Pillar 6 of 6 - Delivery

Institutional Wallet

The safe-passage delivery surface for the Pre-Clearance Layer.

A non-custodial MPC self-custody wallet for institutional customers, with pre-clearance attestation built in on every outbound and a court-ready CREB anchored on every transit. The customer holds an MPC shard required for any movement - they initiate, they sign, they broadcast. JIL provides the wallet software, the integrations, the attestation, and the evidence anchor. We attest. The customer is the actor.

MPC 2-of-3 · user holds 1 shard Pre-clearance attestation on every outbound CREB anchored per transit 14-of-20 BFT on every PSA
Schedule a Call All Pillars
The Regulatory Distinction

We attest. The customer is the actor.

The whole reason the wallet sits inside the JIL Sovereign product line - rather than as a separate routed-settlement service - is that the customer holds an MPC shard required for every transaction. They initiate. They sign. They broadcast. We are software, not service. That keeps the wallet outside MTL / MSB / VASP scope (FinCEN FIN-2019-G001 unhosted-wallet carveout; FATF R16 doesn't classify wallet software providers as VASPs).

JIL provides

Software, attestation, evidence

  • The wallet UI, the MPC cosigner infrastructure, the integrations with DEX/CEX/bridge/hardware wallet partners
  • Pre-clearance attestation on every outbound (the same 5-stage Tier 1 + 14-of-20 BFT as the institutional pre-clearance API)
  • CourtChain anchor + CREB per transit, with 15+ year retention
  • Workflow framework that step-throughs the customer's safe-passage UX
Customer does

Hold the shard. Sign every transaction.

  • Holds 1 of 3 MPC shards - required for any outbound
  • Initiates each transit (custodian -> JIL wallet -> exchange / DEX / hardware)
  • Reviews pre-clearance findings and approves before signing
  • Authorizes each MPC threshold signature with their shard
  • Is the legal actor of the transit (FinCEN R16: software providers are not VASPs)
Workflows

Step-through UX for every institutional flow.

The wallet ships with workflow-driven UX for the most common institutional flows. Each is a state machine with audit-anchored events and pre-clearance attestation hooks. Phase 1 ships 3 P0 workflows; the remaining 11 are scheduled across Phases 2-4 of the roadmap.

P0 · Onboarding

KYB -> MPC -> key + cert

kyb_pending -> kyb_under_review -> mpc_provisioning -> key_issuance -> cert_pending -> cert_signed -> active

Institutional KYB packet (legal name, jurisdiction, principals, UBO disclosure), JIL compliance approval, MPC shard ceremony, API key issuance, mTLS cert registration. Single state machine; full audit trail.

P0 · Outbound transit

The core flow

draft -> attestation_in_flight -> findings_review -> awaiting_signature -> broadcast_pending -> awaiting_confirmation -> creb_anchored -> completed

Customer drafts a send, pre-clearance attests (Stage 1-5), customer reviews findings, signs with their MPC shard, broadcasts on-chain, CREB anchors. flag verdicts go to findings_review for customer policy decision; fail blocks at the workflow level.

P0 · CEX deposit

Safe-passage flagship

draft -> exchange_picked -> destination_resolved -> attestation_in_flight -> findings_review -> awaiting_signature -> broadcast_pending -> awaiting_confirmation -> awaiting_exchange_credit -> completed

Pick exchange, resolve account ID, pre-clearance verifies the destination is a known-good deposit wallet of that exchange for that account, sign + broadcast, await exchange credit confirmation.

P1 · Q3 2026

DEX swap, wrap/unwrap, hardware wallet send

Three workflows: DEX integrations (1inch / 0x / Uniswap) with pre-clearance attestation on each leg; wrap/unwrap via the existing wBTC-JIL/wETH-JIL/wUSDC-JIL bridge; outbound to a hardware wallet (Ledger / Trezor) with attestation.

P2 · Q4 2026

Bridge, CEX→JIL withdrawal, multi-sig approval, rejection/hold

Cross-chain bridge with two-leg attestation; CEX withdrawal into the JIL wallet (inbound attestation); independent M-of-N customer approval layer ahead of the MPC sig; rejection/hold queue with override + justification trail.

P3 · 2027

Recurring, audit export, allowlist, recovery

Scheduled outbound with per-transit attestation; FATF/OFAC/FinCEN-format regulatory export packs; counterparty allowlist (pre-attested wallet directory accelerating Stage 1 cache); Shamir recovery with multi-officer attestation.

Roadmap

Phased rollout 2026-2027.

Phase 1 · Q2 2026

Workflow framework + 3 P0 state machines + pillar page

This commit. services/wallet-workflows live, P0 onboarding/transit/CEX-deposit registered, REST API at /v1/workflows/*.

Phase 2 · Q3 2026

Institutional UI tier at wallet.jilsovereign.com

Hostname-aware skin of the wallet codebase, KYB-first onboarding, React UX for the 3 P0 workflows.

Phase 3 · Q4 2026

P1 workflows in production

DEX swap, wrap/unwrap, hardware wallet send.

Phase 4 · 2027

P2 + P3 workflows

Bridge, CEX withdrawal, multi-sig approval, rejection/hold, recurring, audit export, allowlist, recovery.

Ready to step institutional traffic through a non-custodial wallet with attestation built in?

API contract, sample integration, and workflow definitions are available under NDA. Initial briefings are 60 minutes for institutional custodians, exchanges, and qualified prime brokers.