Executive Summary
JIL Sovereign's cross-chain bridge uses a 14-of-20 Byzantine fault tolerant validator set distributed across 13+ independent regulatory jurisdictions. Unlike existing bridges that concentrate validator control in a single legal domain, JIL ensures no single regulator can compel a majority of validators.
Problem Statement
Cross-chain bridges are the highest-value attack surface in blockchain: Ronin ($625M, 5-of-9 where one entity controlled 5 keys), Wormhole ($320M), Nomad ($190M). Common failures include insufficient validator diversity, no jurisdictional distribution, no compliance-zone partitioning, and fail-open compliance.
Technical Architecture
Jurisdictional Distribution
| Zone | Regulator | Jurisdiction |
|---|---|---|
| CH_FINMA | Swiss FINMA | Switzerland |
| US_FINCEN | US FinCEN | United States |
| SG_MAS | MAS | Singapore |
| GB_FCA | FCA | United Kingdom |
| DE_BAFIN | BaFin | Germany |
| JP_JFSA | JFSA | Japan |
| AE_FSRA | FSRA | UAE |
| EU_ESMA | ESMA | European Union |
| BR_CVM | CVM | Brazil |
| GLOBAL_FATF | FATF | Global |
Zone-Authorized Settlement
Each validator subscribes only to settlement topics for its authorized compliance zones. A DE_BAFIN validator cannot process SG_MAS settlements. Zone authorization is verified during validator bootstrap and enforced at the message consumption layer.
Fail-Closed Compliance
When the compliance service is unreachable, settlement messages are REJECTED, not approved. This is a fundamental architectural choice that prioritizes regulatory safety over availability.
Settlement P2P Data Flow
settlement-api --> Kafka zone topics (jil.settlement.{ZONE})
| 10 zones: DE_BAFIN, EU_ESMA, SG_MAS, CH_FINMA, US_FINCEN,
| GB_FCA, JP_JFSA, AE_FSRA, BR_CVM, GLOBAL_FATF
v
settlement-consumer (per validator, authorized zones only)
| consumer group: settlement-consumer-{ZONE}
| on failure:
v
jil.settlement.dlq (dead letter queue)Each validator runs a dedicated settlement-consumer process that subscribes only to Kafka topics for its authorized zones. Messages are processed through a 3-gate sequential pipeline: validator signature verification, zone authorization check, and full compliance check.
Prior Art Differentiation
| Bridge | Consensus | Jurisdictions | Zone Partitioning | Fail-Closed? |
|---|---|---|---|---|
| Wormhole | 13-of-19 guardians | 1 (US-centric) | No | No |
| Cosmos IBC | Relayer-based | N/A | No | No |
| Polkadot | GRANDPA/BABE | 1 | No | No |
| Ronin | 5-of-9 | 1 | No | No |
| JIL Sovereign | 14-of-20 BFT | 13+ | Yes | Yes |