About Swiss Bank Vault
What this is
Swiss Bank Vault is a cash-funded INR account with internal transfers, built solo from September 2026 to April 2027 — the whole of that period's work rather than a component of it.
It is built in the open, one milestone at a time: the public site first, then onboarding, then the ledger, then the approval app, then the risk engine and the control room. Each milestone stands on its own and can be shown working before the next one starts. This site is the first of them.
Who wrote it
Sumit Dabas, working alone. The design, the copy on these pages, the code and the tests are all his. Where the project depends on something it could not honestly build — a real identity-verification service, real sanctions data — the dependency is simulated behind an interface and named as simulated, on the site and in the report.
What it is modelled on
The functional reference is the digital-banking structure retail banks generally use: a public site, a signed-in banking surface, and a separate authentication application that handles sign-in approval and payment confirmation. That three-part shape is what a serious bank looks like from the outside, and reproducing it is what makes the security questions real rather than academic.
The reference stops at the structure. The name, the mark, the colour, the typography, every screen and every line of code are original to this project. Nothing is copied, and no bank's assets are used.
What it is for
The subject of the project is the security architecture around money movement, not money movement itself. A deposit and a withdrawal are simple on purpose. What surrounds them is not: identity verification before an account exists, a signing key held in the hardware of a second device, approval that is a signature rather than a retyped code, risk scored against each customer's own behavioural history and explained in words, a double-entry ledger that is hash-chained so that tampering can be found, and an audit record of every decision including the permissive ones.
Each of those is meant to be demonstrated rather than claimed. Once the ledger is built, it will be tampered with in front of an examiner and the verifier will name the broken entry; neither the ledger nor the verifier exists today, so that is a demonstration this year has still to earn rather than one that can be run on this site now. That standard — show it, do not assert it — is what the year is being spent on.