GitHunt

English | 日本語 | 中文 | Español | Français | हिन्दी | Italiano | Português

Attestia

CI codecov Landing Page MIT License

Financial truth infrastructure for the decentralized world.


Mission

We believe that money — wherever it lives, however it moves — deserves the same rigor as the systems that created it. Smart contracts execute. Blockchains record. But no one attests.

Attestia is the missing layer: structural governance, deterministic accounting, and human-approved intent — unified across chains, organizations, and individuals.

We don't move your money. We prove what happened, constrain what can happen, and make the financial record unbreakable.

What We Stand For

  • Truth over speed. Every financial event is append-only, replayable, and reconcilable. If it can't be proven, it didn't happen.
  • Humans approve; machines verify. AI advises, smart contracts execute, but nothing moves without explicit human authorization. Ever.
  • Structural governance, not political governance. We don't vote on what's valid. We define invariants that hold unconditionally — identity is explicit, lineage is unbroken, ordering is deterministic.
  • Intent is not execution. Declaring what you want and doing it are separate acts with separate gates. The gap between them is where trust lives.
  • Chains are witnesses, not authorities. XRPL attests. Ethereum settles. But authority flows from structural rules, not from any chain's consensus.
  • Boring infrastructure wins. The world doesn't need another DeFi protocol. It needs the accounting layer underneath — the financial plumbing that makes everything else trustworthy.

Architecture

Attestia is three systems, one truth:

┌─────────────────────────────────────────────────────────┐
│                      ATTESTIA                           │
│                                                         │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐  │
│  │   Personal   │  │     Org      │  │              │  │
│  │    Vault     │  │   Treasury   │  │   Registrum  │  │
│  │              │  │              │  │              │  │
│  │  Observe.    │  │  Distribute. │  │  Govern.     │  │
│  │  Budget.     │  │  Account.    │  │  Attest.     │  │
│  │  Allocate.   │  │  Reconcile.  │  │  Constrain.  │  │
│  └──────┬───────┘  └──────┬───────┘  └──────┬───────┘  │
│         │                 │                 │           │
│         └────────────┬────┘                 │           │
│                      │                      │           │
│              ┌───────┴───────┐              │           │
│              │  Cross-System │◀─────────────┘           │
│              │ Reconciliation│                           │
│              └───────┬───────┘                           │
│                      │                                   │
│              ┌───────┴───────┐                           │
│              │ XRPL Witness  │                           │
│              │  (attestation)│                           │
│              └───────────────┘                           │
└─────────────────────────────────────────────────────────┘
System Role Origin
Personal Vault Multi-chain portfolio observation, envelope budgeting, intent declaration Evolved from NextLedger
Org Treasury Deterministic payroll, DAO distributions, dual-gate funding, double-entry ledger Evolved from Payroll Engine
Registrum Structural registrar — 11 invariants, dual-witness validation, XRPL attestation Unchanged — constitutional layer

Core Pattern

Every interaction follows one flow:

Intent → Approve → Execute → Verify
  1. Intent — A user or system declares a desired outcome
  2. Approve — Registrum validates structurally; a human signs explicitly
  3. Execute — The on-chain transaction is submitted
  4. Verify — Reconciliation confirms; XRPL attests the record

No step is optional. No step is automated away.


Principles

Principle Implementation
Append-only records No UPDATE, no DELETE — only new entries
Fail-closed Disagreement halts the system, never heals silently
Deterministic replay Same events produce the same state, always
Advisory AI only AI can analyze, warn, suggest — never approve, sign, or execute
Multi-chain observation Ethereum, XRPL, Solana, L2s — chain-agnostic read layer
Structural identity Explicit, immutable, unique — not biometric, but constitutional

Status

14 packages, 1,853 tests, 96.80% coverage, all green. Building in public.

Package Tests Purpose
@attestia/types 62 Shared domain types (zero deps)
@attestia/registrum 297 Constitutional governance — 11 invariants, dual-witness
@attestia/ledger 144 Append-only double-entry engine
@attestia/chain-observer 242 Multi-chain read-only observation (EVM + XRPL + Solana + L2s)
@attestia/vault 67 Personal vault — portfolios, budgets, intents
@attestia/treasury 63 Org treasury — payroll, distributions, funding gates
@attestia/reconciler 56 3D cross-system matching + Registrum attestation
@attestia/witness 245 XRPL on-chain attestation, multi-sig governance, retry
@attestia/verify 200 Replay verification, compliance evidence, SLA enforcement
@attestia/event-store 190 Append-only event persistence, JSONL, hash chain, 34 event types
@attestia/proof 53 Merkle trees, inclusion proofs, attestation proof packaging
@attestia/sdk 50 Typed HTTP client SDK for external consumers
@attestia/node 184 Hono REST API — 30+ endpoints, auth, multi-tenancy, public API, compliance

Development

pnpm install          # Install all dependencies
pnpm build            # Build all packages
pnpm test             # Run all tests (1,853)
pnpm test:coverage    # Run with coverage reporting
pnpm typecheck        # Type-check all packages
pnpm bench            # Run benchmarks

XRPL Integration Testing

A standalone rippled node runs in Docker for deterministic on-chain integration tests — no testnet dependency, no faucet, sub-second ledger close.

docker compose up -d              # Start standalone rippled
pnpm --filter @attestia/witness run test:integration  # Run on-chain round-trip tests
docker compose down               # Stop rippled

Documentation

Document Purpose
HANDBOOK.md Executive overview and full package reference
ROADMAP.md Phase-by-phase project roadmap
DESIGN.md Architecture decisions
ARCHITECTURE.md Package graph, data flows, security model
REFERENCE_ARCHITECTURE.md 5-layer stack, deployment patterns, trust boundaries
INTEGRATION_GUIDE.md API integration with curl examples + SDK usage
VERIFICATION_GUIDE.md Auditor step-by-step replay guide
THREAT_MODEL.md STRIDE analysis per component
CONTROL_MATRIX.md Threat → control → file → test mappings
SECURITY.md Responsible disclosure policy
INSTITUTIONAL_READINESS.md Adoption readiness checklist
PERFORMANCE_BASELINE.md Recorded benchmarks

Security & Data Scope

  • Data accessed: Reads and writes financial ledger entries, attestation records, and cryptographic proofs. Connects to blockchain nodes (XRPL) when witness module is active.
  • Data NOT accessed: No telemetry. No user credential storage. No third-party analytics.
  • Permissions required: Read/write access to local data directories. Network access for blockchain attestation only. See THREAT_MODEL.md for full STRIDE analysis.

Scorecard

Gate Status
A. Security Baseline PASS
B. Error Handling PASS
C. Operator Docs PASS
D. Shipping Hygiene PASS
E. Identity PASS

License

MIT


Built by MCP Tool Shop

Languages

TypeScript98.4%JavaScript1.2%Dockerfile0.2%Astro0.1%CSS0.0%

Contributors

MIT License
Created February 11, 2026
Updated March 5, 2026
mcp-tool-shop-org/Attestia | GitHunt