PAYMENTS · RECONCILIATION
ReconGuardv2
Payment switch reconciliation
Reference switch engine for payment rails. Reserves funds before dispatch, verifies HMAC over the raw request body, never trusts caller-supplied ledger amounts, and handles FAILED / variance / timeout states without locking customer accounts on security failures. Includes a hash-chained audit log and timeout sweep to STATUS_QUERY_REQUIRED.
THE PROBLEM IT ADDRESSES
Payment switches callback late, retry, or fail. Trusting caller amounts or netting batch variance hides leakage. Ops need a clear hold → settle / release / query loop with cryptographic integrity.
How it works
- 01initiate() reserves (holds) funds before anything is sent to the switch.
- 02Callbacks are HMAC-verified over the raw body, with skew and nonce checks.
- 03Engine looks up the authorised amount itself — never trusts a caller-supplied ledger figure.
- 04States: SETTLED, FAILED_RELEASED, SUSPENDED_VARIANCE, or STATUS_QUERY_REQUIRED on timeout.
Inputs
- ·Account id, channel, amount, idempotency key
- ·Switch callback body + HMAC signature
- ·Timestamp and nonce
- ·Policy: max skew, nonce TTL, callback timeout
Outputs
- ·Transaction state machine updates
- ·Hold / release / settle ledger effects
- ·Review flags (human review — not hard account locks)
- ·Hash-chained append-only audit entries
Capabilities in a scoped build
LIMITATIONS · READ BEFORE ENGAGING
- ·In-memory stores in the pack — replace with Postgres + Redis for production.
- ·Reference pack only — wire to your actual M-Pesa / card switch adapters.
- ·Security failures alert; they do not lock customer accounts (DoS risk).
VIDEO PREVIEW
See ReconGuard in action
Demo video coming soon
A walkthrough of ReconGuard will appear here. Meanwhile, request details or book a desk session below.
NEXT STEP
Request details or arrange a meeting
Source packs are not available for public download. Tell us about your institution and we will share a scoped overview, or book an architecture review.
Prefer the contact form? Contact desk
OTHER ARCHITECTURE PREVIEWS
DEPOSITS · RETENTION
SpreadShield v2
Optimises deposit retention offers from churn probability, market rates, and replacement cost — expected-value savings, not a hard-coded rate.
View detailsCREDIT · GUARANTEES
GuarantorGraph v2
Graph-based guarantor capacity, cycle detection, and contagion stress for SACCO / microfinance group lending — with assess/commit separation and SQL audit schema.
View details