Modules

Fourteen modules. Three rings. One registry.

The reviewed machine registry defines fourteen domains across three rings, all currently marked ui. Tenant entitlement, integration maturity and production availability are confirmed separately; registry presence is not GA.

Discover the path among the stars

Six journeys through one sky.

Every chapter of the night crosses the same fourteen modules differently. Choose a chapter to draw its route — star by star, from the first signal to the artifact.

Inject
The ORION constellation · live contract traffic 03:17:08

Decision Record · live

press “◉ Follow”

◆ You are the checker · DOCKET gate

Held and step-up work waits for your distinct review. Self-approval does not exist here.

    Queue empty — the night is under control.

    Event ticker

      Hover a star to see which journeys pass through it. Choose a chapter to travel its route.

      03:17 03:17 — The Continuity Room
      1. 03:17:08 — SWITCH captures the failing route and keeps the 320-attempt split visible.
      2. 03:17:09 — SENTINEL applies payment-continuity@demo-3.2: 48 attempts lack required context.
      3. 03:17:20 — PULSE separates eligible traffic from step-up candidates, with recorded reasons.
      4. 03:21 — DOCKET opens CASE-DEMO-0317 and carries the maker–checker exchange.
      5. 03:24 — VAULT anchors DR-DEMO-0317 so the night stays reconstructable.
      6. 03:30 — PRISM keeps the split, holds and expiry visible for the morning review.
      7. 03:32 — FORGE carries the webhook trail linking provider signal to decision.
      8. The route ends in the Continuity Drill Brief — chapter one of the dossier. Run this chapter →
      09:00 One Merchant — Five Realities
      1. 09:00 — GATE fixes the Lumen Digital identity context before any lens opens.
      2. 09:05 — SENTINEL screens the requested change and records its disposition.
      3. 09:12 — PULSE re-reads the risk posture against the requested corridor.
      4. 09:18 — SWITCH shows which routes the change would actually be eligible for.
      5. 09:24 — LEDGER separates current settlement from the proposed beneficiary.
      6. 09:30 — DOCKET keeps one case while five functions apply five lenses.
      7. 09:40 — VAULT records the condition, owner and review point in DR-DEMO-MERCHANT-084.
      8. The route ends in the Shared Merchant Decision Memo — one truth, five lenses. Run this chapter →
      14:00 Proof Lab — Try to Break the Decision
      1. 14:00 — VAULT serves the sandbox copy: TEST-DEMO-0317, the original untouched.
      2. 14:05 — DOCKET replays who decided and who checked — ready to be broken.
      3. 14:10 — SENTINEL exposes the pinned policy version a challenger would remove.
      4. 14:20 — FORGE shows the scoped 48-hour grant that expires on demand.
      5. The route ends in the Evidence Review Report — confidence stops where evidence stops. Run this chapter →
      Day 3 Day 3 — The Freeze
      1. H+2 — SWITCH scopes the hold: payouts pause, sales continue into escrow.
      2. H+2 — STUDIO quarantines the flagged listing with an appeal path.
      3. H+3 — SENTINEL re-runs prohibited-items@demo-4.1 across 1,240 listings.
      4. H+8 — GATE refreshes KYB: the beneficiary is unchanged.
      5. H+9 — PULSE re-scores the merchant with recorded reasons.
      6. H+10 — DOCKET aggregates every action into CASE-DEMO-2031.
      7. H+12 — LEDGER prices the exposure: €182,400 held (DEMO).
      8. H+40 — VAULT maps all fourteen questions to recorded evidence.
      9. H+60 — PRISM assembles the exposure and screening summary for the pack.
      10. H+70 — FORGE notifies the merchant through the recorded channel.
      11. H+71 — HELM proves who was entitled to act — and that no one else did.
      12. The route ends in the RFI Response Pack — 14/14 evidenced inside 72 hours. Run this chapter →
      Day 90 Build Your Control Map
      1. Day 90 — GATE marks where identity context would enter the pilot journey.
      2. PULSE marks the scoring hook — rules first, model optional.
      3. SWITCH marks the routing read the evaluation would observe.
      4. LEDGER marks the settlement and tax base the journey may touch.
      5. SENTINEL marks the policy packs treated as a starting hypothesis.
      6. PRISM marks the weekly measures against the agreed baseline.
      7. DOCKET marks where exceptions become owned cases.
      8. VAULT marks the evidence gate the day-90 verdict will read.
      9. HELM marks the entitlements that bound the pilot scope.
      10. FORGE marks the sandbox keys and webhooks the integration needs.
      11. The route ends in the 90-Day Pilot Blueprint — scale, revise or stop. Run this chapter →
      04:12 04:12 — The Second Night
      1. 04:12:07 — SENTINEL matches the signal to the allegation class (designed run).
      2. 04:12:08 — PULSE scores 0.94 with reason codes — designed; the registry model is a stub.
      3. 04:12:09 — STUDIO quarantines the listing, appeal path attached.
      4. 04:12:11 — SWITCH applies the scoped payout hold automatically.
      5. 04:12:38 — GATE re-verifies the beneficiary: no change.
      6. 04:13:02 — DOCKET assembles DCK-DEMO-2044 with the full correlation.
      7. 04:13:04 — VAULT packages EVP-DEMO-2044 before any human wakes.
      8. 04:13:05 — FORGE holds the notification templates behind the human gate.
      9. 04:15 — PRISM drafts the morning report for the 09:00 review.
      10. 04:12–07:00 — HELM keeps the one gate closed: only the MLRO releases.
      11. The route ends in the Night Log — the machine ran, the human decided. Run this chapter →
      TrustStack Core — Registered core domains with ui/read surfaces. Scope one or more only after capability and integration validation.
      GATE · Verify
      Make identity context visible before scope changes.
      Observed UI/read surface · registry status: ui · not GA

      Use GATE to frame who or which party is under review, what was actually recorded and which condition remains open. It does not by itself establish a complete KYC/KYB program, UBO workflow or generally available onboarding service.

      Current surface: hosted KYC and party reads; review is feature-flagged; UBO capture is absent in the reviewed state.

      • Observed hosted KYC and party UI/read surfaces
      • Review path present behind a feature flag, not assumed for every tenant
      • UBO capture is absent in the reviewed state and remains a validation requirement
      • Designed to pass recorded identity context into screening, policy and case workflows
      • Step-up, re-verification and document-evidence behavior require journey-level configuration
      Read in the manual
      PULSE · Risk
      Turn recorded signals into an inspectable decision.
      Observed UI/read surface · registry status: ui · not GA

      PULSE is intended to connect available risk signals to a decision that can be challenged. In the reviewed state, the honest proposition is an exploratory UI with partial rationale—not complete real-time scoring, universal explanation or proven fraud outcomes.

      Current surface: Decision Explorer with partial rationale; the ML indicator is a stub, not an active-model claim.

      • Observed Decision Explorer and partial rationale UI/read surfaces
      • Rules-first decision pattern; any model use is optional and separately validated
      • The current ML indicator is a stub and must not be presented as an active model
      • Designed actions include approve, step-up, review and hold when configured
      • Missing input, threshold or version context stays explicit instead of being inferred
      Read in the manual
      SWITCH · Payments
      Make payment-path choices and limits visible.
      Observed UI/read surface · registry status: ui · not GA

      SWITCH makes the proposed route, held traffic and available path context inspectable. A scoped exercise can test the control pattern, but live PSP connectivity, routing performance, resilience and service levels must be proven separately.

      Current surface: partial routing-configuration and payment path-trail reads; no live provider or automatic failover is inferred.

      • Observed partial routing-configuration UI/read surfaces
      • Observed payment path-trail reads for available fixture data
      • Designed routing factors include provider state, eligibility, geography, cost and risk context
      • Payout, retry and fallback behavior depends on connected providers and validated policy
      • No production traffic, provider redundancy or automatic failover is established by the UI
      Read in the manual
      LEDGER · Tax & Finance
      Put books and tax assumptions on the record.
      Observed UI/read surface · registry status: ui · not GA

      LEDGER can provide a strong finance anchor when the source, posting state and reconciliation context are available. Tax output remains an input-sensitive calculation: jurisdiction, rate source, basis date and intended report must be validated rather than assumed.

      Current surface: books are the strongest observed area; tax rates are static and must be shown with their rate-basis date.

      • Observed books and finance-oriented UI/read surfaces
      • Static tax rates in the reviewed state; always expose the applicable rate-basis date
      • Designed to retain tax inputs, basis and output as a dated decision snapshot
      • Reconciliation, wallet and export behavior remains workflow- and integration-dependent
      • No claim of automatic filing, universal tax correctness or immutable books
      Read in the manual
      SENTINEL · Policy
      Show which policy context governed the decision.
      Observed UI/read surface · registry status: ui · not GA

      SENTINEL is intended to answer which policy and disposition informed an action. The reviewed surface can demonstrate that control pattern, but not current sanctions-list completeness, universal maker-checker, automated enforcement or regulatory compliance.

      Current surface: screening and policy reads use a DEMO screening list; list coverage and live feeds are not established.

      • Observed screening and policy UI/read surfaces
      • Current screening source is a DEMO list and must be labeled as such
      • Designed policy context includes geography, product, age and payment-method conditions
      • Versioning, approval and rollback depend on the configured governance workflow
      • Runtime rule delivery and external screening feeds require integration and validation
      Read in the manual
      PRISM · Insights
      Turn available operating data into a bounded view.
      Observed UI/read surface · registry status: ui · not GA

      PRISM can help a pilot ask whether the same recorded facts produce a useful operating and evidence view. Reproducibility depends on complete source data, definitions, versions and export logic; the current UI does not prove scheduled production reporting.

      Current surface: dashboards and generate-now scorecards; scheduled reporting, contractual service-level monitoring and authority-accepted output are not established.

      • Observed dashboard UI/read surfaces for available operational data
      • Scorecards are generated on demand in the reviewed state, not scheduled automatically
      • Designed comparisons require an agreed baseline, definitions and reporting period
      • Questionnaires and extracts remain purpose-, role- and source-data-dependent
      • No public contractual service-level monitoring, authority-accepted report or customer KPI outcome is claimed
      Read in the manual
      Optional add-ons — Entitlement-gated extensions for specific obligations — enabled where feasible and licensed.

      MoR is a partial ui/read surface in the reviewed snapshot; any delivery depends on jurisdiction, licensing, legal review and contract. Registry status →

      Platform ring — always on — Shared case, evidence, administration and developer fabric in the target architecture. Access and behavior remain role-, entitlement- and deployment-dependent.

      Modules compose by contract

      The target contracts connect GATE identity context with SENTINEL screening, let PULSE use governed rule packs and raise matters in DOCKET, and route available audit events toward VAULT and reporting data toward PRISM. Exact producers, fields and enforcement are validated per workflow; missing evidence is not inferred.