mcp-tool-shop-org/Attestia
Financial truth infrastructure for the decentralized world.
English | 日本語 | 中文 | Español | Français | हिन्दी | Italiano | Português
Financial truth infrastructure for the decentralized world.
Mission
We believe that money — wherever it lives, however it moves — deserves the same rigor as the systems that created it. Smart contracts execute. Blockchains record. But no one attests.
Attestia is the missing layer: structural governance, deterministic accounting, and human-approved intent — unified across chains, organizations, and individuals.
We don't move your money. We prove what happened, constrain what can happen, and make the financial record unbreakable.
What We Stand For
- Truth over speed. Every financial event is append-only, replayable, and reconcilable. If it can't be proven, it didn't happen.
- Humans approve; machines verify. AI advises, smart contracts execute, but nothing moves without explicit human authorization. Ever.
- Structural governance, not political governance. We don't vote on what's valid. We define invariants that hold unconditionally — identity is explicit, lineage is unbroken, ordering is deterministic.
- Intent is not execution. Declaring what you want and doing it are separate acts with separate gates. The gap between them is where trust lives.
- Chains are witnesses, not authorities. XRPL attests. Ethereum settles. But authority flows from structural rules, not from any chain's consensus.
- Boring infrastructure wins. The world doesn't need another DeFi protocol. It needs the accounting layer underneath — the financial plumbing that makes everything else trustworthy.
Architecture
Attestia is three systems, one truth:
┌─────────────────────────────────────────────────────────┐
│ ATTESTIA │
│ │
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
│ │ Personal │ │ Org │ │ │ │
│ │ Vault │ │ Treasury │ │ Registrum │ │
│ │ │ │ │ │ │ │
│ │ Observe. │ │ Distribute. │ │ Govern. │ │
│ │ Budget. │ │ Account. │ │ Attest. │ │
│ │ Allocate. │ │ Reconcile. │ │ Constrain. │ │
│ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ │
│ │ │ │ │
│ └────────────┬────┘ │ │
│ │ │ │
│ ┌───────┴───────┐ │ │
│ │ Cross-System │◀─────────────┘ │
│ │ Reconciliation│ │
│ └───────┬───────┘ │
│ │ │
│ ┌───────┴───────┐ │
│ │ XRPL Witness │ │
│ │ (attestation)│ │
│ └───────────────┘ │
└─────────────────────────────────────────────────────────┘
| System | Role | Origin |
|---|---|---|
| Personal Vault | Multi-chain portfolio observation, envelope budgeting, intent declaration | Evolved from NextLedger |
| Org Treasury | Deterministic payroll, DAO distributions, dual-gate funding, double-entry ledger | Evolved from Payroll Engine |
| Registrum | Structural registrar — 11 invariants, dual-witness validation, XRPL attestation | Unchanged — constitutional layer |
Core Pattern
Every interaction follows one flow:
Intent → Approve → Execute → Verify
- Intent — A user or system declares a desired outcome
- Approve — Registrum validates structurally; a human signs explicitly
- Execute — The on-chain transaction is submitted
- Verify — Reconciliation confirms; XRPL attests the record
No step is optional. No step is automated away.
Principles
| Principle | Implementation |
|---|---|
| Append-only records | No UPDATE, no DELETE — only new entries |
| Fail-closed | Disagreement halts the system, never heals silently |
| Deterministic replay | Same events produce the same state, always |
| Advisory AI only | AI can analyze, warn, suggest — never approve, sign, or execute |
| Multi-chain observation | Ethereum, XRPL, Solana, L2s — chain-agnostic read layer |
| Structural identity | Explicit, immutable, unique — not biometric, but constitutional |
Status
14 packages, 1,853 tests, 96.80% coverage, all green. Building in public.
| Package | Tests | Purpose |
|---|---|---|
@attestia/types |
62 | Shared domain types (zero deps) |
@attestia/registrum |
297 | Constitutional governance — 11 invariants, dual-witness |
@attestia/ledger |
144 | Append-only double-entry engine |
@attestia/chain-observer |
242 | Multi-chain read-only observation (EVM + XRPL + Solana + L2s) |
@attestia/vault |
67 | Personal vault — portfolios, budgets, intents |
@attestia/treasury |
63 | Org treasury — payroll, distributions, funding gates |
@attestia/reconciler |
56 | 3D cross-system matching + Registrum attestation |
@attestia/witness |
245 | XRPL on-chain attestation, multi-sig governance, retry |
@attestia/verify |
200 | Replay verification, compliance evidence, SLA enforcement |
@attestia/event-store |
190 | Append-only event persistence, JSONL, hash chain, 34 event types |
@attestia/proof |
53 | Merkle trees, inclusion proofs, attestation proof packaging |
@attestia/sdk |
50 | Typed HTTP client SDK for external consumers |
@attestia/node |
184 | Hono REST API — 30+ endpoints, auth, multi-tenancy, public API, compliance |
Development
pnpm install # Install all dependencies
pnpm build # Build all packages
pnpm test # Run all tests (1,853)
pnpm test:coverage # Run with coverage reporting
pnpm typecheck # Type-check all packages
pnpm bench # Run benchmarksXRPL Integration Testing
A standalone rippled node runs in Docker for deterministic on-chain integration tests — no testnet dependency, no faucet, sub-second ledger close.
docker compose up -d # Start standalone rippled
pnpm --filter @attestia/witness run test:integration # Run on-chain round-trip tests
docker compose down # Stop rippledDocumentation
| Document | Purpose |
|---|---|
| HANDBOOK.md | Executive overview and full package reference |
| ROADMAP.md | Phase-by-phase project roadmap |
| DESIGN.md | Architecture decisions |
| ARCHITECTURE.md | Package graph, data flows, security model |
| REFERENCE_ARCHITECTURE.md | 5-layer stack, deployment patterns, trust boundaries |
| INTEGRATION_GUIDE.md | API integration with curl examples + SDK usage |
| VERIFICATION_GUIDE.md | Auditor step-by-step replay guide |
| THREAT_MODEL.md | STRIDE analysis per component |
| CONTROL_MATRIX.md | Threat → control → file → test mappings |
| SECURITY.md | Responsible disclosure policy |
| INSTITUTIONAL_READINESS.md | Adoption readiness checklist |
| PERFORMANCE_BASELINE.md | Recorded benchmarks |
Security & Data Scope
- Data accessed: Reads and writes financial ledger entries, attestation records, and cryptographic proofs. Connects to blockchain nodes (XRPL) when witness module is active.
- Data NOT accessed: No telemetry. No user credential storage. No third-party analytics.
- Permissions required: Read/write access to local data directories. Network access for blockchain attestation only. See THREAT_MODEL.md for full STRIDE analysis.
Scorecard
| Gate | Status |
|---|---|
| A. Security Baseline | PASS |
| B. Error Handling | PASS |
| C. Operator Docs | PASS |
| D. Shipping Hygiene | PASS |
| E. Identity | PASS |
License
Built by MCP Tool Shop
