Authority ladder
Identity alone is never enough. Role, scope, capability, consequence and step-up requirements must agree before change is accepted.
INTERACTION→CORE CONSEQUENCE→EVIDENCE
Governance & Trust11
The rules bind the operator too.
Authority, settlement, correction, evidence and recovery are structural parts of CORE—not footer promises.
SCROLL TO MOVE THE CONSEQUENCE ↓
11Authority ladder
Correction, not deletion
History is corrected by linked events. A refund, return or reversal changes the outcome without pretending the original event never existed.
INTERACTION→CORE CONSEQUENCE→EVIDENCE
The auditor gets the evidence line—not every private detail.
Follow one authorised result from the first signal to durable evidence.
- 01Signal
Requests one transaction evidence line.
- 02OPS context
Shows only entitled operational context.
- 03Human authority
The auditor requests one defined evidence line and proves entitlement before any transaction detail is disclosed.
- 04Bounded handoff
CORE returns only ordered events, decisions and versions within scope; unrelated private or operational context remains hidden.
- 05CORE record
Returns events, decisions and versions in order.
- 06Shared consequence
Outcome is explainable without full private access.
- 07Durable evidence
The export itself records requester, legal or contractual basis, scope, source versions, issue time and checksum.
System boundaryOPS keeps the operational context. NUMA may assist inside that context. Only the approved, scoped and attributable result crosses into CORE.
Settlement waterfall
Money follows a versioned waterfall: seller, service, logistics, tax, commission and reserve receive the position agreed for that transaction.
INTERACTION→CORE CONSEQUENCE→EVIDENCE
Evidence room
Entitled parties can reconstruct event, actor, decision, version and receipt without receiving unrelated operational or personal context.
INTERACTION→CORE CONSEQUENCE→EVIDENCE
Relevant viewpointsOne world.
One world.
Several authorised truths.
Open a scenario to see the operational action and ledger event.
Completes a sale in OPS Point of Sale.
Stock, payment and fulfilment move together.
SALE.CONFIRMED
Returns an earlier purchase.
Stock, tax and refund stay explainable.
RETURN.ACCEPTED
Changes a temporary store price.
Old and new sales retain their own truth.
PRICE.VERSIONED
Publishes an assortment to selected channels.
One assortment can sell without losing brand identity.
ASSORTMENT.PUBLISHED
Sells a CORE product in an owned webshop.
Stock and settlement recognise the channel sale.
CHANNEL.SALE