Glossary.

The platform's vocabulary — the same words used in the product, the audit events and the contracts.

Decision Record

A structured record for a supported decision workflow. It can include outcome, score, rationale, inputs, versions, correlation and timeline events where recorded; absent fields remain Not recorded or Not applicable.

Evidence pack

A bounded export of the evidence available for an authorized scope. A manifest or hashes verify included artifacts where implemented, not completeness of all underlying events.

Audit event

A recorded who / what / when / why event, optionally with correlation data. Producer and field coverage vary; it is not assumed to be append-only or emitted by every module.

Correlation ID

The identifier that ties one business event across services, decisions, logs and evidence.

Maker-checker (four-eyes)

A separation-of-duties pattern in which a configured sensitive action requires a second authorized person; availability and covered actions must be verified.

Step-up

An escalation short of blocking: 3DS challenge, re-verification, manual review or temporary hold.

Tenant

One customer organization on the platform, isolated end to end: data, exports, logs, evidence and branding.

Entitlement

A tenant's subscription or access gate for a module. Core and add-on modules are sellable; platform-ring modules are registered always_on but remain role- and configuration-gated.

Module ring

The registry's grouping: Core (GATE, PULSE, SWITCH, LEDGER, SENTINEL, PRISM), Add-ons (STUDIO, TRAVEL, AURA, MoR), Platform (DOCKET, VAULT, HELM, FORGE).

Policy pack

A versioned bundle of rules and thresholds; vertical packs are ready-made starting points per industry.

As-of read

Querying what a policy said at a past moment — the basis for keeping historic decisions explainable.

Disposition

The recorded human judgment on a hit or alert: true match or false positive, with rationale.

EDD

Enhanced due diligence: deeper verification triggered by risk — geography, media, volume or product.

KYB / KYC

Know Your Business / Know Your Customer — verification of companies (with UBOs and directors) and persons.

UBO

Ultimate beneficial owner — the natural person(s) ultimately owning or controlling a customer.

SAR / STR

Suspicious activity / transaction report drafted from case data, approved separately, filed with authorities.

Representment

The evidence-based challenge to a chargeback, assembled from the platform's own records.

Hosted flow

The white-label verification journey served by TrustStack under the tenant's brand.

Mock mode

A non-production data mode that should be visibly labelled and blocked from live use; banner and fail-closed behavior must be verified per environment.

WORM

Write once, read many storage. It is a conditional evidence-control option, not a property of every VAULT record or deployment.

Legal hold

A configured freeze on deletion for specified data. Scope, override behavior and audit-event coverage must be verified.

Hash chain

Each ledger entry incorporates the previous entry's hash, so any tampering breaks verification.

Grant

A designed scoped, time-boxed permission for an authorized external reviewer; exact evidence visibility, expiry and access logging depend on configuration.

Correlation of duties

Separation of duties plus available event records. Which actions separate maker and checker, and which actors are recorded, must be verified.

Scorecard

An on-demand KPI comparison against an agreed baseline. The reviewed PRISM surface is generate-now; cadence and pilot decisions remain human-governed.