Custody reconciliation.
Private operator checks compare ledger-backed custody with independent balances at a finalized checkpoint. A check does not move funds or enable spendable gas.
01Queue a read-only check
An owner, finance, operations or security operator with recent admin passkey verification can POST /v1/admin/reconciliation/checks with walletId, an audit reason and an Idempotency-Key. No address, observed balance or override is accepted. Concurrent requests reuse an existing pending check.
02Compare the correct accounting basis
Expected custody uses gross finalized deposits and their original recognition journals. Net customer balances and processing fees do not reduce the physical assets in custody. Version 2 subtracts verified finalized outgoing principal and actual native expenses, validates original settlement/refund/expense journals and approved gas funding, and keeps remaining platform gas separate. Pending, corrupt or ahead-of-checkpoint outgoing records require coverage.
03Read independent finalized state
The protected worker verifies chain/genesis and block identity. EVM balance, token metadata, source account code and nonce reads use the same block number. Retained ordinary transaction nonces must form a contiguous sequence from zero, including definitive failures. Gaps, unexplained increments or any source code require review. TRON reads use solidified state bracketed by an unchanged head. Every supported asset must be present, and integer strings retain exact precision.
04Inspect differences and source restrictions
GET /checks and GET /checks/{id} show historical results, expected/observed amounts, exact differences, provider count, basisVersion, expectedNonce, accountCode and outgoing accounting totals. A deficit, surplus or missing accounting coverage blocks new authorization, preparation, signing and submission from that source. Existing-hash investigation continues without refunding prepared funds.
05Resolve using evidence
A fresh complete matching observation can clear the interlock; provider errors or incomplete reads cannot. New checks replace stale snapshots without changing history. There is no manual balance, fee or release override. Live provider verification, source-vault inventory, pending-spend coordination and positive execution readiness remain pending. A recorded match does not enable signing or spendable gas.
POST /v1/admin/reconciliation/checks
Idempotency-Key: <check-request-id>
{ "walletId": "<ready-custody-wallet-uuid>", "reason": "Investigate finalized custody balance" }
GET /v1/admin/reconciliation/checks
GET /v1/admin/reconciliation/checks/{id}Open your workspace