Institutional Fraud Infrastructure

Local-First Risk Infrastructure & Deterministic Fraud Orchestration.

QUORUM converts real-time risk signals into governed verdicts — each one executed under policy, backed by a cryptographic audit chain, and provable to a third party with a short Merkle proof, however large the history. Built for institutions where "we think it was right" is not good enough.

Illustrative Decision Object
Session ATO-7719
Evaluating
Risk
72.4
Policy
3
Rules fired
3
Behavior
0.82
Device
0.64
Velocity
0.91
01 Intake
Headless session detected
02 Arbitrate
Policy precedence applied
03 Verdict
Escalate to isolation
04 Commit
Audit object signed
Governed Verdict
ISOLATED
sha256:7F9A...E21C
ledger #004891
[signal] impossible pointer cadence
[policy] rule ATO-14 exceeded
[record] hashed before release
[ledger] sealed & signed
In plain terms

QUORUM detects fraud in real time, enforces a decision, and produces a cryptographically provable record of exactly why.

Built for banks, payment processors, and financial institutions that have to defend against automated attacks — and justify every block to a regulator.

01 — Detects

Catches fraud as it happens

Watches how users type, move, and behave in real time. Flags automation, headless browsers and account-takeover patterns as the request is made — not hours later in a report.

02 — Decides

Makes a governed call

Issues a verdict — block, escalate, or pass — under your institution's own rules. The real-time verdict comes from deterministic rules; locally run AI models review cases afterwards and their output is evidence for analysts, not an unchecked verdict.

03 — Proves it

Creates an auditable record

Every decision is recorded before it is returned and sealed into a hash-chained ledger signed with Ed25519 and ML-DSA-65 — which signals and rules applied and what the outcome was. Each one can be proven to an auditor.

System Architecture

Governance Layer
Per-institution rule sets, shadow mode for new rules, operator promotion with FROST approval where required, and WebAuthn step-up for privileged actions.
Execution Layer
A rule engine and statistical behavioural score: the same inputs under the same rule set give the same verdict. If evaluation or recording fails, no verdict is issued.
Forensic Layer
Decision records (verdict, score, fired rules, a digest of the inputs) sealed into a hash-chained ledger signed with Ed25519 and ML-DSA-65.
Every decision passes through governed arbitration before execution. AI model output never issues a verdict on its own.

System Function

QUORUM processes continuous event streams and resolves them into controlled outcomes under governance constraints.

AI output never issues a verdict on its own.

  • Ingests identity, transaction, device, and behavioral signals
  • Maps each request to rule facts, leaving out anything it does not carry
  • Applies governed rule arbitration across policy hierarchies
  • Combines rule results with a statistical behavioural score
  • Resolves deterministic outcomes under execution constraints
  • Records each decision before release and seals it into a signed ledger

Decision Model

EVENT NORMALIZATION STATE CONSTRUCTION CORRELATION RULE ARBITRATION BEHAVIOURAL SCORING DECISION RESOLUTION AUDIT LOGGING ACTION

Each recorded decision can be verified independently.

Design Constraints

Governance precedence

Institution-defined rules decide; AI model output never overrides them.

Deterministic execution

The real-time path is a rule engine: the same inputs under the same rule set produce the same verdict. AI analysis runs separately and is never on that path.

Explainability requirement

Every decision returns the rules and signals behind it, and every block gets a signed counterfactual certificate.

Tamper-evident audit

Decision records are hash-chained and signed, so any later alteration is detectable without trusting QUORUM. Records hold a digest of the inputs, not the raw inputs.

Capabilities

Decision Orchestration

REST, ISO 8583, message-queue and flat-file channels feeding one rule engine, failing closed when evaluation is impossible.

Policy Control

Per-institution rule sets, shadow mode for new rules and operator promotion with optional FROST approval.

Behavioral Intelligence

Typing, pointer, touch and motion signals, automation indicators and per-user baselines, scoped to each institution.

Risk Modeling

Rule-based risk scores with the fired rules and signals attached, plus a signed counterfactual certificate for every block.

Human-in-the-Loop

Analyst review of AI findings, WebAuthn step-up for privileged actions and multi-party (FROST) approvals for rule changes.

Forensic Continuity

Tamper-evident decision logs, Merkle inclusion proofs and zero-knowledge score proofs for every recorded decision.

Deployment Architecture

Container images deployed on-premise or in the institution's private cloud. AI models run locally, and external AI calls can be switched off entirely.

Deployment Patterns

QUORUM runs inside the institution's own environment, on-premise or in its private cloud, with the same decision and audit behaviour in every deployment.

Examine Deployment Architecture
Institutional Simulation Runtime

Observe Governing Logic
In Real-Time

Execute stress-test scenarios, evaluate policy-driven arbitration, and and watch a decision object build step by step. The simulator is illustrative and runs in your browser.

Illustrative simulation // Runs in your browser

Site Index

Explore the full QUORUM site graph.

A crawlable hub for the platform, technical detail pages, research artifacts, legal material, and the live simulator. This section exists to make deeper pages easier to discover and index.

Open site map