Institutional Wallet / Architecturejilsovereign.com/products/institutional-wallet/architecture
Architecture

Institutional Wallet Architecture

Multi-sig governance, MPC 2-of-3, BFT validator quorum

A wallet built for institutions, not individuals. Multi-signature governance, compliance-integrated transaction approval, and cryptographic evidence on every movement. Every outbound transfer is attested by the Verdict Engine and sealed to CourtChain™ before execution.

MPC 2
3/Threshold signing
Post-quantum
Dilithium / Kyber
BFT 14
20/Validator quorum
13
Jurisdictions

§ 01Business Architecture

AudienceHedge funds, family offices, corporate treasurers, DAO treasuries, regulated stablecoin issuers, brokerages.
BuyerCFO, CTO, Head of Treasury, BSA Officer.
Economic ModelPer-wallet-month + per-tx fee. Volume tiers for high-throughput trading desks. No AUM percentage.
PartnersValidator network operators (13 jurisdictions), custodian-grade key-management hardware (Ledger, Yubico), regulated-bank settlement partners.

§ 02Technical Architecture

MPC 2-of-3

User holds 1 shard, JIL holds 1, recovery service holds 1. No single party can sign alone.

Post-quantum

Dilithium signing + Kyber key encapsulation. Quantum-resistant by construction.

Policy engine

Per-counterparty whitelists, per-jurisdiction restrictions, time-based limits, multi-approver workflows.

Verdict pre-check

Outbound counterparty + amount validated against sanctions + AML policy before signing.

BFT seal

14-of-20 validators across 13 jurisdictions sign each transaction's verdict before MPC signing.

Data SourcesOFAC SDN crypto, sanctions feeds, internal policy registry, validator quorum signatures.

§ 03Process Flow

01
Tx initiated
Beneficiary + amount + memo. Optionally a multi-approver workflow.
02
Policy verifies
Counterparty whitelist, jurisdiction, amount limits, approver signatures.
03
Verdict pre-check
Sanctions + AML against beneficiary address. JIL signs verdict.
04
MPC signs
User shard + JIL shard combine. 2-of-3 threshold satisfied.
05
Broadcast + CourtChain™
Tx broadcasts to chain. Verdict + signing record sealed to CourtChain™.

§ 04Plain English Example

Worked example

Plain English: a $50M treasury operation with a 24-hour audit window

Family office's CFO initiates $50M USDC transfer to a regulated counterparty in Singapore. Policy engine verifies: beneficiary on whitelist (yes), Singapore jurisdiction allowed (yes), amount within weekly limit (yes), 2 of 3 approvers signed (CFO + CIO + lawyer). Verdict pre-check: counterparty wallet clean, AML pattern green. JIL signs verdict, MPC combines, tx broadcasts. 23 hours later, regulator requests audit-trail. Family office hands the regulator a self-authenticating CREB™ containing the policy decision + verdict + signing record + tx receipt. Done in <5 minutes.

§ 05Capabilities Summary

ThresholdMPC 2-of-3 - user always holds a shard
PQ cryptoDilithium + Kyber for quantum-resistant signing
PolicyCounterparty whitelist, jurisdiction allowlist, amount limits, multi-approver workflows
Validator network14-of-20 BFT across 13 jurisdictions - no single party can compel
Audit trailFRE 902(14) self-authenticating; regulator receives immediate audit response