The evidence is in one system. The authority is in another. The next step is in someone's inbox

Every case needs a coordination protocol.

A shared state model for coordinated operations

01

Operation

The case itself — as a programmable object

02

Transition

A verified state change

03

Attestation

Someone saying: this is true, this is approved, this is done

04

Authority

Who can do what — and under what conditions

05

Constraint

The rules the operation has to follow

Operation
Events
Transitions
Attestations
Operational Memory

Every meaningful action leaves a trace

The case workspace

Built on the Micron Delta protocol

Operation Workspace

The whole case in one view — evidence, participants, timeline, state

Evidence Vault

Store and connect evidence directly to the operation

Timeline Engine

Turn scattered events into a single operational timeline

Packet Builder

Build the packet an exchange or law firm actually needs

AI Case Memory

Surfaces what's missing, what contradicts, and what to do next

From first report to resolution

Created
Intake
Triaged
Verified
Active
Escalated
Action Pending
Resolution Pending
Resolved
Closed
Archived

Every state change records who did it, why they could, and what changed

Fraud Recovery Example
Reported
Evidence Collected
Victim Verified
Funds Flow Identified
Exchange Identified
Legal Review
Freeze Packet Sent
Response Pending
Funds Restrained
Recovery Path Opened

AI helps. Humans decide

HumansAIInstitutions

Built for adversarial financial crime

Cross-border fraud. Multiple jurisdictions. Scattered evidence. One operation

victim intake
evidence preservation
wallet and transaction evidence
operational timeline
participant permissions

Build on the protocol

Create operations. Attach evidence. Transition state. Ship packets

API Preview
const op = await md.operations.create({
  type: "pig_butchering",
  title: "Crypto investment fraud report",
  intent: "asset_recovery",
  posture: "litigation_ready",
  sensitivity: "restricted"
})

const ev = await md.evidence.attach(op.id, {
  type: "wallet_address",
  title: "Victim transfer destination wallet",
  source: "victim_submission",
  value: "0x1234...5678",
  sensitivity: "confidential"
})

const att = await md.attestations.create(op.id, {
  claim_type: "evidence_reviewed",
  claim: "Initial wallet evidence reviewed.",
  evidence: [ev.id],
  confidence: 0.86
})

await md.operations.transition(op.id, {
  to: "verified",
  reason: "Initial evidence reviewed.",
  attestations: [att.id],
  evidence: [ev.id]
})

const packet = await md.packets.create(op.id, {
  type: "exchange_freeze_request",
  include: { summary: true, timeline: true,
    evidence: [ev.id], attestations: [att.id] },
  format: "pdf"
})

Keep the operation intact