Treasury policy, expressed as code.

Code that survives an auditor reading it next quarter.

Policies are explicit. Inputs, outputs, schedules, limits, authorizers. Nothing is implicit, nothing is "the agent decided." Every behavior is locatable in the source — and verifiable on-chain after execution.

// treasury/policies/payroll.ts
import { meridian, USD } from "@meridian/sdk";
import { roster } from "../people/roster";

export const policy = meridian.policy({
  name: "payroll-bi-weekly",
  authorizers: ["finance-multisig", "cfo-key"],

  schedule: meridian.cron("0 12 * * 4/2", "UTC"),

  limits: {
    perRun:          USD(300_000),
    perCounterparty: USD(25_000),
    cooldownHours:   336, // 14d
  },

  execute: async ({ pay, log }) => {
    for (const employee of roster.active()) {
      const tx = await pay(employee.payee, employee.salary, {
        rail: "usdt-ton",
        memo: `payroll/${employee.id}`,
      });
      log({ employee: employee.id, tx: tx.hash });
    }
  },
});

REST + signed webhooks. No SDK required.

Trigger receivables, query balances, and reconcile from any system. All requests use HMAC-signed headers. All webhooks are signed with the protocol's Ed25519 key, rotatable per organization.

• Base URLhttps://api.meridian.fi/v1
• AuthBearer mrn_live_…
• Webhook signingEd25519. Rotation via console.
• Rate limit60 req/s per workspace · burst 200

$ curl -X POST \
    https://api.meridian.fi/v1/instructions \
    -H "Authorization: Bearer mrn_live_xxxxx" \
    -H "Content-Type: application/json" \
    -d '{
      "policy":     "weekly-vendor-payouts",
      "amount":     12400.00,
      "currency":   "USDT",
      "rail":       "usdt-ton",
      "counterparty": {
        "id":   "cp_helix_logistics",
        "memo": "INV-2026-0044"
      },
      "idempotency_key": "inv-2026-0044-payout"
    }'

# 202 Accepted
{
  "id": "inst_01J9F4Y6Q1H7GZ",
  "status": "awaiting_signatures",
  "signatures_required": 2,
  "signatures_present": 1,
  "on_chain": null
}