1 · Speech · sea
Sender types SNIVAI 2500 0045 from a feature phone. Amount + last-four. Not a PIN. Star-code refused. Intent is not a debit.
CBN / NIBSS SITTING DRAFT · S-N-I V-A-I · F-T-I
One payment. Two layers. The pot is never ours.
From a 2G mouth to a beneficiary screen. Speech is not a debit. Path A waits on their post. Path B is courtesy. Glass empty in 120 seconds.
Sea and air are GCSLC/IT communication. Land is the licensed kitchen and NIBSS. NIBSS_LATENCY_BUDGET_MS = 0. PIN never enters our RAM. Inbound speech rides a licensed aggregator — not an NCC grant, not the Keystone face. Lab shortcodes stay off this fold.
Forbidden drawing: SMS → SideCar → NIP. That arrow is a switch. We do not draw it. We do not route the text to the bank.
Milestones · isolated
2 · Aggregator
The licensed aggregator POSTs from/to/text to /api/ladi-in. We parse. We do not warehouse. Full MSISDN not retained. We are not the national mouth.
3 · Handoff · notice
Optional packet to a kitchen endpoint they own: amount, last-four, bind8. No PIN. They may ignore. We do not order NIP. First fold can sit after-T2 with no inbound SMS at all.
4 · Kitchen · land
They authenticate on their rail. They post their CBS. NIBSS clears 100%. SideCar is not on the PIN call and not in the switch.
5 · Path A · air
After-T2 HMAC ping. localAttest bind8 · amount · event. ≤ 12.3 ms. Dialect 0.000 ms. CBN sitting stamp is this ping — not the lab inbound strike.
6 · Path B
Async SIGNAL, pre-rendered. Default closed. Silent Nokia does not unwind their post. Lab live-fire was the speaking hand; licensed courtesy uses the last-four named in the event.
7 · Empty glass
120 s. warehouse = 0. Residual MAY tip_hash. Observer Glass is not a people file.
Proof sentence
Hot-path dialect = 0.000 ms · attest ≤ 12.3 ms · SMS composed async · NIBSS budget 0 · empty ≤ 120 s.