Authority
Every action is checked server-side against company policy, the employee's authority and the budget on record.
How it works
Durable by default
Work runs in a separate durable worker with leases, cancellation and recovery. Restarting the app does not lose the queue, and an interrupted run is retried exactly once rather than resumed mid-flight.
Rules the software enforces
Approvals
An approval is bound to a SHA-256 of the proposed action. If the details change, the approval no longer applies.
Evidence
A task is complete only with a stored deliverable, passing checks and an independent review.
Stop
An emergency stop halts new work immediately. The owner can also take over an employee's computer.
Principles
What we refuse to do
No invented customers, invoices or metrics. No silent external actions. No “done” without an artifact and a review. Provider charges appear only when a provider reports them.
Talk to the owner