Two-Tier Retail CBDC

Central-bank ledger, intermediaries, retail wallets, and offline mode

Two-Tier Retail CBDC Central-bank ledger, intermediaries, retail wallets, and offline mode Tier 1 - Central Bank Tier 2 - Intermediaries Retail Edge Central Bank · issuer / Tier 1 · Tier 1 - Central Bank Central Bank issuer / Tier 1 Core CBDC Ledger · wholesale claims · Tier 1 - Central Bank Core CBDC Ledger wholesale claims Commercial Bank · intermediary · Tier 2 - Intermediaries Commercial Bank intermediary Fintech PSP · intermediary · Tier 2 - Intermediaries Fintech PSP intermediary Retail Wallet · consumer app · Retail Edge Retail Wallet consumer app Merchant Wallet · acceptance app · Retail Edge Merchant Wallet acceptance app Secure Element · offline P2P · Retail Edge Secure Element offline P2P Settlement / Recon · deferred sync · Tier 1 - Central Bank Settlement / Recon deferred sync issue / redeem distribute distribute provision provision online pay offline pay deferred sync reconcile Legend Security Database Backend Frontend

Two Tiers

  • • Central bank issues and holds the ledger
  • • Intermediaries run KYC, wallets, and limits
  • • CBDC is a direct central-bank liability

Offline Mode

  • • Secure element signs peer-to-peer transfers
  • • Caps bound double-spend blast radius
  • • Proofs replayed and reconciled on reconnect

Correctness

  • • Idempotent replay of offline proofs
  • • Conflicts freeze the element, never dropped
  • • Holding-limit waterfall must fail closed

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • T theme • E export