VigiRail
VigiRail is the institutional payment and financial-messaging layer of VigiChain — ISO 20022-compatible, post-quantum, and gasless for the sender. It is a protocol subsystem committed by VigiChain consensus, not a separate chain. Research and testnet-gated: disabled until its cryptographic, consensus and interoperability checks are independently reviewed. Mainnet stays locked.
A VigiRail sender transfers exactly the business amount. No native VIGI to hold, no gas to price, no blockchain nonce to manage — the protocol never subtracts network cost from the transfer. Resource control is institutional: sponsors, contracted capacity and message quotas, all held as consensus state, so no local setting can change what is valid.
VigiRail speaks the ISO 20022 families — customer initiation, clearing and settlement, cash-management reporting and business headers. Raw XML is never a consensus format: each message is validated against an exact schema and usage profile, normalised into a bounded canonical representation, and committed by hash. The chain verifies the commitments; it does not run an XML parser.
Each message is sealed in a post-quantum envelope: a key encapsulation establishes a shared secret, a pinned key-derivation function produces the encryption keys, authenticated encryption protects the payload, and an institutional post-quantum signature binds the whole envelope. Names, account identifiers, amounts and compliance data stay off the public ledger — only commitments are published, enabling deterministic validation and later selective disclosure.
Regulated participants can receive scoped viewing or audit capabilities without exposing every payment to the world. A viewing capability never grants spending or settlement authority — visibility and control are separated by design.
VigiRail separates messaging from irreversible settlement: a payment is validated, optionally reserves liquidity, then finalises. Before finality it can be cancelled; after finality it is never rewritten — a return is a new, linked compensating transfer. Idempotency keys, per-institution sequences and validity windows make the same instruction impossible to settle twice, even if it is resent through another gateway.
VigiRail refuses rather than guesses: an unavailable cryptographic backend, an unknown suite, an inactive institution, an exhausted quota or a failed signature all stop the message — no placeholder ever returns success. It stays disabled until independent cryptographic, consensus and banking-interoperability review passes. Throughput figures are engineering targets, not public performance claims until independently reproduced. Mainnet remains locked.
Sovereign post-quantum network for verified value.
A sovereign post-quantum network for verified wrapped assets, self-custody, sealed receipts and financial control. Testnet active; mainnet locked until validation is complete.
