Singularity
Exactly one party holds exclusive control at any point in time. Galiflow reconciles concurrent assertions using a documented, deterministic ruleset — never a black-box vote.
MLETR moved trade law from possession to control. The unsolved problem is operational: when a port IoT sensor, a carrier eBL registry, and a financing bank ledger disagree on the moment control passed, there is no digital common law to reconcile them. Galiflow sits alongside DCSA-compliant registries and produces a sealed, cited determination — singularity, integrity, chain of control — at any point in time.
The Model Law on Electronic Transferable Records (UNCITRAL, 2017) requires a reliable method to identify who controls an electronic transferable record and to prove it. France transposed MLETR in 2026, joining the UK (ETDA 2023) and a growing group of common-law and civil-law jurisdictions. Reliability is not just a legal question — it must be operationally demonstrable.
Exactly one party holds exclusive control at any point in time. Galiflow reconciles concurrent assertions using a documented, deterministic ruleset — never a black-box vote.
The underlying record has not been tampered with. Every control-affecting signal that references a document hash must reference the same one, or the divergence is flagged and escalated.
A complete, auditable handover trail. Every determination cites the exact signals that support and, where applicable, contradict it.
Galiflow charges a fee per side, never a spread. It never holds the underlying record, never sits on the payment leg, never insures the cargo. It is determinative, not custodial.
| Side | Role in reconciliation | Fee (bps · per side · per determination) |
|---|---|---|
Shipper DEMO Aral Grain Trading Co. · KZ | Origin control assertion; cargo readiness signals feed integrity checks. | 3 bp |
Carrier DEMO Meridian Container Lines · SG | Primary eBL record custodian; issues control-transfer endorsements under DCSA schema. | 3 bp |
Financing bank DEMO Panorama Trade Bank · GB | Presentation / control acknowledgement; releases funds against sealed determination. | 4 bp |
Buyer DEMO Roseville Foods Ltd · GB | Delivery-time control receipt; final endorsement in chain. | 3 bp |
Insurer / verifier DEMO Northlight Cargo Mutual · BM | Independent corroborating signal; policy activation confirms loaded-on-board without conferring control. | 2 bp |
| Total per determination | Illustrative synthetic pricing — not a live rate card. | 15 bp |
A grain shipment from Aktau to Felixstowe under English-law eBL. Three signals disagree by minutes on the moment control passed from the carrier to the financing bank. Galiflow evaluates the state of control at each moment and seals the finding. Every seal cites every signal it depended on.
Continuous chain observed: 1 transfer event(s) linked in time order across 1 independent source(s).
cites: sig-001
Sole control assertion at evaluation time — party car-01 — no dissenting signals within reconciliation window.
cites: sig-001
All document-bearing signals reference a single record hash (0xebl-a1c2f....).
cites: sig-001
Continuous chain observed: 2 transfer event(s) linked in time order across 1 independent source(s).
cites: sig-001, sig-004
Sole control assertion at evaluation time — party bnk-01 — no dissenting signals within reconciliation window.
cites: sig-004
All document-bearing signals reference a single record hash (0xebl-a1c2f....).
cites: sig-001, sig-004
Continuous chain observed: 3 transfer event(s) linked in time order across 2 independent source(s).
cites: sig-001, sig-004, sig-005
Sole control assertion at evaluation time — party bnk-01 — no dissenting signals within reconciliation window.
cites: sig-004, sig-005
All document-bearing signals reference a single record hash (0xebl-a1c2f....).
cites: sig-001, sig-004, sig-005
Continuous chain observed: 4 transfer event(s) linked in time order across 2 independent source(s).
cites: sig-001, sig-004, sig-005, sig-008
Sole control assertion at evaluation time — party buy-01 — no dissenting signals within reconciliation window.
cites: sig-008
All document-bearing signals reference a single record hash (0xebl-a1c2f....).
cites: sig-001, sig-004, sig-005, sig-008
These are the signals a determination is built on — never dumped into a black box, always available for audit. Every finding above cites specific rows by ID.
| ID | Timestamp (UTC) | Source | Event | Actor → counterparty | Doc hash |
|---|---|---|---|---|---|
| sig-001 | 2026-06-18T08:14:00Z | Carrier eBL registry | control asserted | DEMO Meridian Container Lines | 0xebl-a1c2f...synt… |
| sig-002 | 2026-06-18T09:02:11Z | Port IoT gate | cargo gated in | — | — |
| sig-003 | 2026-06-18T14:48:00Z | Vessel AIS | cargo loaded | — | — |
| sig-004 | 2026-06-18T14:55:03Z | Carrier eBL registry | control transferred | DEMO Meridian Container Lines → DEMO Panorama Trade Bank | 0xebl-a1c2f...synt… |
| sig-005 | 2026-06-18T15:07:41Z | Financing bank ledger | control asserted | DEMO Panorama Trade Bank | 0xebl-a1c2f...synt… |
| sig-006 | 2026-06-18T14:48:07Z | Insurer ledger | policy activated | DEMO Northlight Cargo Mutual | — |
| sig-007 | 2026-07-02T04:12:00Z | Customs gateway | cargo gated out | — | — |
| sig-008 | 2026-07-02T09:00:00Z | Financing bank ledger | control transferred | DEMO Panorama Trade Bank → DEMO Roseville Foods Ltd | 0xebl-a1c2f...synt… |
| sig-009 | 2026-07-02T08:58:44Z | Financing bank ledger | payment settled | — | — |
| sig-010 | 2026-07-02T11:22:00Z | Carrier eBL registry | cargo delivered | — | — |
Every determination is committed as a SHA-256 seal over its canonical JSON form. Compatible with commit-then-reveal audit patterns used by the wider Galirisk stack. Below is the final delivery-day determination, revealed.
{
"caseId": "MCL-2026-DEMO-0417",
"atTs": "2026-07-02T10:00:00Z",
"controlHolderPartyId": "buy-01",
"findings": [
{
"principle": "chain_of_control",
"status": "pass",
"cites": [
"sig-001",
"sig-004",
"sig-005",
"sig-008"
],
"dissent": []
},
{
"principle": "singularity",
"status": "pass",
"cites": [
"sig-008"
],
"dissent": []
},
{
"principle": "integrity",
"status": "pass",
"cites": [
"sig-001",
"sig-004",
"sig-005",
"sig-008"
],
"dissent": []
}
],
"provenance": {
"signalCount": 10,
"sourceCount": 6,
"conflictCount": 0,
"ruleset": "galiflow-determine/v0.1"
}
}The ICC Digital Standards Initiative and the Digital Governance Council jointly publish the MLETR Assessment Framework. Verified platforms receive the TradeReady Verification badge (IQAX obtained it in 2025). Galiflow is not another registry seeking the badge — it is the reconciliation layer that helps every registry, IoT feed, and ledger produce the evidence pack the framework demands. This is the substance behind the current ICC conversation on our side.
| DSI Framework requirement | How Galiflow satisfies it |
|---|---|
| Framework Section 4.1 — Reliability of the method for identifying the record | Determination ruleset is versioned, published (RULESET_ID), and deterministic. Seals are reproducible byte-for-byte. |
| Framework Section 4.2 — Reliability of the method for identifying the person in control | Every determination names the sole party in control and cites the signals that support (and dissent from) that finding. |
| Framework Section 4.3 — Integrity of the electronic transferable record | Divergent document hashes across any signal source trigger an integrity flag with mandatory custodian escalation. |
| Framework Section 5 — Assessment evidence pack | Determination + signal ledger + seal + ruleset ID collectively form the per-transaction evidence pack for TradeReady Verification renewal. |