A Ledgerless payment is a direct transfer of value between two tamper-resistant secure elements. The sender's chip atomically debits its own balance and signs a payment record; the receiver's chip verifies the signature and credits its balance. The entire exchange completes in under a second, requires no internet connection, costs nothing, and cannot result in a double-spend because the deduction happens inside hardware that the sender cannot modify. Here are the seven steps in detail.
- 01
The chip is manufactured with an attestation key
A tamper-resistant secure element is provisioned at the factory with a unique cryptographic identity. This key never leaves the chip and lets any other Ledgerless device verify that an incoming payment came from a real Ledgerless secure element, not a software impersonator.
- 02
The owner loads funds onto the chip
The chip's holder transfers a balance onto the secure element through the Ledgerless Bridge. The Bridge debits the owner's stablecoin or fiat account and credits the chip's internal balance counter. From this moment, the funds live inside the hardware.
- 03
The sender's agent requests a payment
An AI agent or autonomous device asks its local secure element to pay a specific recipient a specific amount. The chip checks that the balance is sufficient and that any Covenant policies allow the spend.
- 04
The chip atomically deducts and signs
In a single atomic operation that cannot be interrupted, the secure element decrements its internal balance by the payment amount and produces a signed payment record. Because the deduction and the signature happen inside the chip, the same balance cannot be spent twice — the act of signing has already removed the funds.
- 05
The receiver's chip verifies the signature
The receiving device's secure element checks the payment record's signature against the sender's attestation key. If the signature is valid and the chip is recognised as a genuine Ledgerless device, the payment is accepted.
- 06
The receiver's chip credits its balance
The receiving secure element atomically increments its own balance counter by the payment amount. At this point the transaction is final. No global ledger has been written. No blockchain has reached consensus. No server has been consulted.
- 07
Both devices store the receipt
Each chip writes the signed payment record to non-volatile storage for later audit and Bridge reconciliation. If either side eventually wants to move the balance back to a stablecoin or bank account, the Bridge can verify the chain of signed transactions and settle on-chain.
Deeper protocol details in M2M Payments, the policy layer in Covenant, and how Ledgerless compares to alternatives on Compare.