@algovoi/compliance-gate-lite

@algovoi/compliance-gate-lite

The open, lite origination layer for AlgoVoi Compliance Gate. Bring a categorical screening verdict — ALLOW / REFER / DENY — from your own sanctions / PEP / AML provider; this binds it to a no-PII payer reference and a pinned subject ref (a policy_bound_ref, settlement-action binding_ref, or retention_chain ref) into a deterministic, recomputable gateRef.

A decision made under one policy snapshot does not recompute under a rotated policy. Byte-identical to the Python package algovoi-compliance-gate-lite.

payerRef = "sha256:" + SHA-256(JCS({ address, network }))      // address in, only the hash out
gateRef  = "sha256:" + SHA-256(JCS({ payer_ref, subject_ref, verdict }))

Install

npm install @algovoi/compliance-gate-lite

Use

import { payerRef, gateRef, verify } from '@algovoi/compliance-gate-lite';

const payer = payerRef('base', '0x…payer');            // no PII: only sha256 out
const ref = gateRef('ALLOW', payer, 'sha256:aaee2091…'); // bind verdict to payer + policy
verify(ref, 'ALLOW', payer, 'sha256:aaee2091…');         // true
verify(ref, 'DENY',  payer, 'sha256:aaee2091…');         // false — verdict tamper

Invalid verdicts and malformed refs throw ComplianceGateError (so verify returns false), never a clean-looking hash.

Lite vs commercial

Lite is Apache-2.0 and content-addressed (no signature). The commercial Compliance Gate v2 adds Falcon-1024 post-quantum signing, the maintained verifier, and the Proofs (zero-knowledge) layer.

Conformance

npm test   # node conformance/compliance_gate_lite_v1/verify.mjs

The expected hashes are produced by the Python package, so a passing run proves byte-for-byte Python/TypeScript parity.

License

Apache-2.0. Copyright 2026 AlgoVoi. Preserve the NOTICE in any distribution.