Skip to main content
Developers

Sandbox

Production must fail closed: a missing provider is an outage, never a silent fallback to fabricated data. The sandbox is the one place that rule is relaxed, deliberately and visibly.

One transaction boundaryThree stacked elements — a record, a rule and a ledger posting — enclosed by a single boundary, indicating that all three commit together or not at all.ONE TRANSACTION BOUNDARYRecordwhat is trueRulewhat is permittedPostingwhat it did to the bookscommit together

What it changes

  1. Separated by tierTest and production assets never mix, and non-production surfaces carry a persistent banner because operators routinely have several environments open.
  2. Mock providers permitted here onlyLocal and test tiers may use them. Staging and production may not, and the code enforces that rather than trusting configuration.
  3. Chain families constrainedA staging tenant cannot deploy to mainnet by misconfiguration alone.
Ask, agree, then actThree steps. One person requests, a different person approves, and only then does the state change. The approval binds to what was requested, so editing it afterwards invalidates the sign-off.Requestone personApprovea different oneActnow it movesThe approval binds to what was asked.Edit it afterwards and the sign-off is void.
Every irreversible act on this platform takes this shape, whatever the subject of the page: one person asks, a different one agrees, and only then does anything move.

What it includes

Seeded workspacesEnough to sign in and exercise a flow, and deliberately no fabricated assets, investors or financial records.
ResetA sandbox that cannot be reset becomes production by accident.

See it against something real.

Bring an instrument you are actually considering. Structuring it is the only way to judge whether the model fits.

Your instrument, against this modelAn unspecified asset on the left feeds four stages: structure, compliance policy, the offering book and the register. The asset is drawn as an outline because it is the reader's, not the platform's.Your assetwhatever it isStructurePolicyBookRegister