You can treat off-chain tx as “low-trust” and only make them “real” once: * they are included in a batch * batch is signed by governance threshold * batch root is anchored on-chain
That’s the exact design pattern used in many “rollup-like” systems, but you’re using it for **mutual credit receipts** rather than financial trading.