Clearing stays with NIBSS. After a successful post, the last-mile desk can show a short ticket. Then the glass empties. No customer file. The citizen is not charged. A later text, if anyone asks, is courtesy — not a second court.
Last-mile completeness beside a rail that already posted. Paper that exists only if NIBSS posted. Overlay at the stall when the portal dies. Independent local attests — not a second switch.
Not a second NIBSS. Not a wallet. Not a DMB. Not a citizen file. Not a plug inside clearing. If NIBSS is dark, there is no post and no stamp.
First sitting: 30,000 a day. Capacity picture: 30 million independent attests if spread. Commercial model stays enrolled last-mile only.
| 30 banking days | Last mile as today | With SideCar |
|---|---|---|
| Last-mile papers shown after the post | 0 | |
| NIP / switch economics | 100% NIBSS | 100% NIBSS |
| Attestation Utility Node Cost (₦12 × enrolled stamps) | ₦0 |
Ordinary HTTPS JSON after a successful post. Or banks nod and you send nothing. Either way I do not sit in front of NIBSS.
Named owners. After post: end-to-end id, amount, posted time, institution code, idempotency, HMAC — or silence. Out of scope: account dump, BVN, NIN, a second copy of the switch. One enrolled corridor, then 30 days.
202 at once. Local attest ≤ 12.3 ms. Language 0.000 ms. Empty ≤ 120 s. Attestation Utility Node Cost ₦12 per enrolled last-mile stamp. Kill switch: NIBSS stops the notify. NIBSS remains the court.
{
"event": "post.cleared",
"ref": "end-to-end-id",
"amount": "15000.00",
"posted_at": "2026-10-01T09:04:12+01:00",
"desk": "institution-code",
"idempotency_key": "unique-id",
"sig": "hmac-sha256"
}
I do not become a national stamp queue. Thirty million posts a day is ~347 independent attests per second if spread. Independent glasses hold that.