NASD OTC Securities ExchangeA Self-Regulatory Organisation, registered with and
regulated by the Securities and Exchange Commission, Nigeria
NASD NEXT · GATE SERIES · VOLUME 03 OF 06 · RUN BOOK

Operating procedures and cadences

v2 · 22 Jul 2026 · volume 03 · read after Volume 02 · promises, flows, cadences · companions: 01, 02, 04, 05
THE LOGIC WE ARE AIMING FOR

This book is how we operationalise and execute to launch. Operations keep three promises: instant under caps, truthful state everywhere, and evidence producible on demand, and from Friday onward they are kept by three teams operating one platform, so the cadences below include the cross-team ones.

Below: the three promises with their watch numbers, six standing flows each with an owner and a ledger, and the cadences that make the calendar part of the system.
HOW TO THINK ABOUT RUNNING IT

Operations keep three promises

Every procedure in this book exists to keep exactly one of them. If a proposed process does not map to a promise, question the process.
P1

Instant, under caps

PROMISEA verified person reaches a live L1 wallet in minutes, always. Kept by: mint flow health, panel capacity, NIBSS path monitoring.
WATCHMint p50 under 3 minutes · L1 attestation success rate · allocation queue depth
P2

Truthful state, everywhere

PROMISENo user, broker or regulator ever sees a state that lies. Kept by: state-machine copy as code, real queue times on countdowns, stale stamps on cached reads.
WATCHZero catch-all errors in production copy · countdown accuracy vs actual
P3

Producible evidence, on demand

PROMISEAny relying broker, any auditor, pulls the trail without delay; every pull itself ledgered. Kept by: evidence API uptime, grant hygiene, anchoring cadence.
WATCHEvidence-pull latency · drill pass rate · anchor verification

Ownership rule: every flow below has one named owner and one ledger it writes to. If two teams own a flow, no one does; if a flow writes nowhere, it did not happen.

THE THREE-TEAM CADENCE

Operating as one team to launch

JOINT OPS

Owners, sync, and the gate

WEEKLYLayer-owner sync (Yinka · Ikechukwu · Kabelo): interface changes, register movement, blocker calls. Thirty minutes, on the record, honest state per workstream: owner, blocker, next action.
PER INTERFACE CHANGEBoth boundary owners review plus the four law questions. No silent contract drift.
TO LAUNCHThe hard gate (exchange PRD, adopted verbatim) is the shared finish line: operating model, minimum-KYC rule, client-money structure and settlement finality signed off before production.
STANDING FLOWS

The six procedures

R1 · MINT

Promise P1 · Owner: Platform ops

STEPSBVN + consent → NIBSS verify → eligibility + dedupe → tag minted, object sealed → panel allocation by rule → client-agreement tap → L1 auto-attest → VBank issued → ATTESTED (caps) → CHN via broker rails → full attestation on screening → caps lift
RUN IT BYEvery step writes provenance. Step fails → the state shown names reason + next action (P2).
R2 · VERIFY

P1 · Platform ops

STEPSTag → device key + enrolled biometric → object retrieved → hook fired (scope + purpose) → broker re-attests over snapshot → live
HARD GATEHook before any evidence serves. No pre-screening exception, ever.
R3 · DEVICE REBIND

P2 · Security ops

STEPSBVN re-verify → liveness vs enrolled template → notify old device + VBank rail → cooling window (no withdrawals, no broker changes) → step-up before first withdrawal → rebind ledgered
RUN IT BYFailures alert, not just block. Velocity anomalies page a human.
R4 · BROKER SWAP

P1 · Broker ops

STEPSNew broker chosen → hook fires → new attestation lands → old relationship to retention-only → CSCS transfer on its own honest countdown
RULEMake-before-break. No holdings broker-less for a millisecond.
R5 · PANEL ONBOARDING

P3 · Broker ops + CISO

STEPSStanding + capital check → broker configures acceptance criteria → key ceremony (broker-held, HSM) → pause switch handover → evidence-pull drill passed → enters rotation
RULENo drill pass, no rotation.
R6 · EXIT RAMP

P2 · Compliance ops

STEPSScreening fail post-L1 → FROZEN-AT-L1 → clear notice with defined timeline → broker liquidates holdings → full refund to originating BVN-linked account only → closure ledgered
RULEExposure was fenced at the caps; the ramp returns it, on the record.
CADENCES

Recurring cadences and drills

Continuous: the watch numbersMint p50, attestation SLA per broker, CHN queue age, evidence-pull latency, rebind velocity. These feed allocation weighting and the Broker Service Rating: one telemetry, two uses.
Fixed cadence: anchoringMerkle root of the provenance store published; panel brokers cross-witness it in daily statements. An internal chain proves nothing against an insider; a witnessed root does.
Quarterly: the drillsEvidence-pull per broker · rebind tabletop · exit-ramp dry run · lawful-fallback rehearsal (one cohort through explicit broker choice). A path never exercised does not exist.
Per release: copy reviewHonest-state copy is versioned beside the state machine and reviewed with the release. “Session expired” as a catch-all is banned by name.