One decision, end to end
Example records from a finance inbox. Select a row to see what arrived, what the agent knew, the check that applied and who approved it.
Append-only
Entries are only ever added. The database refuses to let the application edit or delete what the assistant or an agent did. When a person overrides a decision, the override is a new entry.
Tamper-evident history
Significant changes to shared memory are chained with cryptographic hashes. A deleted or back-dated entry shows up when the chain is checked.
Refusals are kept too
When the assistant can’t back an answer, it says so. The refusal and its reason go on the record with the same weight as anything it did.
Read within permissions
Opening the record follows your document permissions. You see what an agent read only if you can open that document yourself.
Shared memory, every fact scoped and sourced
Each fact is scoped to the organisation, a department, a role or a single source, and keeps the document it came from. When two facts disagree, a person settles it.
“Logging who approved what is employee monitoring.”
The record exists so the team can answer for the work. It isn’t there to rate people. Approvers can be pseudonymised in the record, and for Germany and France we bring a works-council pack.
Evidence for an internal review
Internal audit, risk and your data protection officer read the same record your team works from. One decision can be followed from the email that started it to the person who approved it.
How the record is protected →See one decision traced from what arrived to who approved it.

