Governance & Screening
Compliance oversight: counterparty sanctions / PEP screening + KYC, Segregation-of-Duties conflicts, and the audit-chain trusted-timestamp anchors.
Counterparty screening & KYC
Screens a name against the sanctions / PEP / adverse-media watchlists (a clearly-fictional, non-authoritative sample ships out of the box; production ingests the official OFAC / EU / UN lists). Supply a counterparty id to persist the run and load its KYC status.
Segregation of Duties
Toxic role/permission combinations no single principal may hold. The platform has no enumerable user/role store yet, so the console evaluates an empty assignment set โ the rule catalogue is always shown; violations populate when an assignment set produces them.
Audit-chain anchors
Periodic check-points committing the audit hash-chain head to a point in time โ RFC 3161 timestamped (trusted) when a TSA is configured, else a local server-clock checkpoint (untrusted).