6-PHASE DETERMINISTIC EXECUTION PIPELINE

HOW NEX-TRACE GLOBAL WORKS

From incoming vendor catalog to sub-100ms ERP order gating: understand the mathematics, graph engines, and statutory proofs behind our zero-hallucination compliance platform.

SYSTEM TOPOLOGY OVERVIEW

The End-to-End Compliance Pipeline

01. INGEST

ERP webhook / CSV batch ingestion

< 1 ms

02. NORMALIZE

Trigram suffix & diacritic stripping

< 2 ms

03. TRAVERSE

NetworkX DiGraph up to 5 tiers

< 8 ms

04. OFAC MATH

FAQ 401 50% Rule aggregation

< 3 ms

05. ERP GATE

Binary webhook order hold/release

< 14 ms Total

06. SAFE HARBOR

EAR § 762 SHA-256 sealed PDF

Async Export

PHASE 01

Counterparty Ingestion & Legal Suffix Normalization

Corporate entities frequently disguise their identities across transnational jurisdictions using regional legal corporate suffixes (e.g., FZE in UAE Free Zones, GmbH in Germany, LLC in the US, S.A. in Latin America). Nex-Trace executes multi-pass deterministic string normalization before performing watchlist matching.

// Normalization Pipeline Example:

Raw Input: "Al-Mirage Aerospace Spare Parts F.Z.E."

Suffix Normalizer: Strips punctuation, isolates tokens → removes [FZE, F.Z.E., LLC, CORP]

Normalized Canonical: "AL MIRAGE AEROSPACE SPARE PARTS"

Trigram Similarity: Match against OFAC SDN alias "Al Mirage Aviation Parts Ltd" → Score: 94.2%

PHASE 02

Deterministic Recursive Graph Traversal (NetworkX)

Unlike human compliance teams who stop at the first intermediate tier, Nex-Trace constructs an in-memory Directed Acyclic Graph (nx.DiGraph) up to 5 tiers deep. Cross-border cyclic shareholdings (e.g., Company A owns 20% of Company B, which owns 15% of Company A) are detected via Johnson's cycle algorithm and safely evaluated without infinite recursion.

// NetworkX Subgraph Traversal Engine:

def evaluate_corporate_tree(target_id: str, max_depth: int = 3) -> ComplianceReport:

graph = load_ownership_digraph(target_id, depth=max_depth)

cycles = list(nx.simple_cycles(graph)) # Protected from circular loops

blocked_nodes = find_directly_sanctioned_nodes(graph)

return ofac_engine.compute_faq_401_blocking(graph, blocked_nodes)

PHASE 03

OFAC FAQ 401 50% Rule & Aggregation Mathematics

The core statutory challenge of sanctions compliance is evaluating non-decaying cascading control and multi-party split-minority holdings:

SCENARIO A: CASCADING 50% TIER

SDN Person X owns 50% of Parent A. Parent A owns 50% of Target B.

Parent A is blocked → attributes 100% of its stake to Target B → Target B is BLOCKED (50.0%).

SCENARIO B: SPLIT-MINORITY AGGREGATION

SDN Person X owns 30%. SDN Person Y owns 20% of Target C.

Neither owner holds ≥ 50%, but Σ(30% + 20%) = 50.0% → Target C is BLOCKED.

PHASE 04

Statutory Decision Gating & Risk Tier Allocation

Screening results are synthesized into four immutable risk tiers with associated operational instructions:

CLEARED (NLR)

0.0% blocked equity. Order released under EAR § 740.

MANUAL REVIEW

10%–49% minority stake or diversion hub transshipment.

CONSTRUCTIVELY BLOCKED

≥ 50.0% aggregate ownership under FAQ 401. ERP hold locked.

DIRECT MATCH DENIED

Direct match on SDN, Entity List, or Debarred list.

PHASE 05

Sub-100ms Outbound ERP Order Gating

Physical warehouse dispatch cannot wait for manual trade attorneys. Nex-Trace delivers sub-14ms decision latency, integrating directly into enterprise resource planning software:

// ERP Outbound Webhook Response Payload:

HTTP/1.1 200 OK

X-NexTrace-Signature: hmac-sha256=9b72a...

Content-Type: application/json

{

"audit_id": "aud-8f4b2a9e-10c3-4d8e-9762-bcf849102c91",

"erp_action": "BLOCK_ORDER_COMPLIANCE_HOLD",

"statute_violated": "50 U.S.C. § 1705 (OFAC FAQ 401)",

"aggregate_blocked_equity": 50.0,

"timestamp": "2026-09-23T21:40:00Z"

}

PHASE 06

EAR § 762 Safe Harbor PDF Certificate Generation

Under 15 CFR § 762.2, all export screening records must be preserved for five years. When audits are completed, Nex-Trace automatically registers an immutable SHA-256 digital digest. If federal regulators investigate years later, download the self-authenticating PDF via:

GET /api/v1/audit/{audit_id}/pdf → application/pdf (Signed Certificate of Audit)

LAUNCH INTERACTIVE DAG TRAVERSAL SANDBOX→

View Frequently Asked Questions (FAQ) →