Tokenized Deposits & Programmable Cash

Coordinate bank-money runs with an explicit tokenized-deposit vs programmable-cash choice across program setup, institution acceptance and controls, funding and issuance, disposition and governed release, settlement with confirmation and return, and redemption, reconciliation, and evidence across same-bank, cross-bank, and cash-leg routes.

Scope

Bank money with explicit tokenized-deposit vs programmable-cash choice, same-bank / cross-bank / cash-leg modes, governed release, receiving confirmation, and recredit-aware closeout.

Scope

Money forms
Tokenized deposit; Programmable cash
Route modes
Same-bank; Cross-bank; Cash-leg
Boundary
StableNexus orchestrates policy, workflow, and proof only

Boundary

StableNexus role: orchestration, policy, workflow, proof. Not the issuing bank, receiving bank, settlement bank, control-account owner, or liability obligor.

Actor-lane operating map

Six actor lanes plus StableNexus orchestration overlay.

Each institution owns its lane; StableNexus orchestrates handoffs across same-bank, cross-bank, and cash-leg paths.

Route-mode phase map

How the six chapters sequence across each route mode.

Money-form vs route-mode matrix

AxisOptionsClose basis
Money form: Tokenized depositRuntime class: tokenized_depositLiability context: bank_liability
Money form: Programmable cashRuntime class: bank_issued_tokenized_cashLiability context: bank_money_program
Route mode: Same-bank movementReceiving confirmation: falseClose basis: internal posting
Route mode: Cross-bank coordinationReceiving confirmation: trueClose basis: receiving institution confirmation
Route mode: Cash-leg coordinationReceiving confirmation: conditionalClose basis: paired cash leg reconciliation

Lifecycle states

From draft through route-mode branching to evidence close.

Closeout-first technical sequence

Settlement resolution across same-bank, cross-bank, and cash-leg close paths.

Canonical chapters

ChapterOutcomeLifecycle states
1. Program SetupProgram perimeter, currencies, institutions, and allowed movement scope defined.draft, scoped
2. Institution Acceptance & ControlsInstitution acceptance, control-account readiness, and control discipline established.institutions_ready
3. Funding & IssuanceSource funding confirmed and issuer authorization obtained before issuance becomes active.funded, issued
4. Disposition & Governed ReleaseIssuance separated from governed release; release policy made explicit.release_held, release_authorized
5. Settlement, Confirmation & ReturnSame-bank posting, cross-bank receiving confirmation, cash-leg coordination, return, or recredit resolved.same_bank_posting, awaiting_receiving_confirmation, cash_leg_in_progress, settlement_closed, returned_or_recredited
6. Redemption, Reconciliation, & EvidenceRedemption, reconciliation, and evidence publication completed as one governed layer.redemption_or_outstanding, reconciled, evidence_closed

Artifact and evidence matrix

ChapterRuntime artifactsDocs-derived surfaces
1. Program Setupprogram_blueprint, entity_scope_matrixmoney_form_state
2. Institution Acceptance & Controlsparticipant_registry_snapshot, receiving_institution_profile, control_account_matrix, policy_route_profile, operating_window_profile, eligibility_limit_reportparticipant_control_state
3. Funding & Issuancesource_funds_validation, liquidity_position_snapshot, reservation_record, issuance_authorization, treasury_mint_recordissuance_authorization_state, liability_packet_view
4. Disposition & Governed Releaseallocation_release_note, release_disposition_policy, programmable_transfer_decision, payment_order_receiptrelease_policy_state, liability_packet_view
5. Settlement, Confirmation & Returnsettlement_resolution_packet, settlement_return_record, interop_settlement_receiptreceiving_institution_confirmation, return_or_recredit_state, settlement_window_state
6. Redemption, Reconciliation, & Evidenceredemption_burn_record, ledger_reconciliation_snapshot, exception_state_report, evidence_pack_exportclose_reporting_packet

Control overlay matrix

OverlayApplies to chaptersFailure branch
Policy gateFunding & Issuance; Disposition & Governed ReleaseRelease blocked until policy re-evaluation
Control-account validationInstitution Acceptance & Controls; Funding & IssuanceFunding blocked until control-account validation passes
Operating-window / cutoff governanceDisposition & Governed Release; Settlement, Confirmation & ReturnRelease or settlement deferred to next window
Finality confirmationSettlement, Confirmation & ReturnSettlement held pending finality or escalated to exception
Idempotent release / recoveryDisposition & Governed Release; Settlement, Confirmation & ReturnDuplicate replay safe-returned or conflict escalated
Return / recredit handlingSettlement, Confirmation & Return; Redemption, Reconciliation, & EvidenceReturn or recredit processed before close

Derived surfaces

SurfaceDescriptionActive in chapters
Money-form stateCurrent money form, route mode, close basis, and receiving-confirmation requirement.Ch. 1
Participant control stateInstitution acceptance, control-account validation, limit state, and operating window.Ch. 2
Issuance authorization stateFunding state, issuer authorization, and issuance status.Ch. 3
Release policy statePolicy snapshot, release decision, idempotency, and cutoff state.Ch. 4
Receiving-institution confirmationConfirmation requirement, status, source, and credit-evidence presence.Ch. 5
Return / recredit stateReturn or recredit status, trigger, and reference presence.Ch. 5
Settlement window stateWindow type, status, and finality state.Ch. 5
Liability packet viewMoney form, route mode, liability obligor, redeemability path, and reference presence.Ch. 3, 4
Close reporting packetReconciliation state, evidence completeness, and included reference types.Ch. 6

Support terms

Tokenized deposit
A bank liability represented in programmable form.
Tokenized cash
Bank-issued settlement value used between approved institutions.
Same-bank movement
A route that stays inside the issuing institution's own balance context.
Cross-bank coordination
A route that requires destination-institution acceptance before close.
Cash-leg coordination
The payment-side workflow that supports a separate tokenized action.
Control account
The governed bank-side account or balance used for controls.
Receiving institution
The approved bank or institution profile that can accept governed movement.
Recredit
A controlled return of value when the instructed route does not close.

Support docs

Non-goals

StableNexus is not the issuing bank, receiving bank, settlement bank, control-account owner, or liability obligor on any leg.

Same-bank movement, cross-bank coordination, and cash-leg coordination are distinct close conditions — a close on one route does not imply close on another.