citable.
Reputation graph
A graph linking users, devices, wallets, cards, IP addresses, and creator accounts. It surfaces shared-device clusters, shared-instrument rings, and payout laundering structures that single-event scoring misses. Relationships feed the deterministic reputation sub-score; they do not auto-decide.
Global bad-actor repository
A network-wide repository of reputation signals for users, device fingerprints, wallet addresses, tokenized card hashes, IP and ASN reputation, and creator trust profiles. A confirmed bad actor on one customer raises risk for the same signal across the network, while raw identifiers are reduced to hashes wherever the regime allows.
Sanctions screening
OFAC SDN, EU consolidated, UK (OFSI), and UN list matching on purchasers and creator payees, plus PEP and adverse-media screening, with ongoing rescreening on list updates. A sanctions match is a deterministic BLOCK; payout is held before release.
Device intelligence
Device fingerprinting plus emulator, virtual-machine, VPN, proxy, and TOR detection, and root and jailbreak signals. Device risk contributes a deterministic sub-score and populates the reputation graph and bad-actor repository.
IP intelligence
Country, ASN, hosting-provider, proxy-status, and IP-reputation resolution at the moment of the transaction. Geographic and IP risk contribute deterministic sub-scores and corroborate device-location consistency over a session.
CREB™ evidence generator
On a disputed or high-exposure event, it assembles transaction evidence, user evidence, device evidence, risk evidence (scores and rules triggered), and the original attestation record into a sealed Court Ready Evidence Bundle, output as PDF, JSON, and API retrieval, self-authenticating under FRE 902(14).
Access gateway
Authentication, API-key management, rate limiting, request validation, and logging. The gateway is how customers reach the platform; it is not the platform. The engine, reputation network, repository, and evidence framework sit behind it.
Deterministic decisioning
Composite scoring, no model in the verdict path.
The composite risk score is the sum of deterministic, weighted sub-scores. A worked example: user risk 5, device risk 10, geographic risk 20, velocity risk 15, reputation risk 5, for a total of 55, which falls in the REVIEW band. The bands are fixed: 0 to 30 returns PASS, 31 to 70 returns REVIEW, 71 to 100 returns BLOCK. Each sub-score is computed from named rules (for example, ten purchases in five minutes on the same device, card, and IP raises velocity risk), and each fired rule is recorded with its reason code in the attestation.
This is a deliberate admissibility constraint, not a limitation. Outcomes (the score, the PASS / REVIEW / BLOCK verdict, a sanctions BLOCK, the decision to seal a CREB) are determined by deterministic rules, sanctions-list matching, statutory citations, and human review. They are never determined by machine learning or large language models. If a model were in the verdict path, opposing counsel would attack training data, hallucination rate, reproducibility, and known error rate under Daubert. AVA™ accelerates operations only: it may cluster signals, draft narratives, and prioritize review queues, but it never determines whether a payment passes, is reviewed, or is blocked. AI is for operational efficiency, never for determining outcomes.
Data sources
150+ platform data sources, breadth is the moat.
The platform draws on more than 150 data sources, spanning identity and KYC, sanctions, device intelligence, IP intelligence, card consortium data, and crypto intelligence. Breadth across these domains is what lets a deterministic engine separate the payment that should move from the one that should not. Sources are abstracted behind adapters, so a customer's existing providers slot in without changing the verdict logic.
Identity and KYC
Document and biometric identity verification, synthetic-identity detection, source-of-funds review for high-value payees, and re-verification on material profile change, sourced from established identity-verification providers.
Sanctions, PEP, watchlist
OFAC SDN, EU consolidated, UK (OFSI), and UN consolidated lists, plus PEP and adverse-media screening, with continuous rescreening as lists update.
Device intelligence
Device fingerprinting, emulator and virtual-machine detection, VPN, proxy, and TOR detection, and bot and automated-behavior signals from dedicated device-intelligence providers.
IP intelligence
Country, ASN, hosting-provider, proxy-status, and IP-reputation resolution from IP-reputation providers, evaluated at the transaction moment.
Card consortium data
Network and consortium dispute and chargeback intelligence, including issuer alert and resolution data, to distinguish stolen-instrument from friendly fraud before settlement.
Crypto intelligence
Wallet-address risk, exposure, and tracing intelligence from blockchain-analytics providers, for payouts and settlements that touch digital assets.
Evidence and admissibility
CREB™ on CourtChain™, self-authenticating under FRE 902(14).
CREB is the Court Ready Evidence Bundle. When a payment decision is disputed or carries high exposure, the platform seals a CREB that assembles the transaction evidence (amount, currency, timestamp), the user and account evidence, the device and location evidence, the risk evidence (composite score and every rule triggered), and the original attestation record. The bundle is delivered as PDF, JSON, and via API retrieval, so the customer, an issuer, a regulator, or a court retrieves it directly with no reconstruction.
Each CREB is anchored on CourtChain with a dual signature: Ed25519 for classical security and Dilithium-III (ML-DSA-65) for post-quantum security, with a Kyber key-encapsulation mechanism protecting the sealed payload. The anchor and signatures make the bundle self-authenticating under Federal Rule of Evidence 902(14) as a record generated by a process producing a verifiable digital identification. CourtChain provides the BFT-anchored, immutable chain of custody (14-of-20 quorum across jurisdictions), so the integrity of the evidence does not rest on any single party's say-so.
Token model
The token is a settlement and metering rail, nothing more.
The JIL token is solely the settlement and metering rail for attestation volume, exactly as in every other JIL vertical. Each attestation event meters a configurable basis-point fee for the throughput it consumes. The token does not custody, hold, move, or represent any payment, card balance, payout, or merchant settlement. It is not a consumer token, a gaming token, or a payments instrument, and it is never marketed as one. The platform performs no money transmission and is not a payment processor. Pricing is shared under engagement; figures are not published here.
Deployment
Three phases, lowest exposure first.
Creator-payout attestation
Start where volume is lower and value per event is higher and easier to deploy. Sanctions screen and risk score every creator payout before release, hold any match, and attest each decision. This proves integrity value on a contained, high-stakes flow before touching consumer purchase volume.
High-volume purchases
Extend attestation to high-volume consumer purchase flows (for example, in-game currency and microtransactions) with device, IP, velocity, and reputation scoring at scale, holding to the under-50-millisecond latency target so the trust decision is inline with checkout.
Full ecosystem
Attest every payment across the ecosystem: store purchases, in-game currency, creator payouts, and refunds, with the full reputation graph and bad-actor repository active and CREB available on any disputed or high-exposure event.
Outcomes
What the platform moves.
Enterprise deployments target measurable integrity outcomes. Indicative ranges, validated against each customer's baseline during the pilot, with full attestation coverage of in-scope payments.
What this is not
Scope, plainly.
- Not a payment processor, payment gateway, or merchant acquirer. JIL never moves or settles money
- Not a fraud-only vendor or a fraud score. It is a Payment Integrity Attestation Platform and transaction trust infrastructure
- Not just an API. The API is one entry point to a platform of engine, reputation network, repository, and evidence framework
- No machine learning or LLM in the verdict path. Scores and PASS / REVIEW / BLOCK decisions are deterministic, rule-based, and sanctions-list-matched, with human review
- The JIL token is solely a settlement and metering rail; not a consumer, gaming, or payments token, and it touches no balance or payout
- Not an adjudicator. JIL attests and evidences; the customer and the courts adjudicate. Not legal advice; payments and securities counsel review is required before launch
Conclusion
The future of payments is attestation.
Authorization tells a platform that a payment can happen. It does not tell the platform whether it should. JIL Payment Integrity supplies the missing layer: a deterministic, pre-settlement trust decision drawing on more than 150 data sources, recorded as a signed attestation, and backed by a court-ready CREB anchored on CourtChain under FRE 902(14). Because the verdict path is deterministic and human-reviewed rather than model-driven, the decision is defensible the day it is made and the day it is challenged. Trust Before Money Moves is the operating model, and transaction trust infrastructure is the category. JIL operates above the processor and the fraud engine as the layer that decides whether money should move, and proves it.
Bring trust to the payment path.
Brief your payments, risk, and compliance teams. We will walk the attestation engine, the deterministic composite scoring model, the reputation graph and global bad-actor repository, sanctions and device and IP intelligence, the sealed CREB anchored on CourtChain, and the three-phase deployment.
Request payment integrity demo Request technical design