Digital Assets

The Digital Assets capability applies the same analysis, verification and authority rules as the rest of the Finance family to a market with three properties that make discipline matter more, not less: it never closes, it moves faster than equities, and its settlement is effectively irreversible.

Those three properties change the risk profile without changing the principle. Analysis remains autonomous; movement remains gated behind human authority. But a market that trades at 3am, gaps violently and cannot claw back a mistaken settlement demands that the boundary between proposal and execution be, if anything, more rigid than it is for equities.

What the market’s properties change#

Irreversibility is a first-class constraint#

For most financial actions an error is expensive; for a settled on-network transfer it is final. The capability treats destination and amount as safety-critical inputs: they are confirmed against their source, re-confirmed at authorisation, and bound to an idempotency key so an ambiguous failure cannot be resolved by blindly retrying. The agent will refuse to present a movement whose destination it cannot verify to source.

proposal     move funds to a pre-registered destination
             amount and destination verified to source     pass
             destination on the approved allow-list         pass
             idempotency key attached                       pass
staleness    proposal expires in 90s if unapproved
             (market and fees re-quoted on any re-attempt)
authority    HELD  —  requires human approval
             expired-unapproved  →  discarded, never auto-executed