Architecture
Recording and verification within your institution
Institution-hosted trace collection, application-layer sealing, Kafka delivery and ClickHouse storage.
01 / Data flow
Application → sealing → Kafka → ClickHouse
SDKs capture supported service activity and carry the actual transaction context. Sigillum assembles related steps, evaluates completion and signs the transaction package at the application layer.
The sealed package passes through Kafka and is written to ClickHouse in batches. Transaction metadata and related steps are retained together for review.
HOW IT WORKS
Institutional data flow
Each layer has a defined responsibility, from collecting the trace to reviewing sealed evidence.
- 01.NET · Java · Python
Institution applications
Actual transaction context and related service steps
- 02Assembly and sealing
Application layer
Evaluates transaction completion and signs the package.
- 03Durable transport
Apache Kafka
Delivers sealed packages to the batch writer.
- 04Compressed transaction record
ClickHouse
Stores transactions and steps together for retrieval.
Review and verification run through the institution portal. Users, environments and service definitions belong to the control plane.
Technical guide02 / Verification
Verifiable integrity
Recorded content and chain signatures are checked before presenting evidence. Institution-record comparison and offline verification answer different review questions.
A valid signature establishes integrity under the verification trust basis; it does not independently establish the truth of the business decision.
HOW IT WORKS
Record and verification lifecycle
Business outcome, record integrity and institution-record comparison answer distinct questions.
- 01Actual transaction steps
Related trace
Record origin and service call context are retained.
- 02Chain and signature
Sealed record
The integrity of the stored package can be checked again.
- 03Institution business record
Comparison
Inspect matches and differences across configured fields.
- 04Portable evidence
Offline verification
Check the evidence package using verification keys.
03 / Control and storage
Separate responsibilities
Institution, user, environment, application and service definitions belong to the control plane, which uses PostgreSQL in the current installation. Sealed transaction contents belong in ClickHouse.
The active window and archival storage are operational choices. Legal retention, access and deletion requirements are determined separately for the institution.
PRODUCT INFORMATION
Frequently asked questions
Where is the product installed?
Inside the institution’s own network and infrastructure. Required internal addresses, certificates and credentials are managed by the institution.
DISCUSS YOUR REQUIREMENTS
Plan an evaluation for your institution.
Bring your workflow, integration requirements and review questions. We’ll discuss how Sigillum Finans fits your environment.
