The core, under your hands.
You watch value cross. You hold the fee. You answer for every move. This is the console itself, running on one morning’s record: every surface a projection of the same event log, read as of any moment you choose.
One record. Every surface a reading of it.
step the clock · switch stations · follow a referenceThe book as it stands.
as of 09:48:17A $2,400.00 transfer from collection. Reserved 09:42, settled 09:48, fee collected.
Lineage · 7 events
- transfer.requested09:42:01.220
Created against an accepted quote (tolerance: exact).
- appfee.assessed09:42:01.224
Your application fee assessed up front, on the quote.
- debit_envelope.reserved09:42:01.241
Value held on the source: committed, not yet gone.
- transfer.submitted09:42:02.010
Submitted to the provider rail.
- transfer.awaiting_finality09:42:02.122
Waiting on the provider's finality signal.
- transfer.settled09:48:17.604
Final on the rail; the reserve is released.
- appfee.collected09:48:17.611
Fee collected into the fee collection account.
One morning, 61 events · every figure computed from the log · step back and the console reconstructs that moment
* illustrative — a sample workspace, not live transactions.
The duties you stand.
The discipline is in what it will not do.
No silent edit
Nothing changes off the record. Every change is an event, attributed and timed.
No unattributed move
No action is anonymous. A role change, a revoke, a suspension: each is answered for by the person who made it.
No hard delete
A member is suspended, not erased; a key is revoked, not vanished. History is never rewritten to make a problem disappear.
No second transfer
An idempotency key makes a retry safe. The ledger refuses to double a movement, however many times the call arrives.
Every surface is a record.
Every action is answered for.