LOADING
COMPLIANCE, RISK POLICY AND ELIGIBILITY
Continuous review of merchant sites, product pages, marketing channels and affiliate content, with the evidence preserved rather than summarized.
Declared domains and subdomains, gated tiers behind credentialed access, plus an independent sweep of social accounts, affiliate pages and email templates.
Each finding keeps a timestamped screenshot and raw capture, a content hash, and the classifier and lexicon versions that produced it. A finding without an artifact is an opinion.
The merchant, the acquirer and the bank receive a finding at the moment it is generated. There is no triage queue in between.
Critical findings move the merchant state automatically. Human review governs the path back, never the path down.
A fixed chain of gates returns either a frozen set of permitted rails or a terminal block. Unknown SKU blocks, missing jurisdiction rule blocks, sanctions unavailable blocks. The absence of a rule is never permission.
Publishing a policy creates a version and never mutates history. Every decision pins the version in force, which is what makes a years-old transaction replay exactly.
Declared domains, subdomains and gated tiers, using the standing monitoring account every merchant provisions at onboarding.
Social accounts, affiliate pages and email templates, found independently rather than taken from the merchant's list.
Content is checked against the versioned lexicon and the imagery standard. The classifier version is recorded on every result.
Screenshot and raw HTML are stored and hashed before anything else happens, so the evidence survives the remediation.
Merchant, acquirer and bank receive the finding at the moment of generation. No queue sits in front of it.
Critical findings suspend automatically. Human review governs only the path back.
Runs on the remediation deadline. A pass closes the finding; nothing else can.
At transaction time, a fixed chain runs: policy, kill switch, merchant state, opinion validity, KYC currency, scan currency, SKU state, certificates, patented compounds, cart composition, geography, buyer qualification, sanctions, portfolio limits, rails.
Eligible rails are frozen for the attempt chain, and the decision with its full input snapshot is written to an append-only, hash-chained log.
The operation does not exist in the platform. Not restricted by permission, not logged for audit — absent. A finding resolves when the merchant remediates and an automated rescan passes. The absence of the feature is the control.
Eighteen gates, deterministic, failing closed on every unknown. Run 'Unknown jurisdiction' — no rule on file for the ship-to region blocks rather than defaulting to permitted.
