Customer money in an account the business is physically unable to spend from.
The block is a policy evaluated inside a secure enclave before any signing key is assembled — a disallowed payment never produces a signature. A public page lets anyone verify the money is there without trusting the business or BOLT.
The rule that does the work
A token transfer's on-chain destination is the token contract, not the person being paid — so the rule reads inside the transaction data.
The refusal
This is what happens when the business itself tries to pay the wrong address. Not our error page — the enclave's own words.
{
"error": "RPC request denied due to policy violation",
"code": "policy_violation"
}Coverage through time
A proof of reserves gives you three points across ninety days. An index gives you every block a balance moved.
We didn't prove the money is safe. We removed the ability to move it, and put the proof on a page anyone can check.
Arc testnet. BOLT provides technical enforcement and public verifiability — it does not make anyone compliant with any regulation, and does not claim to.