Liquidity buffers without silent drawdowns
Buffers protect settlement only if draws require the same discipline as outbound client payments.
Many operators define a buffer and then treat it as a soft target. Operations borrows overnight, intends to restore in the morning, and never records the draw as a control event. Under stress, the buffer is already gone when it is needed.
Write draw rules the way you write payment rules: who may initiate, who must approve, what evidence remains, and how fast restoration is expected. Monitor actual balances against policy floors with alerts that someone acknowledges—not dashboards nobody opens.
Separate client and operating buffers in language and in accounts. Mixing them makes partner assurance conversations harder than any spreadsheet can repair.
Test the control on a day when liquidity is tight, not when balances look comfortable. Design effectiveness and operating effectiveness diverge exactly there.