# quant-transfer-guard

> Movement orchestration framework for safe cross-exchange and cross-chain asset transfers

## Docs

- [Introduction](https://jephalabs.mintlify.app/introduction.md): Movement orchestration for safe cross-exchange and cross-chain asset transfers
- [Getting Started](https://jephalabs.mintlify.app/getting-started.md): Single-page setup reference for QTG — auth, schema, and verification
- [Local Setup](https://jephalabs.mintlify.app/quickstart/01-local-setup.md): Get QTG running locally with Docker Compose and PostgreSQL
- [First Movement](https://jephalabs.mintlify.app/quickstart/02-first-movement.md): Create and execute your first dry-run movement in QTG
- [Template Cookbook](https://jephalabs.mintlify.app/quickstart/03-template-cookbook.md): Design DAG templates for your transfer routes
- [Going Live](https://jephalabs.mintlify.app/quickstart/04-going-live.md): Production setup with real credentials, KMS signing, and live verification
- [Security Tradeoffs](https://jephalabs.mintlify.app/security-tradeoffs.md): What QTG protects against, what it does not, and how your host environment changes the answer
- [QTG Overview](https://jephalabs.mintlify.app/concepts/overview.md): What QTG is, why it exists, and how it orchestrates cross-exchange asset movements end to end.
- [Movement Lifecycle](https://jephalabs.mintlify.app/concepts/movement-lifecycle.md): How a transfer request flows from creation to completion
- [Venues & Transports](https://jephalabs.mintlify.app/concepts/venues-and-transports.md): CEX lanes, bridge lanes, and how to combine them
- [Security Model](https://jephalabs.mintlify.app/concepts/security-model.md): How QTG protects your keys, approvals, and audit trail
- [Approval/Risk Policy Plane](https://jephalabs.mintlify.app/concepts/approval-risk-policy-plane.md): How QTG explains deny, manual review, refresh, and auto-approve decisions before funds move
- [Architecture](https://jephalabs.mintlify.app/concepts/architecture.md): QTG's 3-layer clean architecture — domain, application, infrastructure, and interfaces — with dependency rules and bootstrap sequence.
- [State Machine](https://jephalabs.mintlify.app/concepts/state-machine.md): QTG's two-level state model — RequestState and NodeState — including transition rules, derivation logic, and the side-effect safety guarantee.
- [Worker Orchestration](https://jephalabs.mintlify.app/concepts/orchestration.md): Why QTG uses Postgres as its scheduler instead of an external orchestrator like Airflow
- [Executor Protocol](https://jephalabs.mintlify.app/concepts/executor-protocol.md): How QTG dispatches, observes, and recovers individual execution steps across CEX and on-chain transports.
- [CEX Lane](https://jephalabs.mintlify.app/concepts/cex-lane.md): 3-node pipeline for transferring assets between centralized exchanges (CEX to CEX)
- [Bridge Lane](https://jephalabs.mintlify.app/concepts/bridge-lane.md): Shared pattern across CCTP, CCIP, and LayerZero/Stargate bridge executors
- [CCTP Lane](https://jephalabs.mintlify.app/concepts/bridges/cctp-lane.md): 5-node cross-chain USDC transfer pipeline using Circle's Cross-Chain Transfer Protocol
- [Circle Gateway](https://jephalabs.mintlify.app/concepts/bridges/circle-gateway.md): Unified USDC balance backed by deposits across supported source domains
- [CCIP Lane](https://jephalabs.mintlify.app/concepts/bridges/ccip-lane.md): Chainlink CCIP cross-chain transfer with DON + Risk Management Network attestation
- [LayerZero Lane](https://jephalabs.mintlify.app/concepts/bridges/layerzero-lane.md): Stargate v2 OFT cross-chain transfer over LayerZero v2
- [Plan Compilation](https://jephalabs.mintlify.app/concepts/plan-compilation.md): How QTG compiles a reusable movement template and input parameters into a validated, hash-locked execution plan.
- [Control Plane Auth](https://jephalabs.mintlify.app/concepts/auth.md): How QTG authenticates and authorizes service-to-service callers using HMAC signatures, role-scoped keys, and nonce replay protection.
- [Venue Health Check](https://jephalabs.mintlify.app/guide/venue-smoke-test.md): Verify exchange adapter connectivity and run small-amount live transfer tests
- [Approval/Risk Policy Guide](https://jephalabs.mintlify.app/guide/approval-risk-policy.md): How to design predictable approval, trusted target, budget, and cost policies in QTG
- [Outflow Velocity Cap](https://jephalabs.mintlify.app/guide/outflow-velocity-cap.md): A per-token rolling-window ceiling that brakes runaway outflow — the aggregate safety net under every per-movement guard
- [Agent Wallet Top-Up](https://jephalabs.mintlify.app/guide/agent-wallet.md): Fund approved Circle Agent Wallets from QTG-controlled USDC without exposing the treasury signer
- [Callback Verification Contract](https://jephalabs.mintlify.app/callback-verification-contract.md): HMAC v3 signature verification requirements for callback receivers
- [Callback Receiver Example](https://jephalabs.mintlify.app/callback-receiver-example.md): FastAPI example implementation for receiving QTG v3 callbacks
- [Architecture Overview](https://jephalabs.mintlify.app/reference/overview.md): QTG system architecture — domain, compiler, executors, signers, and workers
- [States and Transitions](https://jephalabs.mintlify.app/reference/domain/states-and-transitions.md): Movement and node state machine — valid transitions and terminal states
- [Types and Enums](https://jephalabs.mintlify.app/reference/domain/types-and-enums.md): Core domain types, enums, and value objects used across QTG
- [Error Taxonomy](https://jephalabs.mintlify.app/reference/domain/error-taxonomy.md): Structured error classification for movements, executors, and adapters
- [Executor & Signer Protocols](https://jephalabs.mintlify.app/reference/domain/executor-signer-protocols.md): Protocol interfaces that all executors and signers must implement
- [Executors Overview](https://jephalabs.mintlify.app/reference/executors/overview.md): Architecture of the executor system — dispatch, observe, and recover
- [CEX Lane](https://jephalabs.mintlify.app/reference/executors/cex-lane.md): Centralized exchange executors — withdrawal, status polling, and deposit observation
- [CCTP Lane](https://jephalabs.mintlify.app/reference/executors/bridges/cctp-lane.md): Circle CCTP bridge executor — burn, attestation, and mint flow
- [CCIP Bridge](https://jephalabs.mintlify.app/reference/executors/bridges/ccip-bridge.md): Operator surface for the Chainlink CCIP send executor and lane registry
- [Observe Probes](https://jephalabs.mintlify.app/reference/executors/observe-probes.md): Observer executor probes — how node status is polled and terminal states detected
- [Hyperliquid Account Strategy](https://jephalabs.mintlify.app/reference/hyperliquid-account-strategy.md): Account model and runtime status for Hyperliquid integration
- [Signer Protocol](https://jephalabs.mintlify.app/reference/signers/signer-protocol.md): Signer interface — AWS KMS, local key, and remote signer implementations
- [Local Private Key Signer](https://jephalabs.mintlify.app/reference/signers/local-private-key-signer.md): Development-only local signer for quick testing without KMS
- [Data Model](https://jephalabs.mintlify.app/reference/infrastructure/data-model.md): PostgreSQL schema — tables, relationships, and migration strategy
- [Plan Compilation](https://jephalabs.mintlify.app/reference/compiler/plan-compilation.md): How templates are compiled into executable DAG plans
- [Runtime Workers](https://jephalabs.mintlify.app/reference/workers/runtime-workers.md): Background workers — dispatcher, observer, recovery, and callback workers
- [Bootstrap](https://jephalabs.mintlify.app/reference/infrastructure/bootstrap.md): Runtime bootstrap sequence — executor and signer registry initialization
- [Auth Rollout](https://jephalabs.mintlify.app/reference/infrastructure/auth-rollout.md): HMAC authentication rollout plan and migration guide
- [Audit Log](https://jephalabs.mintlify.app/reference/audit-log.md): Append-only audit event system with PG trigger and query API
- [Auto-Approve](https://jephalabs.mintlify.app/reference/auto-approve.md): Free per-template cap hook vs Pro strategy-scoped budget ledger
- [Dashboard Auth](https://jephalabs.mintlify.app/reference/dashboard-auth.md): Dashboard SPA authentication — HMAC key management and session handling
- [RPC Defaults](https://jephalabs.mintlify.app/reference/rpc-defaults.md): Curated PublicNode endpoints shipped for QTG quickstart evaluation.
- [CLI Reference](https://jephalabs.mintlify.app/reference/cli.md): qtg and qtg-agent command-line interface reference
- [Runbook v3](https://jephalabs.mintlify.app/reference/runbook-v3.md)
- [Allowlist Operator QA](https://jephalabs.mintlify.app/reference/allowlist-operator-qa.md): Three-gate walkthrough for qualifying a CEX withdrawal destination
- [Enterprise Readiness](https://jephalabs.mintlify.app/security/enterprise-readiness.md): Procurement and DevOps-security reference: CI gates, signer model, callback and request auth, address allowlist, and known limitations
- [Deployment Hardening](https://jephalabs.mintlify.app/security/deployment-hardening.md): Concrete hardening artifacts and how to apply them
- [DB Access Control Boundary](https://jephalabs.mintlify.app/reference/security/db-access-control-boundary.md): The DB-write = game over threat boundary, and what it means for deployment
- [V3 API Endpoints](https://jephalabs.mintlify.app/reference/api/v3-endpoints.md): REST API reference for QTG v3 — movements, templates, registry, admin, and agent surfaces
- [Secret Rotation Checklist](https://jephalabs.mintlify.app/runbooks/secret-rotation-checklist.md): Checklist for rotating API keys, DB credentials, and HMAC secrets
- [CEX Stuck Node Recovery](https://jephalabs.mintlify.app/runbooks/cex-stuck-node-recovery.md): Diagnose and recover stuck CEX withdrawal or observe nodes
- [Auth Migration: v1 to HMAC](https://jephalabs.mintlify.app/runbooks/dashboard-auth-v1-to-hmac.md): Migrate dashboard authentication from v1 to HMAC-based auth
- [Bybit Whitelist Onboarding](https://jephalabs.mintlify.app/runbooks/bybit-whitelist-onboarding.md): Register destination addresses in Bybit withdrawal whitelist
- [Ccip allowlist chain match setup](https://jephalabs.mintlify.app/runbooks/ccip-allowlist-chain-match-setup.md)
- [Operator Network Access](https://jephalabs.mintlify.app/runbooks/operator-network-access.md): Configure network access and firewall rules for QTG operators
- [Pro Execution](https://jephalabs.mintlify.app/pro/overview.md): Governed commercial execution paths with public operator documentation
- [Stargate Bridge](https://jephalabs.mintlify.app/pro/reference/stargate-bridge.md): Registry surface for Stargate chain entries and path baselines
- [Signer Lifecycle](https://jephalabs.mintlify.app/pro/reference/signer-lifecycle.md): Pro API and CLI reference for AWS KMS signer lifecycle administration
- [KMS Signer Rotation](https://jephalabs.mintlify.app/pro/runbooks/kms-signer-rotation.md): Step-by-step runbook for rotating AWS KMS signing keys
- [Changelog](https://jephalabs.mintlify.app/changelog.md): Release status and where the release record lives

## OpenAPI Specs

- [openapi](https://jephalabs.mintlify.app/api-reference/openapi.json)

## Optional

- [GitHub](https://github.com/jephalabs/quant-transfer-guard)