Commodity murabaha turns a financing need into a sequence of real sales: the bank buys a commodity, sells it to the customer at cost plus a disclosed profit for deferred payment, and the customer sells it on for immediate cash. The structure is only sound if each of those sales genuinely happened, in that order. Most platforms assert it. A deterministic, sequenced engine can demonstrate it.
Organised tawarruq is enormous, operationally slick, and under sustained criticism from the scholars whose approval it depends on. The criticism is not that the contracts are wrong on paper; it is that the substance beneath them is thin.
The same warehoused parcel is bought and sold many times a day, sometimes with no serious attempt to identify which parcel a given transaction touched. If the underlying is not genuinely identified, the sale is a form of words and the objection that the whole structure is a synthetic loan is difficult to answer.
The validity of the structure depends on the bank owning the commodity before it sells it, and the customer owning it before they sell it on. In practice the legs are booked in a batch, timestamped by whichever system got there first, and the ordering is reconstructed from documents produced after the fact.
The commodity leg is executed at a price supplied by the broker who is arranging both sides of it. Nobody competes to be the buyer, and the price does not need to be right, because the economics of the transaction are entirely in the profit rate. That is precisely what makes the sale look ceremonial.
A Shariah audit reviews contracts, confirmations and a broker’s statement. It can establish that documents exist and are consistent. It cannot establish what actually happened at 10:42:07, in what order, on which parcel.
An auction market does two things for this structure, and it is worth being precise about which. It makes the commodity leg a real transaction with independent counterparties and a discovered price. And it makes the sequence a matter of record rather than of assertion.
When the commodity leg clears in an auction against independent bidders, the price is discovered rather than supplied, and the transaction has the economic character of a sale. It answers the substance objection at the only point where a trading system can answer it.
Every accepted command is assigned its place in one gap-free sequence and written to an append-only journal before it executes. Leg two carries a strictly higher sequence number than leg one, on the same clock, in the same record. That is a stronger statement than two timestamps from two systems, and it cannot be produced retrospectively.
The instrument definition is the parcel class, and every execution report and trade-capture record names the instrument, the quantity, the parties and the trade identifier. What was sold is part of the trade record rather than part of a covering document.
Reproducing a day is running the journal again and getting the same trades, in the same order, at the same prices — including volume that was never displayed. An auditor can be given the evidence rather than a description of it.
Sessions opened, instruments configured, limits changed: every market-affecting operator action travels the same validated, sequenced, journaled path as an order, under maker–checker approval. The audit trail of running the market is as rigorous as the audit trail of trading in it.
Determinism and the journal, which everywhere else on this site are the trust layer, are here the product itself.
| Setting | Typical starting point |
|---|---|
| Instrument | One per commodity parcel class the platform deals in |
| Sessions | Continuous through the banking day, or scheduled calls aligned to booking cut-offs |
| Order types | Limit and Iceberg; Auction orders where the venue clears by call |
| Sequencing | One gap-free command sequence across the whole venue |
| Netting | Configurable cycles — or gross, where parcel identity must survive settlement |
| Approval | Maker–checker on instruments, sessions, limits and participants |
| Evidence | Append-only journal; exact replay of any period on request |
One gap-free sequence, deterministic matching, and scheduled or continuous sessions per instrument. The same ordered input produces identical trades on any server and on any replay.
Read more →05 · post-tradeEach trade stamped with clearing type and matching type, with configurable netting cycles — including cycles short enough, or gross enough, to keep individual parcels traceable through settlement.
Read more →02 · channelFour-eyes approval and role-based access on every market-affecting action, with a record of who requested it and who approved it, in the same journal as the trading.
Read more →04 · coreLimits per participating bank at clearing-member, firm and client level, evaluated before an order reaches the book.
Read more →Be clear about what this does not solve. A trading engine can make the commodity leg genuine and the sequence provable. It cannot make a product Shariah-compliant, and it has no view on whether organised tawarruq should be used at all.
A board, a fatwa, product documentation, and an ongoing review function. Some scholars and standard-setters object to organised tawarruq in principle, regardless of how well it is executed — a better audit trail does not change that position, and you should know where your board stands before you build anything.
Warehouse warrants, the arrangements with the metal or commodity supplier, and evidence that ownership genuinely passed at each leg. The engine records that a trade occurred between two accounts; whether legal title followed is a matter of the contracts and the warehousing behind it.
The sale from bank to customer and the customer’s onward sale are contracts in the bank’s core system, not orders in a book. Threading the venue’s sequence and trade identifiers through those bookings — so the whole chain reads as one ordered record — is integration work you own.
An auction with two affiliated participants is a formality with extra steps. The credibility of this whole approach rests on a membership of genuinely independent buyers with a reason to compete, and recruiting it is the hard commercial problem.
You are running a trading venue and supporting a regulated financing product, and those are usually two different supervisors with two different rulebooks. Establish early which one considers the venue theirs.
Payment rails, custody of the commodity, the murabaha documentation itself and the accounting treatment. Mehrex nets the obligation and hands you an enriched trade record; everything downstream of that is the bank’s.
No. Compliance is determined by scholars against the contracts, the underlying and the intent, and some object to organised tawarruq in principle. What a genuine auction and a sequenced journal do is answer two specific criticisms — that the sale is not a real transaction, and that the order of the legs cannot be evidenced. The rest of the question is outside a trading system.
Every accepted command is assigned a position in a single gap-free sequence and written to an append-only journal before it executes. Two trades therefore carry strictly ordered sequence numbers from the same source, and replaying the journal reproduces the same order and the same results exactly. It is an ordering guarantee, not two clocks that need reconciling.
It depends on how you configure clearing. Netting cycles are configurable, and a venue that needs parcel identity to survive settlement can run short cycles or settle gross. Enriched trade-capture records carry the instrument, the trade identifier, the parties and the matching type in every case.
An app that sells sub-gram quantities of gold to retail buyers, run as a real order book instead of a dealer’s quote.
Read the page →Energy & environmentalEnergy-saving certificates, RECs, guarantees of origin and carbon credits — instruments defined by paper, priced today by survey.
Read the page →Commodities & industrialsSilver, zinc and copper in physical lots — brokered by telephone today, at differentials nobody publishes.
Read the page →A live demonstration runs about an hour: the order book, the Control Panel, an auction uncrossing, and a replay of the journal that produced it.