Payments
ISO 20022, end to end: pain.001, pacs.008, camt.053, and acmt.001. Adopt one library at a time.
Learn moreWhat's new
- DORA Spared You From NIS2. It Will Not Spare You From the CRA.
- Your High-Risk Deadline Moved to December 2027. Your Chatbot's Did Not.
- The Wallet Ships in December. Banks Must Accept It a Year Later.
- PSD2 Made Banks Build an API. FiDA Makes Them Join a Market.
- Out of Scope Is Not Out of Risk: The 2026 Model-Risk Rewrite Left Out the Models Banks Are Actually Deploying
Read as…
What I build
Open source for the future of finance.
Security
Post-quantum primitives: ML-KEM (CRYSTALS-Kyber, NIST FIPS 203) and hashing, ready to pilot today.
Learn moreTooling
Audited Rust libraries and a code security scanner, signed and shipped with a software bill of materials.
Learn moreProof
By the numbers.
43.7MOpen-source downloads
672GitHub stars
104Sigstore-signed articles
19Years in payments and banking
EPAA · September 2025
Why the payments industry must act now.
Regulators are treating harvest-now-decrypt-later as a credible present risk. This paper, produced for the Emerging Payments Association Asia, sets out the structural threat and the case for coordinated action across wholesale payment rails.
Latest
From the desk.
Cyber Resilience Act · CRA · DORA
DORA Spared You From NIS2. It Will Not Spare You From the CRA.
TL;DR On 11 September the CRA starts a 24-hour reporting clock. It attaches to products, so the DORA carve-out that spares banks from NIS2 never reaches it.
EU AI Act · Article 50 · AI Governance
Your High-Risk Deadline Moved to December 2027. Your Chatbot's Did Not.
TL;DR The AI Omnibus moved the high-risk deadline to December 2027. It did not move Article 50. Transparency obligations apply from today, and they land on the chatbot.
Digital Identity · eIDAS · EUDI Wallet
The Wallet Ships in December. Banks Must Accept It a Year Later.
TL;DR Member States must ship an EU Digital Identity Wallet by December 2026. Banks must accept it by December 2027. That twelve-month gap is the whole problem.