The financial operating system for organizations that don’t sleep.
Twelve cooperating services keep one canonical book — ledger, billing, treasury, custody, payments, identity, and compliance — operable by humans and the agents they authorize. Settles on every rail, including chain. Audit-ready by construction.
- 14:02:11CabbageINV-2941 issuedACME Holdings · $14,820.00info
- 14:02:08ChardPayment authorizedadyen · 240ms · 3DS frictionlessok
- 14:02:05BeanJ-2026-04-29-04417 sealedDr 1100 · Cr 4000+2200ok
- 14:01:54CeleryDrift drafted · −$0.18 FX residueconfidence 0.98info
- 14:01:36GreenhouseTransfer signed · 2 of 3cold/01 → ops/03ok
- 14:01:22SageOFAC screen · 1 hit · misspellingcase 7e2… · awaiting reviewerreview
Real double-entry. Sealed every period.
Bean is a cryptographically-sealed double-entry ledger. Cabbage produces invoices that post directly to it, with ASC 606 revenue recognition built in. Every artefact binds to a balanced journal entry. Every period closes with a blake3 root.
J-2026-04-29-04417
ACME Holdings · entity:US-Parent · period 2026-04 · posted 14:02:05 UTC- CabbageINV-2941invoice
- Chardpi_2c4f1a…payment intent
- Brancheschase 0049 · pending → settledbank deposit
- BasilR-2026-04-29-2941receipt · delivered
- posted by alex@acme.com · session ses_9c1b…
- acting as did:oas:agent:billing-bot.v0.4.1
- act arsenal:act_7d… · cabbage:invoice:* · 24h
- prev blake3:c14a921… (J-…04416)
- seal blake3:9f3a2c84e1b… ✓
- signer ed25519:bean_signer_03 · attested 14:02:05 UTC
Bean — Double-entry, deeply
Posted, balanced, sealed. Every journal entry binds to its source artefacts and the previous entry’s blake3 root. Period close is a deliberate, signed act.
INV-2941
Issue 2026-04-29 · Net 30 · Due 2026-05-29- Subscription · ratable30 days · straight-line$14,000.00
- Usage · custody bpsrecognized at invoice$2,800.00
- Usage · routingrecognized at invoice$9,720.00
Dr 1100 Accounts Receivable 14,820.00
Cr 4000 Subscription Revenue 14,000.00
Cr 2200 Sales Tax Payable 820.00
balanced ✓ · seals at issueCabbage — Billing without bolts-on
Subscriptions, usage, milestones, contracts. Tax-correct line items. Issuing an invoice posts to Bean, sends through Basil, enqueues a Chard payment intent — atomic.
Your money, your keys, your terms.
Greenhouse uses FROST threshold signatures across signer devices. Garden is one possible signer, never enough to move funds alone. Every spend is policy-checked before it’s ever signed. Recovery is a guardian ceremony, not an email reset.
- ✓Daily outbound ≤ $250k$185k used today · within windowok
- —>$1M timelock 24hbelow thresholdn/a
- ✓Allowlist · ops/03address allowlisted 2026-03-12ok
- ✓Sage · OFAC + EU + UNscreened 2 minutes agook
- ·Quorum 2-of-31 attested · 1 awaitingpending
Treasury you can defend in front of an auditor.
Kale models your treasury policy as code. Sage screens every counterparty against four global lists in milliseconds. Every decision is sealed into Bean — every refusal is explainable.
- minimum.buffer$1.20M (90 days payroll)ok
- max.exposure / counterparty$2.50Mok
- yield.allocation60% T-bills · 30% MMF · 10% USDCdrift
- sweep.dailybalances >$300k → MMF tierexecuted 14:00 UTC
Kale — Treasury, policy as code
Cash positions across banks, brokerages, and chains in one view. Sweep, hedge, and forecast against your real Cabbage + Chard pipeline.
ACME Holdings, Inc.
did:oas:org:acme · 1042-A- ✓OFAC SDNmatched 0 of 12,418 entriesclear
- ✓EU consolidatedmatched 0 of 2,809 entriesclear
- ✓UN Security Councilmatched 0 of 487 entriesclear
- !Adverse medianame fragment match · 2026-04-12 · low confidence1 hit · review
Source matched ACME Holdings (UK) Ltd., distinct UK entity referenced in a 2026-04-12 article. No UBO overlap. No address overlap. Different Companies House registration.
Sage — Continuous compliance
KYC, KYB, OFAC, EU consolidated, UN, adverse media. Hits arrive with evidence packets. Decisions seal into Bean’s audit chain.
Every cent matched. Every drift drafted.
Chard routes payments to the cheapest healthy rail with a warm fallback. Celery reconciles bank, processor, on-chain, and ledger sources, drafts adjusting entries, and gates period close on full agreement.
Smart route picked the cheapest healthy rail with auth confidence ≥ 0.95. Stripe held as fallback.
- Adyen1.92% + $0.10 · auth 0.97 · 240msprimary
- Stripe2.10% + $0.30 · auth 0.95 · 285msfallback
- Braintree2.18% + $0.30 · auth 0.93 · 315msfallback
- Mollie · EU1.80% + €0.25 · auth 0.91 · 420msgeo · skipped
- USDC · solana0.05% gas · auth 1.00 · 60msscheme · n/a
Chard — Payment routing without lock-in
Cards, ACH, SEPA, wire, RTP, FedNow, and on-chain settlement. Smart routing on success-rate, fee, and latency. Idempotent everywhere.
Dr 6300 FX residue · realized 0.18 Cr 1010 Cash · Coinbase Prime 0.18 memo Greenhouse tx_9b1a… · drafted by Celery
Period closes when 0 open items remain. Drafted adjustments require approval. Sage classifications require sign-off from a human reviewer.
Celery — Reconciliation that explains itself
Triangulated matching across Bean, Chard, Branches, and Greenhouse. Drift adjustments are drafted with confidence scores and an evidence chain.
The event spine your stack listens to.
Vine carries every meaningful state change in Garden. At-least-once delivery, exactly-once outbox into Bean, signed envelopes, per-tenant ordered cursors, 90-day replay. Subscribers fan out over HTTP, AMQP, MCP, WebSocket, and SSE.
- 14:02:11inv.issuedCabbageINV-2941 · $14,820.00 · ACME Holdingscur 92010
- 14:02:08payment.authorizedChardpi_2c4f1a · adyen · 240mscur 92009
- 14:02:05journal.postedBeanJ-…04417 · sealed blake3:9f3a2c…cur 92008
- 14:01:54recon.draftedCelerydrift adj · −$0.18 · conf 0.98cur 92007
- 14:01:36transfer.signedGreenhousecold/01 → ops/03 · 2 of 3cur 92006
- 14:01:22screen.hitSagecase 7e2c · adverse-media · lowcur 92005
- https://acme.com/hooks/gardenok412 delivered today23ms p50
- mcp://agent.bookkeeperok1,820 delivered today12ms p50
- amqp://reporting.acmeok412 delivered today14ms p50
- https://stale.example/hooksDLQ · 40 delivered todayno recent delivery
One canonical book, twelve services deep.
Built for organizations that move money continuously across rails, currencies, and counterparties — and that have to defend every cent of it later.
Self-contained crates with their own databases and contracts. Zero vendor lock-in.
BTC, ETH (+ L2s), SOL, USDC, USDP, PYUSD, DAI — settled into Bean as journal entries.
Letters from the field.
What practicing operators say after they switch.
We replaced QuickBooks, Stripe Billing, and three custom reconcilers with Bean, Cabbage, and Celery. Closed our first month on Garden in two days.
M. Halevy
Controller, Field Notes Inc.
Our agent treasury moves $40M weekly across chains and venues. Without policy-bound Greenhouse, we couldn’t insure the desk. With it, we can.
K. Otieno
Treasurer, Solenoid DAO LLC
I’m a sole proprietor with no accountant. Garden Desktop is the first software that explains itself the way an accountant would.
Y. Ito
Independent designer
The audit trail saved us a week of forensic reconciliation when our processor flipped jurisdictions. Every dollar traced back to its journal entry.
J. Walters
CFO, Orbital
Threshold custody without a custodian. Hardware-key signing. Reconciled into the same ledger as our wires. This shouldn’t be unusual but it is.
N. Gold
CEO, Looply
Our agents now issue invoices, screen counterparties, and reconcile drift — all under capability tokens with hard limits. Lineage to a human is not optional.
L. Marshall
Founder, Pine Labs
Questions & answers
Yes — and considerably more. Bean is a real-time, multi-entity, multi-currency, audit-sealed double-entry ledger. Cabbage handles billing. Chard handles payments. Greenhouse handles crypto custody. Sage handles compliance. The whole thing is one operating system, not a stack of bolt-ons.
Greenhouse uses FROST threshold signatures across signer devices. Garden is one possible signer, but never enough to move funds alone. Recovery is a guardian ceremony, not an email reset.
Every service exposes an MCP server and a typed REST API. Agents authenticate with Arsenal capability tokens bound to OAS DIDs. Every action carries a lineage proof back to a human root. Spend limits, address allowlists, and approval quorums apply to agents the same as people.
BTC, ETH (+ Optimism, Arbitrum, Base), SOL, Polygon, Avalanche, Cosmos Hub, Stellar, Hedera, Aptos, Sui, NEAR, Tron, Cardano. USDC, USDP, PYUSD, DAI, USDe.
Yes. Forced agnosticism is a principle. Data export is available at any time, in JSON and CSV. We hold the platform together with cryptographic seals and contracts, not lock-in.
Audit-ready for SOC 2 Type II and ISO 27001:2022. PCI DSS 4.0 SAQ-D scope-minimized. ASC 606 / IFRS 15 built into Bean. FATF Travel Rule and MiCA compliant. See the compliance page for the full list.
Pay for what scales.
We don’t charge per seat. Five tiers with a generous envelope, plus published rates for the things that scale.
Sprout
$29/mo
Freelancers, micro-SaaS, side projects with real customers.
Single-entity double-entry ledger
Multi-currency with FX revaluation
Cabbage subscription billing
Sage KYC / OFAC screening
Celery AI reconciliation
MCP with rate limits
Orchard
$499/mo
Autonomous orgs and mid-market with agents in the loop.
Up to 10 entities, $50M / yr volume
Greenhouse FROST t-of-n
x402 agent payments
Lineage proofs to a human root
Hardware-key signing
99.9% SLA
Estate
Talk
Regulated, multi-jurisdiction, books your auditor would die on.
Unlimited entities and volume
Dedicated single-tenant deployment
Direct ISO 20022 / Swift
Custom signer roster
Annual external audit support
On-site onboarding
Tend the books. Mind the till. Own the keys.
Three chores. One operating system. Both kinds of operator.