internal/settlement/route.go returns
the rail directly for banks or via the partner bank for credit unions.
GET /v1/matches/{id}/counterparty.internal/matching/network_position.go.
internal/settlement/state_machine.go advances them through
pending → queued_for_window → sent → confirmed (or → broken / expired).
Property tests prove no state goes backwards and expired instructions never send.
ledger_entry.ref_hash, computed by
cmd/merkle-roller overnight, committed to S3 Object Lock and a notary log.
Verification recomputes from the live DB and compares to all three sources — DB row,
S3 object, notary entry. Any mismatch breaks gap #3's tamper-detection guarantee.
| Side | Place |
| Term | Overnight |
| Estimated allocation | $23.5M @ 5.27% (3 counterparties) |
| Residual unmatched | $1.5M (rests as reservation) |
| Ledger writes | 12 entries across 4 sub-ledgers |
| Network coverage | $1.50B / $1.50B target · OK |
| Settlement routing | 2× direct Fedwire · 1× via Cornerstone |
| Cutoff | Fedwire 18:00 ET · 4h 12m left |