The audit trail
Everywhere else on this site we talk about money and people. Here we name the technology, because a non-custodial claim is only worth something if a skeptic can verify it. Nothing below is an illustration — every claim on this page resolves to a real transaction you can open yourself.
Lumenia is built on Stellar, a fast, low-cost public ledger, and the money is USDC — a dollar-denominated asset. Lumenia never takes custody. There is no Lumenia account holding your money on your behalf; it sits on the ledger, in a balance we have no power to move.
When you send, the amount is locked into a Claimable Balance with exactly two claimants: your recipient, who can claim it at any time, and you, who can reclaim it after 7 days if they never do. Nobody else is on that list — Lumenia included.
A new Stellar account normally needs a reserve of the network's native asset (XLM) before it can hold anything, plus a fee for every transaction. Lumenia's sponsor service covers both — sponsored reserves for the account and its trustline, and a fee-bump wrapped around the claim. The recipient ends up holding 0 XLM and pays nothing to receive.
The sponsor signs, so the question worth asking is what it refuses to sign. An allowlist validator checks every transaction against the source and the parameters of each operation, not just its type: the sponsor may only source the sponsorship and account-creation operations, a created account must start at zero, and anything that would move value is rejected outright. A constraint it cannot verify is a rejection, not an exception. The sponsor is never a signer on a user's account.
Proof, not promises
Every claim writes a transaction to the public ledger — one we can't hide, freeze, or quietly change. So don't take the four paragraphs above on trust. Here are two real ones: open either and look at what landed, and in whose account.
A walletless claim: 20 USDC landed in a brand-new account that holds 0 XLM.
A recent claim, produced by the automated end-to-end check.
Currently on Stellar's test network, with test money — we say so plainly rather than let the receipts imply otherwise. The mechanism is exactly what will run with real funds.
Backed by the Stellar Community FundThe demo runs this same code on this same network: a real link, a real claim, and a real transaction at the end of it. We target about 30 seconds.
