← GATECITE
GATECITE · CONTROL MAP

Which rule answers which obligation

Every KYTGate control, the provisions it supports and the official source for each. The same mapping is signed into each Decision Receipt as its basis, so an auditor sees why a decision was taken and what it answers in one record.

Library gatecite-2026-10-07 · JSON · CSV control matrix

Start free sandboxTalk to us50 screenings a month free, no card.

On this page

Policy rules

The built-in rules of the baseline policy. A rule you write yourself is recorded on the receipt as unmapped, never given a borrowed article.

Direct sanctions match rule:sanctions-direct

A direct match on a sanctions list freezes the funds pending the MLRO's decision; nothing is returned automatically.

Engine floor: designated party rule:engine-floor:adverse-signal

No policy, built-in or custom, can turn a direct designation or an issuer freeze into ALLOW.

Issuer freeze (Tether, Circle) rule:issuer-blacklist

An address the stablecoin issuer has frozen goes to the MLRO.

No provision requires checking issuer freezes. It is mapped to the risk monitoring it supports; issuers often freeze on law-enforcement request.

Processor KYT high risk or rejected rule:processor-high

A high-risk or rejected verdict from your crypto processor freezes the funds pending the MLRO.

Relying on the processor's screening does not move the responsibility; FATF Recommendation 17 keeps it with you.

Processor KYT medium risk rule:processor-medium

A medium-risk processor verdict sends the event to human review.

Transaction integrity failure rule:tx-integrity-failure

A claimed deposit that is not found, reverted or unconfirmed on chain goes to human review.

Mapped to the requirement that records reconstruct the real transaction; a deposit that is not on chain cannot be recorded as received.

Mandatory checks incomplete rule:mandatory-coverage-gap

When a mandatory check could not run, the decision is a technical hold, never ALLOW.

Engine floor: mandatory gap rule:engine-floor:mandatory-coverage-gap

No policy, built-in or custom, can turn a failed mandatory check into ALLOW.

Policy unavailable rule:policy-unavailable

If the active policy cannot be read, the decision is a technical hold.

Wallet shared between customers rule:shared-wallet-review

A wallet already registered by another of your customers goes to human review.

Behaviour signal rule:behaviour-review

A behaviour signal (shared wallet, pass-through, structuring) goes to human review; behaviour never blocks alone.

Allow with processor evidence rule:allow-with-processor-evidence

With every mandatory check complete and processor evidence on file, the event is allowed and the evidence is recorded.

Coverage dimensions

What each column of the coverage matrix records, and the obligation it helps you evidence.

Transaction integrity coverage:transactionIntegrity

Confirms the claimed transfer exists, succeeded and paid the stated address.

Sanctions coverage:sanctions

Screens the address against the official sanctions lists at decision time.

Issuer freeze coverage:issuerFreeze

Reads the issuer's freeze state on chain at decision time.

Beyond what is required; mapped to the virtual asset risk assessment it feeds.

Wallet ownership coverage:walletOwnership

Records whether ownership of a self-hosted wallet was evidenced.

Processor evidence coverage:processorEvidence

Records whether your processor supplied evidence for its verdict, not just a verdict.

Actor attribution coverage:actorAttribution

Not available on the public baseline; filled only by a commercial provider you connect.

Source-of-funds exposure coverage:sourceOfFundsExposure

Not available on the public baseline; filled only by a commercial provider you connect.

Customer behaviour coverage:customerBehaviour

Applies the behaviour rules to the customer's own funding history.

Travel Rule coverage:travelRule

Records whether originator and beneficiary information was received with the transfer.

Decisions

The four outcomes every screening ends in.

ALLOW decision:ALLOW

The event proceeds; the receipt records what was and was not checked.

REVIEW decision:REVIEW

A case opens for a human to look before funds move on.

BLOCK_PENDING_MLRO decision:BLOCK_PENDING_MLRO

Funds are held for the MLRO, who decides whether to report; releasing them takes two people.

TECHNICAL_HOLD decision:TECHNICAL_HOLD

Checks could not be completed, so the event does not proceed until they are.

The record

What is kept, and for what.

Signed Decision Receipt record:receipt

Every decision is kept as a signed, append-only record that can be replayed later.

Sources

International standard (FATF)

European Union

United States (OFAC)

How the map is kept

An article is cited only when its number has been read in the official text; otherwise the instrument is cited and the summary says what it covers. Summaries are paraphrases for orientation, not quotations. A provision that is not yet in force says when it applies. A control that goes beyond what any rule requires, such as reading stablecoin issuer freezes, says so instead of borrowing an article.

Each receipt records the library version it was mapped with, so a later correction here never changes what an earlier receipt said. If you find an error, write to hello@kytgate.com and we will correct it within one working day.