Institutional Operating Manual

OPTKAS Settlement & Control Infrastructure

Institutional-Grade Dual-Ledger Capital Markets Infrastructure

Legally Anchored. Cryptographically Verified. Multisig Governed.

What This System Is: OPTKAS is a membership-based institutional financial infrastructure — a private cooperative providing governed capital facilities, regulated custody coordination, and cryptographic settlement attestation. It operates through OPTKAS1-MAIN SPV, a Wyoming-incorporated special purpose vehicle, with atomic delivery-vs-payment settlement, immutable proof-of-reserves, and multi-signature governance at the protocol level. It is not a bank, broker-dealer, custodian, or exchange.
134
Total Capabilities
128 Live · 5 Dry-Run · 1 Planned
9
Mainnet Accounts
6 XRPL + 3 Stellar
28
TypeScript Engines
Modular architecture
9
AMM Pools
6 XRPL + 3 Stellar
$500M
Bond Program
$10M first tranche · 5% coupon
97.4%
On-Chain Success
1,213+ tests · 70+ pre-flight checks

What This System Can Do

  • ✓ Represent structured credit digitally
  • ✓ Execute atomic settlement (no clearing agent)
  • ✓ Provide continuous AMM liquidity rails
  • ✓ Govern funds via multi-signature
  • ✓ Anchor audit proof permanently on-chain
  • ✓ Automate borrowing base & covenant monitoring
  • ✓ Reduce counterparty risk to near zero
  • ✓ Operate without clearing intermediaries

What This System Cannot Do

  • ✗ Replace bond indenture law
  • ✗ Enforce legal recovery
  • ✗ Replace court enforcement
  • ✗ Eliminate default risk
  • ✗ Replace regulatory oversight
  • ✗ Create investor demand
  • ✗ Define legal ownership (tokens mirror law)
  • ✗ Self-enforce default (requires governance)

Architecture Hierarchy (Proper Order)

L1 — Legal & Control 10 capabilities · SPV + Bond Indenture + Transfer Agent
L2 — Custody & Banking 10 capabilities · 1:1 USD Escrow + Stablecoin Trustlines
L3 — Automation Engines 48 capabilities · 28 TypeScript Engines · 8 Domains
L4 — Ledger Evidence 10 capabilities · XLS-20 NFTs + SHA-256 Anchoring
L5 — Settlement (XRPL + Stellar) 42 capabilities · DvP + AMM + Multisig + Stellar

Read top-down: Law governs custody. Custody funds engines. Engines create evidence. Evidence settles on-chain.

Strategic Mental Model

Legal Framework
+
💰
Custody Rails
+
Automation
+
📜
Proof
=
Institutional Settlement
Layer 2

Custody & Banking

1:1 USD escrow, stablecoin trustlines, fiat controls

10 Live
Core Principle: Every digital dollar on the platform has a corresponding physical dollar (or stablecoin peg) in a controlled account. Custody is 1:1, on-ledger, and independently verifiable.

Stablecoin Trustlines (4 approved)

IssuerCurrencyNetworkStatus
BitstampUSDXRPLLive
GateHubUSDXRPLLive
TetherUSDXRPLLive
CircleUSDCStellarLive

Capability Register (10 capabilities)

IDCapabilityMechanismStatus
L2-01Stablecoin Custody1:1 USD peg trustlinesLive
L2-02Escrow LockXRPL native EscrowCreateLive
L2-03Escrow ReleaseCondition-verified EscrowFinishLive
L2-04Escrow CancelTime-expired EscrowCancelLive
L2-05Multi-Issuer Support4 approved trustline issuersLive
L2-06Reserve MonitoringContinuous balance verificationLive
L2-07Fiat On-RampBanking integration pathwayLive
L2-08Fiat Off-RampRedemption to bank accountLive
L2-09Custody AuditOn-demand balance attestationLive
L2-10Account SegregationSeparate escrow per dealLive
Layer 5 — Settlement

XRPL + Stellar Settlement

Atomic DvP, escrow mechanics, AMM pools, multisig, dual-chain

42 Live
Core Principle: Settlement is atomic. Both sides of a transaction clear simultaneously, or neither does. There is no counterparty risk window, no T+1/T+2 delay, and no clearing intermediary.

XRPL Settlement (19 capabilities)

IDCapabilityMechanismStatus
S-01Issuer Account ConfigurationDefaultRipple + RequireAuth + NoFreeze flagsLive
S-02Treasury Account ManagementOperational wallet with controlled trustlinesLive
S-03Time-Based EscrowEscrowCreate with FinishAfter/CancelAfterLive
S-04Crypto-Conditional EscrowSHA-256 preimage + FULFILLMENTLive
S-05Atomic DvP SettlementEscrow + Condition + Trustline in single flowLive
S-06Trustline AuthorizationRequireAuth flag per accountLive
S-07Trustline CreationTrustSet with limit and qualityLive
S-08Payment ExecutionDirect Payment with pathsLive
S-09Offer Create (DEX)OfferCreate for on-chain order bookLive
S-10Offer CancelOfferCancel for order managementLive
S-11Cross-Currency PaymentPathfinding + auto-bridgingLive
S-12NFT Mint (XLS-20)NFTokenMint with taxon 100Live
S-13NFT BurnNFTokenBurn for revoked attestationsLive
S-14Account ConfigurationAccountSet with domain + flagsLive
S-15Signer List ManagementSignerListSet for multisig updatesLive
S-16Transaction MonitoringWebSocket subscription + tx parsingLive
S-17Ledger Queryaccount_info, account_lines, account_txLive
S-18Fee EstimationDynamic fee calculationLive
S-19Sequence ManagementAuto-sequence with retry logicLive

AMM Pools & Liquidity (9 capabilities)

XRPL Pools (6)

OPTKAS-MTN / XRP
OPTKAS-CR / XRP
OPTKAS-ST / XRP
OPTKAS-MTN / Bitstamp.USD
OPTKAS-CR / GateHub.USD
OPTKAS-ST / Bitstamp.USD

Stellar Pools (3)

OPTKAS-USD / USDC
OPTKAS-USD / XLM
OPTKAS-USD / yUSDC
IDCapabilityMechanismStatus
AMM-01Pool CreationAMMCreate with initial depositLive
AMM-02Liquidity DepositAMMDeposit (single/dual asset)Live
AMM-03Liquidity WithdrawalAMMWithdraw with LP token burnLive
AMM-04Pool VotingAMMVote for fee parameterLive
AMM-05Continuous SwapCPMM formula executionLive
AMM-06LP Token ManagementIssue/redeem LP tokensLive
AMM-07Price OracleAMM spot price as referenceLive
AMM-08Auction SlotAMMBid for reduced fee slotsLive
AMM-09Pool AnalyticsTVL, volume, fee income trackingLive

Multi-Signature Governance (5 capabilities)

IDCapabilityMechanismStatus
MS-01Signer Configuration2-of-3 quorum (3 signers configured)Live
MS-02Multi-Sign TransactionCollect + combine signer blobsLive
MS-03Signer RotationSignerListSet to add/remove signersLive
MS-04Quorum AdjustmentThreshold modification via SignerListSetLive
MS-05Master Key DisableasfDisableMaster flag on issuerLive

Stellar Settlement (9 capabilities)

IDCapabilityMechanismStatus
ST-01Regulated Asset IssuanceOPTKAS-USD with auth_required + auth_revocable + auth_clawbackLive
ST-02Trustline AuthorizationAllowTrust / SetTrustlineFlagsLive
ST-03Clawback ExecutionClawback operation for complianceLive
ST-04Path PaymentPathPaymentStrictSend/ReceiveLive
ST-05SDEX OrderManageSellOffer / ManageBuyOfferLive
ST-06Account MergeAccountMerge for cleanupLive
ST-07Data AnchoringManageData for on-chain metadataLive
ST-08Horizon MonitoringHorizon API subscription + effectsLive
ST-09Multi-Sig (Stellar)Threshold-based signing (low/med/high)Live

Asset Issuance

6 XRPL IOUs, 1 Stellar regulated asset, 3 functional token types

XRPL Issued Assets

OPTKAS-MTN
Medium-Term Note Token
Freeze: Yes · Clawback: No
OPTKAS-CR
Claim Receipt
Freeze: Yes · Clawback: No
OPTKAS-ST
Settlement Token
Freeze: Yes · Clawback: No
OPTKAS-EV
Evidence Marker
Freeze: Yes · Clawback: No
OPTKAS-LP
Liquidity Provider Token
Freeze: Yes · Clawback: No
OPTKAS-GOV
Governance Token
Freeze: Yes · Clawback: No

Stellar Regulated Asset

OPTKAS-USD

Regulated asset with full issuer control — clawback IS appropriate here because Stellar's model is designed for compliance-grade assets.

auth_required auth_revocable auth_clawback_enabled

Functional Token Types

Claim Receipt

OPTKAS-CR

Represents a lender's claim on a specific funded position. Not the asset itself — the receipt of participation.

Settlement Token

OPTKAS-ST

Used in DvP flows as the medium of atomic exchange. Moves through escrow during settlement.

Evidence Marker

OPTKAS-EV

Anchors a SHA-256 hash of compliance/audit data. Not a financial instrument — a proof artifact.

Layer 3

Automation Engines

28 TypeScript engines across 8 operational domains

44 Live 4 Dry-Run
Core Principle: Engines don't decide — they execute. Every engine operates within boundaries set by Layer 1 (law) and Layer 2 (custody). No engine can exceed its authorization scope.

Domain 1: Bond Lifecycle (5 capabilities)

IDCapabilityEngineStatus
E-01Tranche Issuancebond-lifecycle-engineLive
E-02Coupon Schedulingbond-lifecycle-engineLive
E-03Maturity Processingbond-lifecycle-engineLive
E-04Call/Put Managementbond-lifecycle-engineLive
E-05Investor Registry Syncbond-lifecycle-engineLive

Domain 2: Issuance & Settlement (5 capabilities)

IDCapabilityEngineStatus
E-06Token Mintingissuance-engineLive
E-07DvP Orchestrationsettlement-engineLive
E-08Escrow Managementescrow-engineLive
E-09Receipt Generationreceipt-engineLive
E-10Settlement Verificationverification-engineLive

Domain 3: Reserve Vault & Portfolio (8 capabilities)

IDCapabilityEngineStatus
E-11Reserve Allocationvault-engineLive
E-12Collateral Trackingcollateral-engineLive
E-13NAV Calculationnav-engineLive
E-14Portfolio Rebalancingrebalance-engineLive
E-15Mark-to-Marketmtm-engineLive
E-16Waterfall Distributionwaterfall-engineLive
E-17Concentration Limitslimits-engineLive
E-18Reserve Proof Generationproof-engineLive

Domain 4: Borrowing Base (5 capabilities)

IDCapabilityEngineStatus
E-19Borrowing Base Calculationborrowing-base-engineLive
E-20Advance Rate Applicationborrowing-base-engineLive
E-21Eligibility Screeningeligibility-engineLive
E-22Certificate Generationcertificate-engineLive
E-23Covenant Monitoringcovenant-engineLive

Domain 5: Risk Analytics (6 capabilities)

IDCapabilityEngineStatus
E-24Monte Carlo VaRrisk-engineLive
E-25Stress Testingstress-engineLive
E-26Scenario Analysisscenario-engineLive
E-27Concentration Riskconcentration-engineLive
E-28Liquidity Riskliquidity-engineLive
E-29Credit Scoringcredit-engineLive

Domain 6: Trading (7 capabilities — 4 Dry-Run)

IDCapabilityEngineStatus
E-30Spot Executiontrading-engineLive
E-31AMM Interactionamm-engineLive
E-32Order Routingrouting-engineLive
E-33Margin Tradingmargin-engineDry-Run
E-34Leverage Controlleverage-engineDry-Run
E-35Short Sellingshort-engineDry-Run
E-36Derivatives Pricingderivatives-engineDry-Run

Domain 7: Deal Pipeline & Lender Management (10 capabilities)

IDCapabilityEngineStatus
E-37Pipeline Trackingpipeline-engineLive
E-38Term Sheet Scoringscoring-engineLive
E-39Lender Matchingmatching-engineLive
E-40Due Diligence Automationdd-engineLive
E-41Investor Reportingreporting-engineLive
E-42Draw Managementdraw-engineLive
E-43Payoff Calculationpayoff-engineLive
E-44Document Generationdocgen-engineLive
E-45Compliance Screeningcompliance-engineLive
E-46Notification Enginenotification-engineLive

Domain 8: AI & Intelligence (3 capabilities)

IDCapabilityEngineStatus
E-47Document Analysisai-analysis-engineLive
E-48Anomaly Detectionanomaly-engineLive
E-49Predictive Analyticsprediction-engineLive
Layer 4

Ledger Evidence

XLS-20 attestation NFTs, SHA-256 hash anchoring, dual-chain redundancy

10 Live
Core Principle: Every significant action produces a permanent, tamper-proof record. Proof is not optional — it is architectural. If it happened, there is a hash on-chain that proves it.

Attestation Architecture (How It Works)

ComponentMechanismLocation
Attestation NFTXLS-20 NFTokenMint (taxon 100)XRPL
Hash AnchorSHA-256 of document/data bundleNFT URI field
Dual AnchorManageData + hashStellar
VerificationHash re-computation + ledger lookupEither chain

Capability Register (10 capabilities)

IDCapabilityMechanismStatus
EV-01Attestation MintNFTokenMint with SHA-256 URILive
EV-02Attestation BurnNFTokenBurn for revocationLive
EV-03Hash AnchoringSHA-256 preimage computationLive
EV-04Dual-Chain AnchorXRPL NFT + Stellar ManageDataLive
EV-05Verification ServiceRe-hash + ledger lookupLive
EV-06Audit BundlePackage attestations for reviewLive
EV-07Compliance ProofRegulatory evidence packageLive
EV-08Time-Stamped EvidenceLedger close time as timestampLive
EV-09Chain-of-Custody ProofSequential NFT trailLive
EV-10Data Room IntegrationHash bundle for deal roomsLive

Risk & Analytics

10 risk metrics, Monte Carlo VaR, stress testing, borrowing base certificates

$4.11M
Net Asset Value
250%
Over-Collateralization
1.8%
Portfolio VaR (95%)

Risk Metrics Register (10 metrics)

MetricEngineMethodologyFrequency
Portfolio VaRrisk-engineMonte Carlo (10k sims)Daily
Stress Lossstress-engineHistorical + hypotheticalWeekly
Concentrationconcentration-engineHHI + single-name limitsReal-time
Liquidity Coverageliquidity-engine30-day cash flow projectionDaily
Borrowing Baseborrowing-base-engineAdvance rate × eligible collateralWeekly
Over-Collateralizationcollateral-engineCollateral ÷ OutstandingReal-time
Credit Scorecredit-engineMulti-factor scoring modelPer deal
Default Probabilitypd-engineLogistic regression + marketMonthly
Recovery Raterecovery-engineCollateral waterfall analysisPer event
Covenant Compliancecovenant-engineReal-time threshold monitoringContinuous
Cross-Layer

Operations & Workflows

Critical workflows, pre-flight checklists, emergency procedures

14 Cross-Layer

Workflow 1: Funding Ceremony (10 Steps)

1
Lender KYC/AML verified + accreditation confirmed
L1
2
Term sheet scored by AI + approved by committee
L3
3
Trustline authorized for lender account
L5
4
Escrow created with time + crypto conditions
L2
5
Lender funds escrow with stablecoin
L2
6
Claim receipt (OPTKAS-CR) minted
L5
7
DvP atomic settlement executes
L5
8
Attestation NFT minted with SHA-256 hash
L4
9
Borrowing base recalculated
L3
10
Investor confirmation + receipt delivered
L3

Workflow 2: Default Scenario (8 Steps)

1
Covenant breach detected by monitoring engine
L3
2
Alert to all signers + compliance officer
L1
3
Emergency freeze (if warranted)
L5
4
Borrowing base recalculation
L3
5
Collateral liquidation queue
L5
6
Investor notification with attestation bundle
L4
7
Recovery waterfall execution
L1
8
Post-mortem + ledger evidence package
L4

Emergency Freeze Protocol

Time to Freeze: Seconds, not hours. The freeze protocol operates at the ledger level — it does not require human approval to trigger (though human approval is required to lift).
1
Anomaly detected (threshold violation, unauthorized movement)
L3
2
Circuit breaker triggers automatic freeze
L5
3
All signers notified immediately
L1
4
Root cause analysis + evidence collection
L4
5
3-of-3 multisig vote required to unfreeze
L5

Revenue Model

5 revenue lanes, 4 pricing tiers, 3 moats

Core Principle: Monetize rails, proof, and execution. Stay in "infrastructure + verification + settlement" — avoid securities language, direct custody of client funds, and yield promises.

Revenue Lanes (5 lanes)

LaneWhat You SellRevenue RangeSpeed to Market
Settlement-as-a-ServiceAtomic DvP + Escrow + Receipts0.25%–1.00% per settlementFastest
Tokenization FeesIssuance + Distribution + Liquidity$25k–$250k setup + 10–50 bps/yrFast
Proof & Data RoomSHA-verified data room + attestations$5k–$50k/monthReady now
Managed OpsLiquidity + Risk + Borrowing Base$10k–$100k/monthEnterprise
Sponsor EconomicsOrigination + Servicing + Carry0.50%–2.50% of notionalRequires legal

Pricing Tiers (4 tiers)

TierMonthlySetupIncludes
Core$5k/mo$15kDashboards, audit log, data room, attestation
Settlement+$10k/moDvP templates, escrow, receipts (0.35%/tx)
Risk+$15k/moBorrowing base, VaR, stress tests, covenants
Enterprise$250k/yrCustomCustom modules, managed liquidity, SLA

Revenue Moats (3 moats)

🔒

Irrefutable Proof

Cryptographic proof is a higher standard than "we have a dashboard."

Atomic Settlement

T+0, no counterparty risk window, no clearing agent.

Operator-Grade Automation

Sticky, recurring value that clients cannot easily replicate.

Boundaries & Regulatory Scope

What OPTKAS is — and what it is NOT

❌ Not a Bank

No deposits, no lending, no checking/savings

❌ Not a Broker-Dealer

No client trade execution, internal only

❌ Not a Custodian

No omnibus, ledger-native escrow only

❌ Not an Exchange

No public order book, internal AMM only

Explicit Limitations

BoundaryExplanation
Not an Investment AdvisorNo personalized advice. Risk analytics are internal tools, not client recommendations.
Not a Money TransmitterNo transmission between third parties. Settlement is bilateral and structured.
Not a FundNo pooled investor capital. SPV issues bonds backed by specific collateral.
Not a ClearinghouseNo multilateral netting. DvP is bilateral, atomic, and escrow-secured.

What It IS

An institutional-grade settlement, evidence, and automation infrastructure operating on public ledger rails.

Settlement Evidence Automation Compliance Infrastructure

Credit Committee Narrative

Five questions. Five answers. All verifiable.

Purpose: A five-minute walkthrough for institutional decision-makers. No jargon. No filler. Five questions, five answers, with verifiable evidence.

1. Who Controls the Funds?

A purpose-built SPV (OPTKAS1-MAIN SPV, Wyoming) governed by a bond indenture with a registered Transfer Agent (Securities Transfer Corporation, SEC-registered).

  • No individual can move funds unilaterally
  • Multisig governance requires 2-of-3 signers
  • Emergency freeze can halt operations in seconds
  • Insurance: $25.75M coverage

2. Where Are the Assets?

On-ledger, individually identifiable, and independently verifiable. No omnibus accounts. No commingled custody.

Asset TypeLocationVerification
Stablecoin reservesXRPL escrow accountsXRPL explorer — real-time
Issued IOUsXRPL trustlinesTrustline query
Collateral evidenceXLS-20 NFTsNFT query — SHA-256
Stellar instrumentsStellar regulated assetHorizon API

3. How Is Settlement Enforced?

Atomic Delivery-versus-Payment (DvP) using XRPL's native escrow and conditional execution. T+0, no counterparty risk window.

1
Buyer funds escrow with stablecoin
2
Seller deposits asset into conditional hold
3
Both sides satisfy conditions
4
Settlement executes atomically
5
Receipts minted as XLS-20 NFTs

4. What Happens in Default?

A defined, automated, multi-step protocol — not a panic call.

1
Covenant breach detected automatically
2
Alert to all signers + compliance
3
Emergency freeze (seconds)
4
Borrowing base recalculation
5
Collateral liquidation queue
6
Investor notification + attestation
7
Recovery waterfall execution
8
Post-mortem + evidence package

5. What Prevents Unilateral Movement?

ControlMechanismBypass Difficulty
Multisig2-of-3 signers requiredRequires 2 separate key compromises
Escrow ConditionsTime locks + crypto conditionsCannot be overridden — protocol-enforced
Trustline AuthIssuer authorizes each holderUnauthorized accounts cannot hold tokens
Circuit BreakersAutomatic freeze on anomalyNo human delay — threshold-triggered
Bottom Line: No single person, no single key, and no single decision can move assets. This is not a policy — it is an architectural constraint enforced by the ledger itself.

Summary for the Committee

QuestionOne-Line Answer
Who controls funds?SPV + multisig + registered transfer agent
Where are assets?On-ledger, individually verifiable, no omnibus
How is settlement enforced?Atomic DvP — T+0, no counterparty risk window
What happens in default?Automated 8-step protocol with full evidence trail
What prevents unilateral movement?Multisig + escrow + trustlines + circuit breakers
Final Note: Every answer above can be independently verified using public ledger explorers. This is not a trust exercise — it is a verification exercise.
▶ Auto-scrolling — Training Mode Active