Transparency ledger
Every payment in, every allocation out, every correction — appended, hashed, and never edited. The ledger is the only place a figure about money on this site is allowed to come from, which is why every such figure elsewhere carries the row it was read from.
Where the balance is right now
- Rows in the chain
- 23, through sequence 23
- Head hash
26cdc0294aa828a73219b96d734b2e2a62fc4734e5bb555e22721f08d2556559- Allocated and carried forward
- CHF 2'203 — allocated to category funds and not yet disbursed, because the allocated balance is below the published disbursement minimum and the first quarterly disbursement has not happened.
- First disbursement
- first quarterly disbursement scheduled 2027-01-06
- Disbursed to date
- nothing. Allocation is not disbursement: the funds are assigned to category funds and held for the quarterly run.
Computed at 2026-09-03T16:17:53Z · updated within minutes. Machine access: /v1/ledger/chain.json, same-origin copy at /artifacts/ledger/chain.json.
Months
One page per month. A locked month is final: later corrections are new rows in a later month, never edits to this one.
Methodology
- Append-only. A committed row is never edited and never deleted. A correction is a new row that references the row it corrects; an annotation renders as an annotation, never as a change to the figure it annotates.
- Hash-chained.
row_hash = SHA-256(prev_hash ‖ JCS(row minus its two hash fields)), over RFC 8785 canonical JSON, in global sequence order. Every month publishes a digest over its own rows, and the chain publishes the head. Recomputing it needs nothing from us but the published bytes — which is what "independently reconcilable" means. - The M+1 hold. A month allocates only after the following month closes. Card chargebacks arrive weeks late, and a hold means a reversal lands against the month it belongs to instead of clawing back money already assigned to a charity. It is the reason this ledger is slower than a payment dashboard and more trustworthy than one.
- Roll-forward is visible. An allocated balance below the published disbursement minimum rolls into the next quarterly disbursement as its own row. It is never netted out of sight, and it never disappears into a total.
- Integer minor units. Money is stored and hashed as integers with an ISO currency code; foreign-exchange rates are captured per transaction as decimal strings. No floating-point number ever reaches a hash.
- Allocation is deterministic. Re-running the allocator on the same month and the same inputs produces byte-identical rows. A ledger that could not be reproduced would only be a record of what we said we did.
What the money passed through to get here
100% of net proceeds after published, capped operating costs (cap: set with counsel before launch, audited). The deductions between a payer's card and a category fund are published in full — as components and as one end-to-end figure — on the fee schedule, and the methodology behind the cap is on the money page.
The Association is registrar and witness. It never receives the licence grant and has no distributable private profit — structurally, not by policy: the funds route through an established Zewo-certified intermediary to the published category funds, and the routing is the row.