Skip to main content

​
Now: testnet complete, customer-held keys, read-only pilots

Every lane runs end to end on testnets through one ledger, one saga engine and one reconciliation engine. See Evidence. Done on 3 October 2026:
  • Customer-held signing. One signer interface for Tempo, Base and Solana; AWS KMS adapter built and tested; the Tempo treasury signs through it. See Keys and signers.
  • Issuer-neutral stablecoins. USDT, PYUSD (Token-2022) and EURC alongside USDC and pathUSD.
  • Read-only pilot. Watch-only observers for Tempo, Solana and Base, matching against the customer’s payout records, exceptions and CSV. See Read-only pilot.

​
Next: mainnet

1

Mainnet float

Fund the generated mainnet wallets (Tempo vault, Base relay, Solana vault) with a small USDC float. Keys are generated locally by pnpm mainnet:wallets and never leave the machine.
2

Live bridge leg

Run across.bridge Tempo → Base on mainnet with micro-amounts. Quotes are already verified live; the adapter is the same code on testnet and mainnet.
3

Live partner leg

A Paj business API key turns the Paj adapter on; the key is in place and verified read-only against live NGN rates (pnpm paj:check). Paj settles on Solana, so a naira payout is two Across hops: Tempo → Base → Solana → Paj → Nigerian bank.
4

Mainnet shielded funding

near.swap from Base USDC to ZEC through NEAR Intents, delivered straight to the vault’s unified address (NEAR Intents has no Tempo market).

​
Then: design partners

  • Read-only pilots first: 60 days on the wallets a licensed payout company already runs, then routing on its own signer.
  • EUR → NGN with licensed payout companies first, then KES and GHS.
  • NGN → CNY / HKD for importers on the same integration.
  • Additional spokes per region: candidates include Yellow Card, Kotani Pay, Bitnob, HoneyCoin and Busha in Africa; licensed Hong Kong payment institutions, Nium and Conduit for Asia; Bridge, Bitso Business and Pix partners for the Americas.

​
Production hardening

​
Known gaps

Tempo vault gas is booked from the chain (each fee is a TIP-20 transfer to the Fee Manager). SOL and Base ETH fees on the egress and relay wallets are not yet observed and booked.
A worker whose lease expired mid-leg could still finish its call. Legs are idempotent through the memo lookup, so the chain is never double-spent, but a fencing token on bookings would make this airtight.
Across has no Tempo testnet deployment, and its testnet CCTP relayer did not complete a Base Sepolia → Solana devnet mint. Testnet uses a simulated fill with the same interface; mainnet uses the live bridge.