DW-001 · COCKPIT · ● CORE · FOR TREASURY
Every address has a place in the org chart of the money.
Cockpit is the hierarchical institutional asset management system. Self-hosted, local-first, zero custody transfer. Full interface and API.
The export
Every asset management system you can buy will give you a CSV. The CSV is a list of movements with no opinion about any of them: a timestamp, a hash, an amount, two addresses. It does not know that one of those addresses is your own consolidation address, because the system that produced it does not know either.
If that is all we wanted, we could have taken it from the chain directly. At least then we would have had the addresses.
So the export is not the deliverable. It is the raw material for a reconstruction somebody in your company performs by hand, every month, from memory and message history. The asset management layer had the answer at the moment of signing and threw it away.
A flat bag of addresses has no concept of what any of them is for. That is the whole defect.
The tree
ENTITY > ACCOUNT / PROJECT > MERCHANT / SUB-ACCOUNT > CHAIN > ADDRESS
- Meridian Estonia
- The legal person. The thing an auditor certifies, in a country, under a standard, in a currency.
- Client Settlements
- The operational unit. Others in the same entity: Supplier Payments, Treasury.
- 0x9f4c…d10
- The consolidator, created automatically with the first address below it.
- Northgate
- The counterparty being served. Optional, and structural when present.
- Ethereum
- Whatever the operation requires.
- 0xE1f0…5fa
- The leaf. Generated inside the tree, because there is no other way to generate one.
There is no way to create an address outside the tree. Placing it is not a required field that decays under volume — it is a precondition of the address existing at all.
Mechanics
The consolidator is created for you.
A project gets its sweep address the moment it gets its first operational address. Nobody has to remember to make one, so no month exists where one is missing.
Internal transfers are not detected. They are implied.
A child moving to its parent is what an internal transfer is. There is no heuristic to tune and no false positives to review.
Entity is the root, so the report is derivable.
The chain is entity-blind. Addresses have no nationality, no fiscal calendar, no reporting currency. Auditors are national. Select the entity, and the country, the currency and the standard follow from the coordinate. A flat address list has no root to select.
Cross-entity movement stays visible.
Poland to Estonia is internal to the group and an intercompany transfer with tax consequences. Both are true. Nothing is blocked; the movement is flagged, and a person supplies the booking reason.
Unsolicited value is unsolicited by construction.
Inbound from an address that is not in the tree, against no invoice and no operation. Dust, spam, airdrops. A single Tron address can hold two thousand transfers of 0.0001 TRX. None are income, and none require a threshold.
Authorization is a Cockpit act, and only a Cockpit act.
The ledger cannot move funds. That is the segregation of duties an auditor is trained to look for, expressed as two separate systems rather than two roles in one.
Execution is never blocked.
A system that refuses to sign a two-million-dollar transfer over an empty dropdown is removed in week two. Attribution is enforced at the close, not at the signature.
Deployment
Self-hosted
Your infrastructure, your keys, your database. There is no hosted tier and no plan for one.
Zero telemetry
Nothing phones home. Stated without asterisk, and the cost is ours: we cannot see how the product is used.
Flagged · address import
Institutions do not re-home addresses when they change platforms — they consolidate, sweep, and book one entry. Where an address must be imported, it is permanently flagged as imported, so an auditor can always see which nodes were born in the system and which were adopted.
Importing an existing flat address book means placing every address in the tree by hand, once. It is the hardest part of adoption and we will not pretend otherwise.