Instant when reachable
If either side can reach the chain path, the experience converges toward direct settlement and familiar instant-payment behavior.
A hybrid blockchain payment platform that keeps value moving when mobile networks disappear, then synchronizes promises back to Solana when connectivity returns.
2 modes
online settlement and offline promises
Solana
final audit and settlement layer
Local-first
device-to-device exchange path
Why it exists
AirPay combines wallet custody, local transport, cryptographic signatures, backend observability, and smart-contract settlement so merchants and users can keep operating through rural dead zones, large events, emergency outages, and unstable mobile networks.
If either side can reach the chain path, the experience converges toward direct settlement and familiar instant-payment behavior.
When both sides are offline, the sender issues a signed promise with policy limits, local risk scoring, and later reconciliation.
The source code, mobile wallet, FastAPI service, shared protocol, and Anchor program are published as one inspectable monorepo.
Modes
The protocol chooses the safest available route at transaction time. Connectivity unlocks direct submission; disconnection falls back to bounded promises with a tamper-evident journal.
Online route
Offline promise
Wallet signs a Solana transfer or OffAir promise.
Policy and capacity limits gate the transaction before handoff.
NFC bootstraps the peer session and BLE carries the encrypted payload.
Receipts, journals, and promise state sync when a device returns online.
System map
The backend provides operational services, but it is not the source of truth for settlement. Final integrity lives in signatures, journals, and on-chain records.
Mnemonic custody, Solana intent signing, NFC bootstrap, BLE transfer, local journals, readiness checks, and trust prompts.
React Native / Expo
Canonical hashes, policy gates, risk snapshots, wallet identity material, and offline transfer envelopes.
TypeScript package
Device registration, policy fetch, budget provisioning, pending transaction sync, logs, risk, and reconciliation metadata.
FastAPI
Anchor program accounts for wallet profiles, promise claims, reserves, metadata, settlement batches, and penalties.
Solana / Anchor
Risk model
AirPay does not pretend an isolated promise is already final money. It constrains exposure before exchange and makes later reconciliation verifiable.
Maximum amount, transfer count, allowance capacity, and device state are checked before an offline promise leaves the wallet.
Wallet, device, and post-quantum signature bundles bind each promise to canonical payloads and peer receipts.
Local histories use chained hashes so reconciliation can detect gaps, replacement, replay, and inconsistent settlement.
The beta track expands risk scoring, anti-fraud rules, and smart-contract driven limit reductions for repeated default behavior.
Build phases
The current repository targets MVP validation while leaving room for stronger reputation, mesh networking, SDKs, and marketplace integrations.
MVP
Beta
Scale
The public project includes the website, mobile wallet, backend, shared protocol package, Solana contracts, demo docs, and Kubernetes manifests.