Show HN: Open-source compliance-as-code for crypto projects

Hey Everyone! Avi and I (in the current YC S25 Batch) noticed how fragmented crypto compliance is with rules changing constantly, vary by region, and force developers and legal teams into a scramble.

So we hacked together a prototype framework that generates a “guardrail” smart contract which:

- Hooks into your KYC provider - Enforces rules defined a simple compliance.yaml file - Automatically blocks users you can't legally serve

When regulations shift (new blocked country, updated KYC threshold, etc.), just update your YAML and redeploy with no smart contract rewrites. Audit prep also becomes a breeze. Our goal is to make staying compliant as easy as possible

How it works:

1. Declare once in compliance.yaml modules: token_sale:

start_date: "2025-02-01" end_date: "2025-03-01" max_cap_usd: 500000 kyc_threshold_usd: 1000

geographic_restrictions: blocklist: ["US", "CN", "IR"]

2. Compile with one command shor compile --blockchain ethereum --with-oracle

This generates:

- Guardrail.sol – Smart contract that reverts non-compliant transactions - policy.pdf – Lawyer-readable compliance documentation - audit.json – Manifest with rules, timestamp, and bytecode hash

3. Deploy & forget - Drop Guardrail.sol into your existing deployment flow - Smart contract enforces rules automatically on-chain - Run shor export-audit --format=zip for auditors

Why now?

- Regulations are getting tighter and full, active compliance is becoming more necessary

Try it in either SDK or CLI: https://github.com/ShorPay/shor-compliance

We'd love your feedback on:

- Would this be useful for your projects? - How are you handling compliance today? - Which jurisdictions or rules give you the most trouble - Missing jurisdictions (we only have US/EU/SG) - KYC providers you need (we support Sumsub) - Smart contract patterns we should add

Email: founders@shorpay.com

Contributing: https://github.com/ShorPay/shor-compliance/blob/main/CONTRIB...