Orchestrator — the workflow automation engine

Where business workflows become events on the ledger.

Bridges Stripe (money) and Microsoft (audit).

Orchestrator is the engine that runs business workflows: payment releases, GL postings, claim approvals, underwriting decisions, compliance gates. It moves money via Stripe (Treasury, Connect) and writes events to Microsoft Confidential Ledger atomically. The release engine is the most operationally-loaded application.

What it does

Workflow runtime

Runs your business processes

The Orchestrator is a Cascade-governed rule engine that evaluates evidence, fires money moves, and records events. Releases, postings, claims, underwriting — all run through here.

Stripe integration

Bridges to programmable money

When a workflow needs to move money, the Orchestrator fires the Stripe Treasury / Connect / Issuing call. KYC via Stripe Identity. Fraud signals from Stripe Radar feed in as evaluators.

Ledger integration

Bridges to cryptographic audit

Every workflow event lands on Microsoft Confidential Ledger atomically with the money move. Stripe events also stream to the ledger — every payment is provable in the same place as every workflow event.

Operational details

Pure functions

Evaluators are stateless

Each evaluator (lien-waiver-clear, g702-math-reconciles, coi-current, etc.) is a pure function over typed project state. Predictable, testable, fast.

Cascade-governed

Rules change in SQL, not code

Operators change retainage thresholds, evidence requirements, or release rules via Cascade UPDATE. No engineering ticket, no deploy. The rules tree resolves at evaluation time.

Multi-tier

One event, many payees

When a release fires, the engine handles multi-tier flow natively: GC → subs → sub-subs in a single continuous primitive. Each move records on the ledger separately.

Atomic

Money + audit move together

The Stripe call and the ledger write happen atomically. If either fails, both roll back. There's never a Stripe move without an audit record, or vice versa.

Related

Pre-deploy safety

Sandbox

Sandbox tests Orchestrator rules against synthesized events before they affect production. New rules never reach the ledger without first running through Sandbox.

See Sandbox →
Governance

Council

Council handles rule changes, escalation paths, and override authority. Council decisions inform what rules the Orchestrator runs.

See Council →
Foundation

Microsoft Ledger

Where every Orchestrator event lands. The audit foundation; the trust anchor.

See Ledger →

Diagram

Talk to us about Trust Spine.

Wave 1 design partners get pricing certainty + product shaping + first-mover position on the network.