Platform
QUORUM is a fraud and risk decisioning platform for regulated financial institutions, deployed inside the institution's own environment. It runs alongside existing fraud and case-management systems: it returns a verdict, a risk score, the rules and signals behind it and a decision identifier, and the institution's systems decide what to do.
01 // Decisioning Engine
Real-time verdicts come from a per-institution rule engine combined with behavioural scoring. Each verdict is recorded before it is returned and sealed within seconds into a hash-chained ledger signed with Ed25519 and ML-DSA-65. If the rules cannot be evaluated or the decision cannot be recorded, no verdict is issued.
- REST, ISO 8583, message-queue and flat-file decision channels
- Facts the request does not carry are treated as absent — no invented defaults
- Fired rules, signals and a decision ID returned with every verdict
- Fail closed: HTTP 503 / ISO 8583 code 91 rather than a silent "allow"
02 // Risk Scoring Pipeline
Intake
Each channel maps its input to rule facts and leaves out anything the input does not carry. Requests are scoped to the calling institution.
Facts & Velocity
Velocity per card or account over 1 hour and 24 hours is counted from the decision log, keyed by an institution-scoped HMAC — never the raw PAN.
Evaluation
Behavioural score (60%) combined with the rule engine (40%) when transaction facts are supplied. If either alone reaches 70, the verdict is at least ELEVATED_RISK.
Recorded Verdict
A canonical record holding a digest of the inputs is hashed and stored before the verdict is returned, then sealed under a Merkle root into the signed ledger.
03 // Behavioural & Device Signals
Interaction Signals
A browser SDK reduces typing rhythm, pointer movement, touch and motion data to derived values. Per-user baselines (Welford's running mean and variance) are kept for each institution, and deviations raise the behavioural score.
AUTOMATION: headless / webdriver · UA vs TLS (JA3) mismatch
Relationship Graph
Where an institution enables it, an optional Neo4j graph links accounts, devices and IP addresses so that risk on one entity can raise the risk of entities connected to it. No measured uniqueness rate is claimed for device fingerprints.
04 // Rule Governance
Shadow First
Each institution has its own rule set, validated when loaded. New rules — including any proposed by the AI red-team tools — start in shadow mode, where they are evaluated alongside live traffic without affecting verdicts.
Promotion is an operator action. Where the institution requires it, promotion also needs a FROST threshold approval (RFC 9591) that names the exact rule and can be used only once. Every change is written to the signed audit ledger.
05 // Human Authority
QUORUM is additive: the institution's own systems keep final authority over approval, decline, step-up and review. Pilots run in shadow mode before QUORUM is given any production authority.
AI Findings for Analysts
Three locally run AI tiers review cases asynchronously. When they disagree, an arbitrator weighs their reasoning. The result goes to analysts as evidence; it does not change a verdict by itself.
Regulatory Reports
High-risk blocks open a draft SAR/STR case. A person completes it and a different person approves it. Nothing is filed automatically.
06 // Verdicts
VERIFIED
Score below 15.
AUTHORIZED
Score 15–39.
ELEVATED_RISK
Score 40–69. Recorded as flagged for the institution's review process.
ISOLATED
Score 70 or more. Rejected on the transaction channel; a signed counterfactual certificate is issued.
08 // Illustrative Analysis Preview
An illustrative animation with sample values, not output from the engine. In QUORUM the real-time verdict comes from the rule engine and behavioural score; the three AI tiers shown here review cases afterwards and their findings go to analysts.
07 // Cryptographic Infrastructure
The mechanisms below make each recorded decision tamper-evident and provable to a third party. The ledger is tamper-evident rather than immutable: it lives in PostgreSQL, but any change to an anchored entry is detectable without trusting QUORUM.
09 // Architecture Documentation
A short description of each subsystem in the QUORUM pipeline. The full technical reference (QRM-ARCH-001 Rev 2.0) is available to institutions under NDA.