Policy rules, case handling, and audit trails for risk review on Galaxia testnet. Engineered controls only — not certified AML/KYC, not SOC 2, not regulatory authorization.
Health ≠ readiness. This deployment is simulated and not certified. `/api/health` stays useful (process up). `/api/ready` fail-closes with ready:false / HTTP 503 so load balancers and buyers are not misled.
Oracle-node rule evaluation and jurisdiction modeling on testnet deployments.
Testnet Validated
Case & screening workflows
Case tracking and screening workflows for operators. Screening is simulated until live vendors are configured.
Implemented
Observability & provenance
Health / ready / live / status, correlation IDs, X-Galaxia-* headers, structured JSON probes.
Not certified
Audit & frameworks
Audit logging and framework mapping for evaluation. No SOC 2 / ISO 27001 / MiCA claim is made.
Probe contractfail-closed readiness
/api/liveProcess is serving traffic200 alive
/api/healthHealthy process with simulated:true, certified:false200 health
/api/readyDeployment is simulated and not certified. Health may be ok; readiness fail-closes until live vendors and independent certification evidence exist.503 not ready