Home / BalanceSeal / BalanceSeal Specification
BalanceSeal
Close with certainty.
BalanceSeal is an AGPL 3.0+ licensed, modular audit and final-account reconciliation component for cryptocurrency exchanges, custodial wallets, digital asset platforms, and other systems that maintain cryptocurrency balances.
BalanceSeal establishes a complete and verifiable record of an account’s financial state at the exact moment of termination. It accounts for transferable balances, non-transferable balances, dust, locked assets, pending balances, accrued amounts, and other cryptocurrency holdings that may otherwise be excluded from a conventional withdrawal or account-closing calculation.
The system produces a deterministic final-state snapshot containing the exact quantity of each recognized asset and its corresponding value at the termination timestamp. It is designed to make the final disposition of an account independently auditable rather than relying solely on an exchange or wallet’s user-facing withdrawal balance.
Purpose
Cryptocurrency platforms can contain balances that users cannot transfer because of minimum withdrawal requirements, network fees, trading restrictions, account thresholds, or other platform limitations. These residual balances can retain economic value even when they cannot be withdrawn individually.
BalanceSeal addresses this accounting gap by separating what an account contains from what an account is permitted to transfer.
At termination, BalanceSeal records the complete account state before closure and identifies the assets and quantities that remain. The resulting report provides a complete accounting of the assets associated with the account, including residual dust and other amounts that might otherwise be excluded from a final withdrawal calculation.
Design Principles
BalanceSeal follows these core design principles:
- Complete asset accounting
- Exact quantity preservation
- Time-specific valuation
- Deterministic calculations
- Cryptographic integrity
- Transparent reconciliation
- Read-only integration by default
- Modular architecture
- Chain and platform neutrality
- Vendor-neutral integration
- Verifiable final-state reporting
- Separation of asset ownership from transferability
- Human-readable and machine-readable reporting
- Extensible adapter and plugin architecture
- No transaction execution as part of the core system
Core Modules
Account Termination Module
The Account Termination Module manages the lifecycle event that initiates a BalanceSeal snapshot.
Features include:
- Account termination event detection
- Account closure request handling
- Administrative termination events
- Automated termination hooks
- API-triggered termination snapshots
- Pre-termination validation
- Termination timestamp capture
- Account state freeze coordination
- Duplicate termination-event prevention
- Termination event identification
- Termination status tracking
- Snapshot initiation
- Finalization state management
Asset Aggregation Module
The Asset Aggregation Module identifies and records every asset associated with the account at termination.
Features include:
- Complete cryptocurrency balance enumeration
- On-chain balance collection
- Off-chain ledger balance collection
- Custodial balance collection
- Exchange balance collection
- Wallet balance collection
- Sub-account aggregation
- Spot balances
- Locked balances
- Staked balances
- Earn balances
- Pending withdrawal balances
- Pending deposit balances
- Unsettled trade balances
- Rewards and accrued balances
- Fractional cryptocurrency quantities
- Dust balances
- Non-transferable balances
- Minimum-withdrawal residuals
- Asset quantities below platform thresholds
- Asset quantities below fiat conversion thresholds
- Exact decimal preservation
The module must not exclude an asset solely because it is below a platform’s withdrawal, conversion, or transfer threshold.
Asset Identity Module
The Asset Identity Module establishes a consistent identity for every asset recorded by BalanceSeal.
Features include:
- Native cryptocurrency identification
- Token identification
- Contract address identification
- Blockchain network identification
- Token standard identification
- Wrapped asset identification
- Bridged asset identification
- Network-specific asset identifiers
- Symbol normalization
- Decimal precision recognition
- Asset metadata preservation
- Duplicate asset detection
- Asset identity validation
Asset identity must distinguish assets that share the same symbol across different networks or contracts.
Ledger Reconciliation Module
The Ledger Reconciliation Module reconciles balances originating from multiple accounting systems.
Features include:
- On-chain and off-chain reconciliation
- Exchange ledger reconciliation
- Custody ledger reconciliation
- Wallet reconciliation
- Sub-account reconciliation
- Pending transaction reconciliation
- Trade settlement reconciliation
- Deposit reconciliation
- Withdrawal reconciliation
- Internal transfer reconciliation
- Duplicate balance detection
- Balance discrepancy detection
- Missing balance detection
- Reconciliation status reporting
- Source attribution
- Reconciliation exception reporting
- Final reconciliation confirmation
The reconciliation process must identify whether a balance represents the same underlying asset across multiple sources and prevent double counting.
Transferability Classification Module
The Transferability Classification Module distinguishes asset ownership from the ability to transfer or withdraw an asset.
Features include:
- Transferable balance classification
- Non-transferable balance classification
- Dust classification
- Withdrawal threshold classification
- Conversion threshold classification
- Locked asset classification
- Staked asset classification
- Pending transaction classification
- Restricted asset classification
- Platform-held residual classification
- Transferability reason codes
- Transferability status reporting
An asset must remain included in the final account report regardless of whether it is transferable.
Valuation Module
The Valuation Module determines the monetary value of each asset at the exact termination timestamp.
Features include:
- Termination-time valuation
- Historical market pricing
- Asset-specific pricing
- Fiat conversion
- USD valuation
- Configurable base currencies
- Price timestamp capture
- Price source identification
- Price source priority
- Historical price retrieval
- Market data validation
- Missing price detection
- Unavailable-market handling
- Price precision preservation
- Deterministic valuation
- Per-asset valuation
- Total account valuation
The valuation system must preserve the distinction between the cryptocurrency quantity and its monetary valuation.
Pricing Oracle Interface Module
The Pricing Oracle Interface Module provides a standardized interface for market data sources.
Features include:
- Exchange pricing adapters
- External market data adapters
- Oracle integrations
- Internal pricing feeds
- Historical pricing providers
- Custom pricing providers
- Multiple pricing source support
- Pricing source fallback rules
- Price confidence metadata
- Timestamp verification
- Price provenance
- Pricing discrepancy detection
- Configurable pricing policies
Every valuation must identify the source and timestamp of the price used.
Snapshot Module
The Snapshot Module creates the final account state at termination.
Features include:
- Exact termination timestamp
- Account state capture
- Complete asset inventory
- Asset quantity capture
- Transferability status
- Price capture
- Asset valuation
- Total account value
- Source metadata
- Reconciliation metadata
- Snapshot identifier
- Snapshot version
- Snapshot status
- Immutable snapshot finalization
- Snapshot validation
A finalized snapshot must not be silently modified after creation.
Final Balance Module
The Final Balance Module produces the definitive account balance calculation.
Features include:
- Total cryptocurrency quantity by asset
- Total transferable balance
- Total non-transferable balance
- Total dust balance
- Total locked balance
- Total pending balance
- Total account value
- Asset-by-asset valuation
- Residual balance identification
- Unresolved balance identification
- Reconciliation exceptions
- Final balance status
The module must clearly distinguish between the amount an account contained and the amount the platform allowed the user to withdraw.
Historical Account Accounting Module
The Historical Account Accounting Module provides a complete accounting record of assets received and retained by the account.
Features include:
- Deposited asset accounting
- Received asset accounting
- Transferred asset accounting
- Purchased asset accounting
- Earned asset accounting
- Reward accounting
- Fee accounting
- Withdrawal accounting
- Conversion accounting
- Internal transfer accounting
- Remaining balance accounting
- Residual balance accounting
- Termination balance accounting
- Historical quantity reconciliation
- Historical value reconciliation
Where the host platform makes the required historical data available, BalanceSeal should calculate the relationship between assets received, assets removed, and assets remaining at termination.
Report Generation Module
The Report Generation Module creates complete final-account reports.
Features include:
- Human-readable reports
- Machine-readable reports
- Asset inventory
- Exact quantities
- Asset values
- Termination timestamp
- Pricing timestamps
- Pricing sources
- Transferability classifications
- Dust identification
- Locked balance identification
- Pending balance identification
- Reconciliation results
- Total account value
- Report identifier
- Report version
- Integrity metadata
Supported report formats include:
- JSON
- CSV
- Structured audit packages
Cryptographic Integrity Module
The Cryptographic Integrity Module protects the final report from undetected alteration.
Features include:
- SHA-256 report hashing
- Snapshot hashing
- Metadata hashing
- Integrity verification
- Tamper detection
- Digital signature support
- Public verification
- Signature metadata
- Cryptographic timestamps
- Report fingerprint generation
- Verification status
Cryptographic protection must apply to the finalized report and the data required to reproduce its calculations.
Audit Trail Module
The Audit Trail Module records the events involved in producing the final account report.
Features include:
- Termination event logging
- Snapshot creation logging
- Asset collection logging
- Reconciliation logging
- Pricing event logging
- Valuation logging
- Report generation logging
- Hash generation logging
- Signature logging
- Verification logging
- Error logging
- Exception logging
- Timestamped event records
- Append-only audit records
Verification Module
The Verification Module allows authorized users and external systems to validate a BalanceSeal report.
Features include:
- Report hash verification
- Digital signature verification
- Snapshot verification
- Calculation verification
- Asset quantity verification
- Pricing metadata verification
- Report integrity verification
- Audit trail verification
- Machine-readable verification results
- Human-readable verification results
API Module
The API Module provides integration interfaces for host platforms.
Features include:
- Account termination endpoint
- Snapshot creation endpoint
- Snapshot retrieval endpoint
- Report generation endpoint
- Report retrieval endpoint
- Verification endpoint
- Asset inventory endpoint
- Reconciliation status endpoint
- Valuation endpoint
- Audit event endpoint
- Webhook support
- Authentication support
- Authorization support
- Request validation
- Response validation
- API versioning
Event Module
The Event Module allows BalanceSeal to integrate with existing account lifecycle systems.
Supported events include:
- Account termination requested
- Account termination approved
- Account termination initiated
- Account state frozen
- Balance collection completed
- Reconciliation completed
- Valuation completed
- Snapshot finalized
- Report generated
- Report signed
- Report verified
- Account termination completed
Security Module
The Security Module provides security controls for BalanceSeal integrations.
Features include:
- Read-only integration by default
- Least-privilege access
- Role-based access control
- Authentication
- Authorization
- Secure credential handling
- API access controls
- Signing-key isolation
- Audit logging
- Sensitive-data minimization
- Access-event tracking
- Configuration validation
- Security-event reporting
BalanceSeal must not require transaction signing or asset-transfer authority for its core functionality.
Error and Exception Module
The Error and Exception Module ensures that incomplete or inconsistent data cannot silently produce a misleading final report.
Features include:
- Missing balance detection
- Missing price detection
- Ledger discrepancy detection
- Chain data failure detection
- Duplicate asset detection
- Unsupported asset detection
- Stale data detection
- Timestamp inconsistency detection
- Reconciliation failure reporting
- Valuation failure reporting
- Report-generation failure reporting
- Explicit unresolved-status reporting
- Retry handling
- Failure audit logging
An incomplete account state must not be represented as a complete final balance without explicitly identifying the unresolved condition.
Deterministic Processing Module
The Deterministic Processing Module ensures that the same validated inputs produce reproducible results.
Features include:
- Deterministic calculations
- Defined rounding rules
- Decimal precision preservation
- Stable asset ordering
- Stable report serialization
- Reproducible valuation
- Reproducible hashing
- Versioned calculation rules
- Calculation metadata
- Reproducibility verification
Configuration Module
The Configuration Module controls platform-specific behavior without changing the BalanceSeal core.
Features include:
- Base currency configuration
- Pricing source configuration
- Asset adapter configuration
- Chain configuration
- Ledger configuration
- Reporting configuration
- Retention configuration
- Security configuration
- API configuration
- Webhook configuration
- Precision configuration
- Threshold configuration
- Environment-specific configuration
Configuration thresholds must never cause BalanceSeal to omit an asset from the final accounting record.
Optional Plugin Modules
BalanceSeal uses an extensible plugin architecture so additional capabilities can be added without modifying the core accounting engine.
Blockchain Adapter Plugins
Optional blockchain plugins may provide support for:
- Bitcoin
- Ethereum
- Solana
- EVM-compatible networks
- Layer 2 networks
- Additional public blockchains
- Private blockchain networks
- Custom blockchain systems
Each adapter should expose standardized balance and transaction data to the core modules.
Token Standard Plugins
Optional token plugins may support:
- ERC-20
- ERC-721
- ERC-1155
- BEP-20
- SPL
- Other network-specific token standards
Plugins must preserve the distinction between fungible asset quantities and unique digital assets where applicable.
Exchange Integration Plugins
Optional exchange plugins may connect BalanceSeal to:
- Internal ledgers
- Custody systems
- Account databases
- Trading systems
- Deposit systems
- Withdrawal systems
- Internal transfer systems
- Rewards systems
- Staking systems
Pricing Provider Plugins
Optional pricing plugins may connect to:
- Centralized exchange pricing
- Market data providers
- Decentralized oracle networks
- Institutional pricing feeds
- Internal exchange pricing
- Historical market databases
- Custom pricing services
Reporting Plugins
Optional reporting plugins may add:
- Extended PDF formats
- Accounting exports
- Tax reporting formats
- Regulatory reporting formats
- Enterprise audit packages
- Custom JSON schemas
- Custom CSV schemas
- Data warehouse exports
Compliance Plugins
Optional compliance plugins may provide jurisdiction-specific reporting capabilities.
Features may include:
- Jurisdiction-specific report formats
- Regulatory data mapping
- Record retention workflows
- Audit package generation
- Compliance metadata
- Organization-specific reporting policies
Compliance plugins must remain separate from the core balance accounting system.
Merkle Proof Plugin
An optional Merkle Proof Plugin may provide:
- Merkle tree generation
- Asset balance proofs
- Snapshot proofs
- Inclusion proofs
- Root hash generation
- Independent proof verification
Zero-Knowledge Proof Plugin
An optional zero-knowledge plugin may provide privacy-preserving verification capabilities, including:
- Proof of total account value
- Proof of asset inclusion
- Selective disclosure
- Privacy-preserving verification
- Verifiable aggregate balances
Digital Signature Plugin
An optional Digital Signature Plugin may provide:
- Organization signing
- Hardware security module integration
- External key-management integration
- Public-key verification
- Signature rotation
- Signature metadata
Immutable Storage Plugin
An optional storage plugin may provide:
- Write-once storage
- Content-addressed storage
- External archival
- Distributed storage
- Blockchain anchoring
- Long-term audit preservation
Notification Plugin
An optional notification plugin may provide:
- Email notifications
- Webhook notifications
- Administrative alerts
- User report notifications
- Verification notifications
- Reconciliation failure notifications
Analytics Plugin
An optional analytics plugin may provide:
- Historical account analysis
- Residual balance analysis
- Dust accumulation analysis
- Asset distribution analysis
- Termination reporting analytics
- Platform-wide reconciliation statistics
Account Termination Workflow
A standard BalanceSeal termination workflow should:
- Receive an account termination event.
- Capture the authoritative termination timestamp.
- Freeze the account state for reconciliation.
- Collect all available account balances.
- Collect applicable on-chain balances.
- Collect applicable off-chain ledger balances.
- Identify every asset and exact quantity.
- Normalize asset identities.
- Reconcile balances across available sources.
- Classify transferable and non-transferable balances.
- Identify dust and other residual balances.
- Retrieve valuation data corresponding to the termination timestamp.
- Calculate the value of every asset.
- Calculate the complete final account value.
- Record unresolved discrepancies and unavailable data.
- Generate the final snapshot.
- Generate the final report.
- Calculate the cryptographic integrity hash.
- Apply an optional digital signature.
- Store the finalized audit record.
- Make the report available through authorized interfaces.
- Preserve the verification information required to validate the report.
Final Account Report Requirements
A complete BalanceSeal report should contain, where available:
- Account identifier
- Termination identifier
- Termination timestamp
- Report identifier
- Snapshot identifier
- Report version
- Asset identifier
- Asset symbol
- Network
- Contract address
- Token standard
- Exact quantity
- Transferability status
- Transferability reason
- Dust status
- Locked status
- Pending status
- Price
- Price currency
- Price timestamp
- Price source
- Asset value
- Total account value
- Reconciliation status
- Unresolved exceptions
- Cryptographic hash
- Digital signature metadata when applicable
Historical Balance Accounting
Where historical transaction and ledger data are available, BalanceSeal should provide an extended reconciliation showing:
- Total assets received
- Total assets purchased
- Total assets earned
- Total assets deposited
- Total assets transferred into the account
- Total assets withdrawn
- Total assets transferred out
- Total assets converted
- Total fees deducted
- Total rewards received
- Total remaining assets
- Total residual assets
- Final account balance
Historical accounting must preserve asset quantities separately from monetary valuations. Historical fiat values should be tied to the applicable timestamp and pricing source.
Dust Accounting
Dust must be treated as an accounting category rather than an omitted balance.
BalanceSeal should identify:
- Asset quantity classified as dust
- Reason for dust classification
- Value at termination
- Transferability status
- Minimum withdrawal threshold
- Applicable platform restriction
- Whether the balance was converted
- Whether the balance remained after termination
- Whether the balance was included in the final account value
A platform’s inability to transfer a balance must not be treated as evidence that the balance had no value.
Data Integrity Requirements
BalanceSeal must prioritize complete and accurate accounting over convenience.
The system should:
- Preserve exact asset quantities
- Preserve source data
- Preserve timestamps
- Preserve pricing provenance
- Preserve reconciliation results
- Identify incomplete records
- Identify conflicting sources
- Never silently discard balances
- Never silently overwrite snapshots
- Never silently change historical valuations
- Never represent unavailable data as confirmed data
Privacy Requirements
BalanceSeal should minimize unnecessary personal information.
Implementations should:
- Use pseudonymous account identifiers where practical
- Limit access to financial records
- Avoid storing private keys
- Avoid storing unnecessary authentication information
- Protect sensitive account data
- Apply configurable retention policies
- Support secure report access
- Separate account identity from balance data where appropriate
Interoperability Requirements
BalanceSeal should be capable of integration with existing systems without requiring a specific exchange, wallet, blockchain, pricing provider, database, cloud platform, or custody provider.
Integration interfaces should use documented and versioned contracts.
The core accounting engine must remain independent from optional external providers.
Testing Requirements
Implementations should include tests covering:
- Account termination events
- Exact balance capture
- Decimal precision
- Dust balances
- Non-transferable balances
- Locked balances
- Pending balances
- Multi-chain assets
- Token assets
- Duplicate asset detection
- Ledger reconciliation
- Historical valuation
- Missing price data
- Conflicting price data
- Reconciliation failures
- Deterministic calculations
- Report generation
- Hash verification
- Digital signature verification
- API integration
- Plugin integration
- Security controls
- Failure recovery
Documentation Requirements
Implementations should document:
- Installation
- Configuration
- API interfaces
- Integration methods
- Account termination workflow
- Asset adapters
- Ledger adapters
- Pricing providers
- Report formats
- Verification procedures
- Security requirements
- Plugin development
- Error handling
- Data retention
- Deployment requirements
Non-Goals
BalanceSeal does not inherently:
- Execute cryptocurrency transactions
- Move user funds
- Control private keys
- Act as a cryptocurrency exchange
- Act as a wallet
- Determine legal ownership of assets
- Guarantee the solvency of an exchange
- Guarantee the accuracy of an external data provider
- Replace independent accounting or legal review
BalanceSeal is an accounting, reconciliation, valuation, reporting, and verification component.
Future Extensions
Potential future extensions include:
- Cross-platform account reconciliation
- Proof-of-balance infrastructure
- Independent user verification portals
- Advanced cryptographic proofs
- Zero-knowledge verification
- Distributed audit anchoring
- Automated regulatory reporting
- Enterprise accounting integrations
- Long-term archival systems
- Public verification registries
- Historical asset-flow analysis
- Platform-wide residual balance analytics
Specification Branding License (SBL)
Standard
- Fully AGPL-3.0+ compliant system
- Copyleft enforced for network deployments
- Required attribution:
- Roxanne Ardary
- https://www.roxanneardary.com/
Optional
- Specification Branding License (SBL)
- Attribution-free commercial deployment
- Pricing based on scale, usage, and deployment scope
- https://roxanneardary.com/balanceseal/
License & Notice Requirements
BalanceSeal is released under the GNU Affero General Public License v3.0 or later (AGPL-3.0+).
By contributing to this project, you agree that your contributions will also be released under this license.
Please note the following:
- All contributions must comply with the AGPL-3.0+ terms.
- Under Section 7 of the license, all redistributions, forks, and derivative works must preserve attribution to:
- Roxanne Ardary
- roxanneardary.com
- BalanceSeal specifications are free to use with attribution. A Specification Branding License can be negotiated upon request.
- The project’s notice.md file tracks attribution requirements and contributor acknowledgments. Any update that adds new contributors or modifies attribution should also update
notice.md. - When submitting a pull request, ensure that any new files maintain the attribution headers where applicable.
- Network-deployed versions of this software must also remain fully AGPL-3.0+ compliant, including exposure of source code modifications when applicable under the license.
For full legal details, please refer to the AGPL-3.0+ license and the project’s notice.md file.
Notice – BalanceSeal
Attribution Requirement: Under Section 7 of the AGPL 3.0+ license, all redistributions, forks, and derivative works, including network-deployed versions of this project, must provide attribution to Roxanne Ardary and roxanneardary.com.
Contributors
This file tracks contributors and their specific contributions to the project.
- Roxanne Ardary, roxanneardary.com – April 12, 2026
Created the repository for BalanceSeal. Designed the core concept of a cryptographic account termination and final balance reporting system for digital asset platforms. - [Add other contributors here] – [Date]
[Describe contribution in one sentence]
License – BalanceSeal
This repository is licensed under the GNU Affero General Public License v3.0 or later (AGPL-3.0+).
Key Points
- You are free to use, modify, and distribute the code.
- All redistributions, forks, and derivative works or network-deployed versions must also be licensed under AGPL-3.0+ and provide attribution to Roxanne Ardary and roxanneardary.com as required under Section 7 of the license.
- The software is provided “as is,” without warranty of any kind.
For the full license text, see GNU AGPL-3.0 License.
