| Chargeback window — disputes die at day 120, reversals happen exactly once | 109 | a state machine, a memory invariant |
| Client money segregation — the firm can only ever touch its own excess | 100 | a memory invariant |
| All-or-nothing crowdfunding — miss the goal, every backer gets refunded | 120 | a state machine, a memory invariant |
| Dividend distribution — payments can never exceed the declared pool | 96 | a state machine, a memory invariant |
| Delivery-versus-payment — no securities leave before the cash arrives | 111 | a state machine, a memory invariant |
| Invoice factoring — no advance on unverified paper, no double-selling | 108 | a state machine, a memory invariant |
| Letter of credit — the bank pays against verified documents, never trust | 116 | a state machine, a memory invariant |
| Loan amortization — principal never goes negative, never grows back | 100 | a state machine, a memory invariant |
| Milestone escrow — a contractor is paid per accepted milestone, never ahead | 106 | a state machine, a memory invariant |
| Multisig treasury — 2-of-3 distinct approvals, proven before a cent moves | 109 | a state machine, a memory invariant |
| Payroll run — the payslips must sum EXACTLY to the approved total | 100 | a state machine, a memory invariant |
| Security deposit — deductions can never exceed what the tenant paid | 99 | a state machine, a memory invariant |
| Two-party escrow — funds move only when BOTH sides say so, and never leak | 117 | a state machine, a memory invariant |
| Vesting schedule — cliff then linear, and over-vesting is unwritable | 118 | a state machine, a memory invariant |
| Wire dual control — the maker can never be the checker | 98 | a state machine, a memory invariant |