Home / Technology

Six layers. One verdict.
Every step attestable.

A single synchronous call to DNR Verify runs the full pipeline under a strict latency budget. Any layer can approve, require step-up authentication, hold for review, or reject, all under rules the institution owns.

The Pipeline

What happens inside a verification

  1. Transaction

    A chain adapter normalizes the transaction into a canonical schema and validates structure, asset, contract, and chain support, including finality semantics for the network involved.

  2. Policy

    Deterministic, versioned institution rules evaluate amount ceilings, velocity, allow and deny lists, destination checks, and approval requirements. Policy is the final authority in every verdict.

  3. AI Risk

    DNR Intelligence scores the transaction against behavioral and contextual features and returns a risk score with machine-readable reason codes and supporting evidence.

  4. Identity

    Where appropriate, verified credentials and institutional KYB evidence contribute additional signals to the decision.

  5. Cryptography / PQC

    The verdict is signed with a hybrid signature: classical Ed25519 plus NIST-standardized ML-DSA, so the record stays valid even if either scheme is later weakened.

  6. Audit

    A verifiable record naming the exact controls, policy version, and evidence hashes is written to an append-only, Merkle-anchored transparency log that anyone can independently check.

Design Principles

Rules the system never breaks

Sidecar, never custodian

DNR never holds funds and never controls the keys that move value. It verifies flows it does not control. Independence is the source of its trust value.

Deterministic policy is final

AI produces scores and reasons; institution-owned rules decide the action. Explainable to regulators by construction, with no opaque automated authority.

Fail-safe, never fail-open

On timeout, dependency failure, or ambiguity the secure default is hold or reject. A silent approval is treated as a defect of the highest severity.

Everything is attestable

Every verdict yields a signed record anchored in an append-only log. Any third party can verify what controls ran and what evidence was used.

Cryptographic agility

Algorithms are referenced through a versioned registry, so schemes can rotate as standards evolve without breaking historical records.

Chain-agnostic by design

Network-specific adapters normalize each blockchain into one canonical model. Assets stay on their existing networks; DNR adds a layer around them.

Post-Quantum Security

Post-quantum-ready, not "quantum-proof"

DNR builds on the NIST-finalized post-quantum standards: ML-KEM for key establishment, ML-DSA for signatures, and SLH-DSA for long-lived hash-based assurance. Hybrid signing keeps every attestation valid under both classical and post-quantum assumptions. DNR applies this to the layer it controls (authorization, attestation, and audit) and makes no claims about the underlying blockchains themselves. Read the full whitepaper for the complete design.

AttributeTargetHow
Verify latencyp50 < 120ms · p99 < 300msStateless sync path, budget split across layers
Throughput10,000+ verifications/secHorizontally scaled, cache-backed pipeline
Availability99.95%+ on the verify pathMulti-region, active-active edge
Audit durabilityZero record lossAppend-only log with replicated storage
Tenant isolationStrongRow-level security, per-tenant keys, dedicated plane option

Want the full architecture?

We share the detailed reference architecture, threat model, and attestation specification with qualified design partners.

Talk to engineering