Vault Architecture Topology
Systemic separation of physical and digital infrastructure assets. Interconnect between infrastructure domains is organized over guaranteed communication channels with peer-to-peer traffic encryption.
Swipe horizontally to explore the diagram
bank backup node
provider backup node
compliance node
client banking application
bank-provider
gateway
| ID | ELEMENT NAME | FUNCTION | CONTROLLED BY |
|---|---|---|---|
| 1 | bank backup node | Generates and stores a key share | national regulator |
| 2 | compliance node | Generates and stores a key share; authorizes client transactions | bank |
| 3 | client banking application | Generates and stores a key share; initiates client transactions | bank |
| 4 | provider backup node | Generates and stores a key share | provider |
| 5 | bank-provider gateway | Generates and stores a key share; authorizes bank transactions | provider |
Jurisdictional Segmentation
The architecture separates custody responsibilities across independent legal and operational domains, reducing concentration risk and limiting the blast radius of any single compromise.
Threshold Key Distribution
Private key material is never assembled in one place. Bitcoin uses 2-of-3 threshold Schnorr signing for Taproot, while Ethereum uses 2-of-3 threshold ECDSA to produce standard recoverable secp256k1 signatures for EOAs and EVM transactions.
Secure Interconnect
Interconnect between architectural layers operates over guaranteed communication channels with peer-to-peer traffic encryption, preserving integrity between authorization, MPC coordination, and blockchain finality.