White-label cash + digital orchestration
Physical cash does not become spendable because a machine said so.
Q Switch is the control layer that decides when value is trusted, who owns the risk, where it sits in the ledger, and which approved rail may move it. Prefunding remains restricted. Independent evidence is required before maturity.
Value maturity
RECEIVED_UNVERIFIED
↓
PROVISIONAL_HELD
↓
PROVISIONAL_FUNDED (still MATURING)
↓ independent evidence
MATURED → AVAILABLE
↓
PROVISIONAL_HELD
↓
PROVISIONAL_FUNDED (still MATURING)
↓ independent evidence
MATURED → AVAILABLE
Double-entry beneath every state
Device custody, merchant maturing liability, restricted prefund exposure, settlement clearing and merchant available liability are represented as balanced postings. Unbalanced journals are rejected.
Failure semantics
Replay, sequence gaps, stale webhooks, idempotency conflicts, partial mismatch, missing settlement, quarantine and maker-checker are explicit cases—not silent retries.
Current technical evidence
59/59source tests
18/18certification cases
0Supabase security lints
v0.5hosted Edge baseline
Public demo = simulated evidence only. Live bank, PayShap, EFT, CashAccSys production and dispense rails remain OFF pending Stage-0 legal, banking, cash-ownership and partner-rights evidence.
