Institutional Wallet
The safe-passage delivery surface for the Pre-Clearance Layer.
A non-custodial MPC self-custody wallet for institutional customers, with pre-clearance attestation built in on every outbound and a court-ready CREB anchored on every transit. The customer holds an MPC shard required for any movement - they initiate, they sign, they broadcast. JIL provides the wallet software, the integrations, the attestation, and the evidence anchor. We attest. The customer is the actor.
We attest. The customer is the actor.
The whole reason the wallet sits inside the JIL Sovereign product line - rather than as a separate routed-settlement service - is that the customer holds an MPC shard required for every transaction. They initiate. They sign. They broadcast. We are software, not service. That keeps the wallet outside MTL / MSB / VASP scope (FinCEN FIN-2019-G001 unhosted-wallet carveout; FATF R16 doesn't classify wallet software providers as VASPs).
Software, attestation, evidence
- The wallet UI, the MPC cosigner infrastructure, the integrations with DEX/CEX/bridge/hardware wallet partners
- Pre-clearance attestation on every outbound (the same 5-stage Tier 1 + 14-of-20 BFT as the institutional pre-clearance API)
- CourtChain anchor + CREB per transit, with 15+ year retention
- Workflow framework that step-throughs the customer's safe-passage UX
Hold the shard. Sign every transaction.
- Holds 1 of 3 MPC shards - required for any outbound
- Initiates each transit (custodian -> JIL wallet -> exchange / DEX / hardware)
- Reviews pre-clearance findings and approves before signing
- Authorizes each MPC threshold signature with their shard
- Is the legal actor of the transit (FinCEN R16: software providers are not VASPs)
Step-through UX for every institutional flow.
The wallet ships with workflow-driven UX for the most common institutional flows. Each is a state machine with audit-anchored events and pre-clearance attestation hooks. Phase 1 ships 3 P0 workflows; the remaining 11 are scheduled across Phases 2-4 of the roadmap.
KYB -> MPC -> key + cert
Institutional KYB packet (legal name, jurisdiction, principals, UBO disclosure), JIL compliance approval, MPC shard ceremony, API key issuance, mTLS cert registration. Single state machine; full audit trail.
The core flow
Customer drafts a send, pre-clearance attests (Stage 1-5), customer reviews findings, signs with their MPC shard, broadcasts on-chain, CREB anchors. flag verdicts go to findings_review for customer policy decision; fail blocks at the workflow level.
Safe-passage flagship
Pick exchange, resolve account ID, pre-clearance verifies the destination is a known-good deposit wallet of that exchange for that account, sign + broadcast, await exchange credit confirmation.
DEX swap, wrap/unwrap, hardware wallet send
Three workflows: DEX integrations (1inch / 0x / Uniswap) with pre-clearance attestation on each leg; wrap/unwrap via the existing wBTC-JIL/wETH-JIL/wUSDC-JIL bridge; outbound to a hardware wallet (Ledger / Trezor) with attestation.
Bridge, CEX→JIL withdrawal, multi-sig approval, rejection/hold
Cross-chain bridge with two-leg attestation; CEX withdrawal into the JIL wallet (inbound attestation); independent M-of-N customer approval layer ahead of the MPC sig; rejection/hold queue with override + justification trail.
Recurring, audit export, allowlist, recovery
Scheduled outbound with per-transit attestation; FATF/OFAC/FinCEN-format regulatory export packs; counterparty allowlist (pre-attested wallet directory accelerating Stage 1 cache); Shamir recovery with multi-officer attestation.
Phased rollout 2026-2027.
Workflow framework + 3 P0 state machines + pillar page
This commit. services/wallet-workflows live, P0 onboarding/transit/CEX-deposit registered, REST API at /v1/workflows/*.
Institutional UI tier at wallet.jilsovereign.com
Hostname-aware skin of the wallet codebase, KYB-first onboarding, React UX for the 3 P0 workflows.
P1 workflows in production
DEX swap, wrap/unwrap, hardware wallet send.
P2 + P3 workflows
Bridge, CEX withdrawal, multi-sig approval, rejection/hold, recurring, audit export, allowlist, recovery.
Detailed documentation.
One pipeline. Multiple delivery surfaces.
Ready to step institutional traffic through a non-custodial wallet with attestation built in?
API contract, sample integration, and workflow definitions are available under NDA. Initial briefings are 60 minutes for institutional custodians, exchanges, and qualified prime brokers.