The leak is photocopy at a stall, campus, or licensing desk when 2G will not load. After Remita-to-TSA (T2), the clerk sees four fields. A recycled PDF gets nothing. Then the glass empties. Citizen ₦0.
A genuine RRR is complete where the portal dies. Queues move. Untapped T2 walks in. Ghost paper dies. The Remita brand stops arguing with a printout.
SideCar does not issue an RRR, settle, hold float, or sit on TSA. No citizen file. If Remita is dark, there is no stamp.
Q4 · OCTOBER · DECEMBER · 90 DAYS · TYPE THE GATEWAY ₦
Ordinary HTTPS JSON after T2. The notify does not attest. If policy blocks the webhook, the window still stamps from a local T2 token Remita already shows the clerk.
Named commercial owner and engineer. After T2: signed POST of the class Remita already fires to banks and MDAs. Fields: RRR, amount, posted time, MDA code. Out of scope: BVN, NIN, payer name. White-label: Remita sets the MDA price.
202 at once. No attest lock. Same key = one stamp. Local attest ≤ 12.3 ms. Language 0.000 ms. Empty ≤ 120 s. Attestation Utility Node Cost ₦12 per successful stamp. Kill switch: Remita stops the notify. Remita remains the court.
{
"event": "t2.posted",
"ref": "RRR",
"amount": "15000.00",
"posted_at": "2026-10-01T09:04:12+01:00",
"desk": "MDA-or-service-code",
"idempotency_key": "unique-id",
"sig": "hmac-sha256"
}
I do not sit on one national stamp lock. Ten thousand T2s are ten thousand local proofs. A webhook that attests is out of scope.