Private credit is the asset class that institutional tokenisation has chosen as its proving ground. The reasons are practical. Loans are bilateral, documentation is bespoke, secondary markets are thin, and the operational lift required to transfer a participation interest is high. A permissioned token that represents a fractional interest in a senior secured loan, a unitranche facility or a direct-lending fund unit promises to compress settlement from weeks to minutes, to standardise transfer documentation, and to open the asset class to a broader investor base under existing private-placement exemptions.
By March 2026, more than nine institutional platforms in the United States, the European Union, Switzerland and Singapore are running production tokenised-credit programmes. Notional outstanding is approaching one trillion dollars when sponsor-led private-fund tokens, direct-lending unit tokens and tokenised collateralised-loan-obligation tranches are aggregated. The settlement story is intact. The valuation story is not.
Under Accounting Standards Codification 820 and International Financial Reporting Standard 13, fair value is the price that would be received to sell an asset in an orderly transaction between market participants at the measurement date. The standards define a three-level hierarchy based on the observability of the inputs to that measurement. Level 1 uses quoted prices in active markets for identical assets. Level 2 uses observable inputs other than Level 1 prices. Level 3 uses unobservable inputs that reflect the reporting entity's own assumptions about the assumptions market participants would use.
A token that trades on a permissioned secondary venue at low volume does not, by virtue of having a price, move the underlying private credit from Level 3 to Level 1 or Level 2. The fair-value categorisation is a function of the observability and depth of the inputs, not the existence of a price feed. A thin token market that prints a price every few hours can produce a number that looks like a quote and is not. Auditors and regulators are now flagging this misclassification as the single largest emerging risk in tokenised-credit accounting.
For United States registered funds, Rule 2a-5 under the Investment Company Act of 1940 makes the fund's board the designated fair-value determiner. The board may assign performance of the function to a valuation designee, typically the adviser, but the board retains oversight and reporting obligations. The rule sets out specific requirements for periodic assessments of valuation risks, fair-value methodologies, testing and the use of pricing services. None of these obligations can be transferred to a smart contract or to a tokenisation network. The board, the valuation designee and the chief compliance officer are jointly accountable.
The SEC Marketing Rule, Rule 206(4)-1 of the Investment Advisers Act of 1940, has direct application to how tokenised private-credit performance is presented to investors. The rule restricts hypothetical performance, requires net-of-fees figures alongside gross, mandates that extracted performance be accompanied by performance of the total portfolio or a clear explanation, and prohibits cherry-picking. Several early tokenised-credit programmes have displayed on-chain yield figures that, when surfaced through investor portals, meet the regulatory definition of an advertisement and trigger the full set of Marketing Rule controls. The control plane must capture every on-chain figure that is rendered to a prospective or current investor and reconcile it to a compliant advertisement file.
European managers face Annex IV reporting under the Alternative Investment Fund Managers Directive. The Annex requires quarterly or annual disclosure to national competent authorities of exposures, leverage, liquidity profile, risk concentrations and stress-test results at the fund level. The reporting is aggregated across positions and is the manager's obligation. A tokenisation rail can supply position data, but cannot perform the aggregation, the risk classification or the qualitative disclosures the Annex requires. The European Securities and Markets Authority has signalled that tokenised wrappers will not change the scope or cadence of Annex IV submissions.
The pricing layer itself is a model. When a smart contract calls an oracle to fetch a reference rate, a forward curve, a credit-spread index or a benchmark loan price, and uses those inputs to compute a token mark, the routine satisfies the regulatory definition of a model under Federal Reserve SR 11-7 and Office of the Superintendent of Financial Institutions Guideline E-23. The institution that relies on the mark for accounting, regulatory capital, collateral valuation or investor reporting owes the full model-risk-management lifecycle, including independent validation, ongoing monitoring, performance testing, and documented governance of changes to the pricer or to its data inputs. The fact that the model lives on a ledger does not exempt it.
Liquidity disclosures present a parallel exposure. Private credit is, by definition, illiquid. A tokenised wrapper that prints a transfer every few minutes can give the appearance of liquidity that the underlying does not possess. Under the SEC's liquidity risk management programme rule, Rule 22e-4, registered open-end funds must classify investments by liquidity category and limit illiquid investments to fifteen percent of net assets. A tokenised credit position is not made liquid by being tokenised. The classification must reflect the liquidity of the underlying loan, taking into account the depth of the secondary token market under stress, not under steady state.
Side letters and most-favoured-nation provisions, the historical fault lines of private-fund governance, do not disappear in tokenised wrappers. They migrate into the off-chain documentation that governs the token. The control plane must capture each side letter, map its terms to the token holders to whom it applies, and ensure that economic events on the chain are reconciled to the entitlements off the chain. Limited Partner Advisory Committee minutes, investment-policy-statement conformance and conflict-of-interest disclosures all continue to attach to the manager.
The board-level question is whether the manager has stood up a continuous, effectiveness-graded control plane that addresses fair value, marketing-rule compliance, model-risk governance of the pricer, AIFMD or equivalent reporting, liquidity classification and side-letter conformance, in a single evidence file that a supervisor can read. Where that plane does not exist, the prudent posture is to restrict tokenisation to institutional limited-partner investors under negotiated documentation, with explicit acknowledgement that the token price is not a fair value and that the underlying remains Level 3 for accounting purposes.
Cabier Consulting's 2026 brief, Governance Above the Rail, places tokenised private credit at the top of the under-governed asset list for a reason. The settlement gain is genuine. The valuation, marketing and reporting governance is not yet built to match.
Section. The board questions before going live.
Before the first tokenised private credit transaction settles in production, the institution's audit and risk committees should resolve a defined list of questions, on the record, with named accountability. The first question is whether the legal opinion supporting the use of the tokenisation rail covers every jurisdiction in which the institution will issue, hold, transfer or distribute the instrument, and whether the opinion is current as of the most recent supervisory communication in each jurisdiction. The second question is whether the institution has identified the named senior manager responsible for the programme under the relevant individual-accountability regime, including the United Kingdom Senior Managers and Certification Regime, the Australian Financial Accountability Regime, the Hong Kong Manager-in-Charge regime, the Singapore Senior Managers regime, and any equivalent in the home jurisdiction.
The third question is whether the model inventory has been updated to include every smart contract, oracle and pricing routine that influences a regulated outcome, and whether each new entry has been subject to independent validation under standards equivalent to Federal Reserve SR 11-7 and the Office of the Superintendent of Financial Institutions Guideline E-23. The fourth question is whether the institution has documented, in advance, the supervisory communications it will make in the event of a tokenisation rail outage, a smart-contract incident or an oracle failure, and whether those communications have been pre-cleared with the relevant regulators where pre-clearance is appropriate. The fifth question is whether the institution's professional-indemnity, directors-and-officers and cyber-insurance policies have been updated to reflect the new exposures, and whether the underwriters have been provided with the institutional control documentation.
Section. An operating model for the institution-owned control layer.
A credible above-the-rail control layer for tokenised private credit sits inside the second line of defence, reports through the chief risk officer, and is staffed by a small named team with explicit charters for valuation governance, model risk, regulatory reporting, conflict and incentive surveillance, operational resilience and cross-jurisdictional consistency. The team does not run the rail. It operates a continuous evidence file that consumes events from the rail, reconciles them to the institution's systems of record, and grades the effectiveness of each control on a daily cycle. The grading is not pass or fail. It is a defined scale of effective, degraded and failed, with a stated remediation latency for each grade, and with explicit escalation thresholds to the chief risk officer and the audit committee.
The control layer's outputs are designed to be regulator-readable without bespoke transformation. A single source of truth produces the figures that feed every supervisory return, every internal capital-adequacy assessment, every Pillar 3 disclosure and every public sustainability or operational-resilience statement. The auditor and the supervisor see the same chain of evidence. The institution does not produce one number for the regulator and a different number for the board. The discipline of a single source of truth is the precondition for any defensible cross-jurisdictional posture, and it is the principal operational benefit of building the control layer above the rail rather than inside it.
Section. A twelve-month plan to stand up the layer.
In month one, the institution maps every regulatory obligation that attaches to the tokenised private credit programme across every jurisdiction in scope, and produces a matrix that ties each obligation to a named owner, a control description, an evidence source, an effectiveness-grade definition, and a remediation latency. In months two and three, the institution stands up the evidence vault, ingests live data from the tokenisation rail, the legacy systems of record and the third-party data providers, and reconciles the three on a daily cycle. In months four through six, the institution writes the effectiveness-grade definitions for each control, validates them against historical data, and stress-tests them against scenarios developed in conjunction with internal audit.
In months seven through nine, the institution runs the control layer in parallel with the existing periodic control regime, identifies the divergences, documents the root causes and remediates. In months ten through twelve, the institution retires the periodic regime for the controls now operated continuously, formalises the operating model with the audit committee and the regulator of record, and produces the first regulator-readable evidence file. The plan is paced so that no production volume is committed to the rail in advance of the corresponding control evidence being in place. The discipline is uncomfortable in the early months and unmistakably valuable when the first supervisory examination arrives.
Section. What a regulator-ready evidence file looks like.
The regulator-ready evidence file for the tokenised private credit programme is not a folder of point-in-time reports. It is a continuously assembled, cryptographically anchored record that, on any day a supervisor walks into the institution, can answer five questions without rework. Which obligations attach to this programme in this jurisdiction. Which control discharges each obligation. What grade did each control hold on each day. Where the grade was below effective, what the remediation latency was and whether it was met. Which named individuals were accountable for the obligation, the control and the remediation. A file that cannot answer these five questions on the supervisor's first request will be treated as a control weakness in its own right, irrespective of the substantive quality of the underlying programme.
The Cabier institutional brief, Governance Above the Rail 2026, is the reference architecture this plan implements for the tokenised private credit use case. The brief is written for boards and senior risk committees and is available in full at the Cabier Consulting site. LUMINAIRE will continue to publish under this cluster as the under-governed asset classes evolve and as supervisory expectations are clarified through 2026 and beyond.