Everything bundled. Nothing nickel-and-dimed.
Fraud doesn't respect feature flags. Every detection, custody, forensics, and recovery module is included on every tier — you scale with usage, not features.
Detection
Fraud Sentinel
Z-score + rule-based anomaly engine. 7 fraud patterns out of the box. Tunable thresholds. Sub-second detection.
Auto-boot
Critical scores (≥85) auto-revoke the actor. Banned actors are blocked at login and every operation.
Digital Twin
Parallel simulation projects expected metrics. Anomalies = reality diverges from baseline. Replay any past moment.
Chain of Custody
Three-party signoff
Sender, receiver, independent witness — never just one. Rotation watchdog flags suspicious pairings.
ECDSA P-256 signatures
Each party cryptographically attributable. WebAuthn / Passkeys upgrade path.
Geofence + GPS
Receiver location must be within 500m of expected. Impossible-distance handovers auto-flagged.
Photo evidence
SHA-256-hashed at capture. Bound into the receipt. Photo swap breaks verification.
Customer SMS receipt
Final receiver gets an SMS + email with verify link. Customer-side dispute lands as anomaly.
Off-System Counterparty Mode
Honest reality coverage
Most platforms assume both sides are on-system. We don't. Wholesalers, market vendors, individuals, cooperatives — all supported as first-class counterparties.
Required photo at initiation
Goods + counterparty + paper receipt in one shot. SHA-256 hash anchored into the digital receipt — photo swap breaks verification.
Receipt # cross-check
Operator keys the paper receipt number. Bound to the photo SHA so auditors confirm the digits in the image match what was logged.
Required phone for reachback
Min 7 digits. Powers the SMS-OTP attestation channel and gives adjusters someone to call when a dispute lands.
Device-captured GPS
Real coordinates at the actual pickup spot — not a warehouse default. Replaces the geofence anchor and powers forensic causal tracing.
+1 extra witness auto-assigned
Server bumps the required-witness count by 1 in off-system mode (a normal handover needs 1, an off-system high-value one needs 3).
On-system attester accountability
Whoever's logged in signs on the counterparty's behalf with their personal ECDSA key — every off-system handover has at least one cryptographically attributable signature.
Local supplier registry
Repeat counterparties are remembered per browser — pick "John Phiri — Limbe Market" from a dropdown instead of re-keying.
Forensic disclosure
Every off-system handover is tagged in the ledger and surfaces in reports with an OFF-SYSTEM badge. Auditors see the full evidence path: photo + receipt + GPS + phone + attester + witnesses.
Tamper Resistance
Hash-chained ledger
Every event hashed with the previous hash. Append-only DB grants. Any edit breaks the chain.
Merkle anchoring
Every 10 entries → Merkle root + simulated public chain publish. Independent third-party verifiable.
Ledger verify endpoint
Recomputes the full chain on demand. Reports the first tampered sequence number.
Recovery & Insurance
Auto-filed claims
Disputes + variance > 5% file insurance claims with evidence pre-attached.
Adjuster workflow
Assign → investigate → approve/deny → settle. Every transition on the ledger.
85% payout default
Configurable. Stripe / Flutterwave disbursement integration ready.
Forensics
Actor profile
Timeline, hour heatmap, hot locations, co-actor graph, anomaly history — one call.
Causal trace
From flagged incident, walk back to root cause. Confidence-scored hypothesis + recommended action.
Evidence bundles
One-click export. HMAC-signed, hash-anchored. PDF, Word, or JSON.
Federation
Cross-org ban network
A driver banned at one org is flagged at peers — via salted SHA-256 commitments, no PII shared.
Merkle membership proofs
Check actor against the network without revealing who banned whom or why.
Seeded NGO consortium
Demo includes UNICEF Malawi, Tanzania MoH, GAVI Africa peer simulations.
AI
Conversational investigator
Chat: "Investigate DRV-001 and boot them" — agent executes the runbook end-to-end.
Local or Claude API
Default rule-based mode is free. Paste an Anthropic key for natural-language synthesis.
Self-audited
Every agent query lands on the ledger. The watchers are watched.
Field Resilience
Offline-first PWA
Confirmations queue locally and sync when the network returns.
Two-way SMS gateway
"OK HND-X 100" from a Nokia confirms a handover. DISPUTE replies open investigations.
Africa's Talking ready
Backend integration shape ships day one.
Reports & Compliance
PDF + Word receipts
Every confirmed handover one-click downloadable as branded PDF or DOCX.
Tamper-evident bundles
Forensic case files signed with HMAC, anchored in the public-verifiable chain.
Customer / investor / board reports
Template-driven, scheduled, AI-narrated.