The reviewed machine registry defines fourteen domains across three rings, all currently marked ui. Tenantentitlement, integration maturity and production availability are confirmed separately; registry presence is not GA.
Discover the path among the stars
Six journeys through one sky.
Every chapter of the night crosses the same fourteen modules differently. Choose a chapter to draw its route — star by star, from the first signal to the artifact.
Inject
The ORION constellation · live contract traffic03:17:08
chronology
Decision Record · live
press “◉ Follow”
◆ You are the checker · DOCKET gate
Held and step-up work waits for your distinct review. Self-approval does not exist here.
Queue empty — the night is under control.
0decisions
0step-ups
0held at gate
0manifests
0you released
0shift score
Synthetic stream counters — they measure the demo, not a deployment.
Event ticker
Hover a star to see which journeys pass through it. Choose a chapter to travel its route.
03:17 03:17 — The Continuity Room
03:17:08 — SWITCH captures the failing route and keeps the 320-attempt split visible.
03:17:20 — PULSE separates eligible traffic from step-up candidates, with recorded reasons.
03:21 — DOCKET opens CASE-DEMO-0317 and carries the maker–checker exchange.
03:24 — VAULT anchors DR-DEMO-0317 so the night stays reconstructable.
03:30 — PRISM keeps the split, holds and expiry visible for the morning review.
03:32 — FORGE carries the webhook trail linking provider signal to decision.
The route ends in the Continuity Drill Brief — chapter one of the dossier. Run this chapter →
09:00 One Merchant — Five Realities
09:00 — GATE fixes the Lumen Digital identity context before any lens opens.
09:05 — SENTINEL screens the requested change and records its disposition.
09:12 — PULSE re-reads the risk posture against the requested corridor.
09:18 — SWITCH shows which routes the change would actually be eligible for.
09:24 — LEDGER separates current settlement from the proposed beneficiary.
09:30 — DOCKET keeps one case while five functions apply five lenses.
09:40 — VAULT records the condition, owner and review point in DR-DEMO-MERCHANT-084.
The route ends in the Shared Merchant Decision Memo — one truth, five lenses. Run this chapter →
14:00 Proof Lab — Try to Break the Decision
14:00 — VAULT serves the sandbox copy: TEST-DEMO-0317, the original untouched.
14:05 — DOCKET replays who decided and who checked — ready to be broken.
14:10 — SENTINEL exposes the pinned policy version a challenger would remove.
14:20 — FORGE shows the scoped 48-hour grant that expires on demand.
The route ends in the Evidence Review Report — confidence stops where evidence stops. Run this chapter →
Day 3 Day 3 — The Freeze
H+2 — SWITCH scopes the hold: payouts pause, sales continue into escrow.
H+2 — STUDIO quarantines the flagged listing with an appeal path.
H+3 — SENTINEL re-runs prohibited-items@demo-4.1 across 1,240 listings.
H+8 — GATE refreshes KYB: the beneficiary is unchanged.
H+9 — PULSE re-scores the merchant with recorded reasons.
H+10 — DOCKET aggregates every action into CASE-DEMO-2031.
H+12 — LEDGER prices the exposure: €182,400 held (DEMO).
H+40 — VAULT maps all fourteen questions to recorded evidence.
H+60 — PRISM assembles the exposure and screening summary for the pack.
H+70 — FORGE notifies the merchant through the recorded channel.
H+71 — HELM proves who was entitled to act — and that no one else did.
The route ends in the RFI Response Pack — 14/14 evidenced inside 72 hours. Run this chapter →
Day 90 Build Your Control Map
Day 90 — GATE marks where identity context would enter the pilot journey.
PULSE marks the scoring hook — rules first, model optional.
SWITCH marks the routing read the evaluation would observe.
LEDGER marks the settlement and tax base the journey may touch.
SENTINEL marks the policy packs treated as a starting hypothesis.
PRISM marks the weekly measures against the agreed baseline.
DOCKET marks where exceptions become owned cases.
VAULT marks the evidence gate the day-90 verdict will read.
HELM marks the entitlements that bound the pilot scope.
FORGE marks the sandbox keys and webhooks the integration needs.
The route ends in the 90-Day Pilot Blueprint — scale, revise or stop. Run this chapter →
04:12 04:12 — The Second Night
04:12:07 — SENTINEL matches the signal to the allegation class (designed run).
04:12:08 — PULSE scores 0.94 with reason codes — designed; the registry model is a stub.
04:12:09 — STUDIO quarantines the listing, appeal path attached.
04:12:11 — SWITCH applies the scoped payout hold automatically.
04:12:38 — GATE re-verifies the beneficiary: no change.
04:13:02 — DOCKET assembles DCK-DEMO-2044 with the full correlation.
04:13:04 — VAULT packages EVP-DEMO-2044 before any human wakes.
04:13:05 — FORGE holds the notification templates behind the human gate.
04:15 — PRISM drafts the morning report for the 09:00 review.
04:12–07:00 — HELM keeps the one gate closed: only the MLRO releases.
The route ends in the Night Log — the machine ran, the human decided. Run this chapter →
TrustStack Core — Registered core domains with ui/read surfaces. Scope one or more only after capability and integration validation.
GATE · Verify
Make identity context visible before scope changes.
Observed UI/read surface · registry status: ui · not GA
Use GATE to frame who or which party is under review, what was actually recorded and which condition remains open. It does not by itself establish a complete KYC/KYB program, UBO workflow or generally available onboarding service.
Current surface: hosted KYC and party reads; review is feature-flagged; UBO capture is absent in the reviewed state.
Observed hosted KYC and party UI/read surfaces
Review path present behind a feature flag, not assumed for every tenant
UBO capture is absent in the reviewed state and remains a validation requirement
Designed to pass recorded identity context into screening, policy and case workflows
Step-up, re-verification and document-evidence behavior require journey-level configuration
Turn recorded signals into an inspectable decision.
Observed UI/read surface · registry status: ui · not GA
PULSE is intended to connect available risk signals to a decision that can be challenged. In the reviewed state, the honest proposition is an exploratory UI with partial rationale—not complete real-time scoring, universal explanation or proven fraud outcomes.
Current surface: Decision Explorer with partial rationale; the ML indicator is a stub, not an active-model claim.
Observed Decision Explorer and partial rationale UI/read surfaces
Rules-first decision pattern; any model use is optional and separately validated
The current ML indicator is a stub and must not be presented as an active model
Designed actions include approve, step-up, review and hold when configured
Missing input, threshold or version context stays explicit instead of being inferred
Observed UI/read surface · registry status: ui · not GA
SWITCH makes the proposed route, held traffic and available path context inspectable. A scoped exercise can test the control pattern, but live PSP connectivity, routing performance, resilience and service levels must be proven separately.
Current surface: partial routing-configuration and payment path-trail reads; no live provider or automatic failover is inferred.
Observed UI/read surface · registry status: ui · not GA
LEDGER can provide a strong finance anchor when the source, posting state and reconciliation context are available. Tax output remains an input-sensitive calculation: jurisdiction, rate source, basis date and intended report must be validated rather than assumed.
Current surface: books are the strongest observed area; tax rates are static and must be shown with their rate-basis date.
Observed books and finance-oriented UI/read surfaces
Static tax rates in the reviewed state; always expose the applicable rate-basis date
Designed to retain tax inputs, basis and output as a dated decision snapshot
Reconciliation, wallet and export behavior remains workflow- and integration-dependent
No claim of automatic filing, universal tax correctness or immutable books
Observed UI/read surface · registry status: ui · not GA
SENTINEL is intended to answer which policy and disposition informed an action. The reviewed surface can demonstrate that control pattern, but not current sanctions-list completeness, universal maker-checker, automated enforcement or regulatory compliance.
Current surface: screening and policy reads use a DEMO screening list; list coverage and live feeds are not established.
Observed screening and policy UI/read surfaces
Current screening source is a DEMO list and must be labeled as such
Designed policy context includes geography, product, age and payment-method conditions
Versioning, approval and rollback depend on the configured governance workflow
Runtime rule delivery and external screening feeds require integration and validation
Turn available operating data into a bounded view.
Observed UI/read surface · registry status: ui · not GA
PRISM can help a pilot ask whether the same recorded facts produce a useful operating and evidence view. Reproducibility depends on complete source data, definitions, versions and export logic; the current UI does not prove scheduled production reporting.
Current surface: dashboards and generate-now scorecards; scheduled reporting, contractual service-level monitoring and authority-accepted output are not established.
Observed dashboard UI/read surfaces for available operational data
Scorecards are generated on demand in the reviewed state, not scheduled automatically
Designed comparisons require an agreed baseline, definitions and reporting period
Questionnaires and extracts remain purpose-, role- and source-data-dependent
No public contractual service-level monitoring, authority-accepted report or customer KPI outcome is claimed
MoR is a partial ui/read surface in the reviewed snapshot; any delivery depends on jurisdiction, licensing, legal review and contract. Registry status →
Platform ring — always on — Shared case, evidence, administration and developer fabric in the target architecture. Access and behavior remain role-, entitlement- and deployment-dependent.
The target contracts connect GATE identity context with SENTINEL screening, let PULSE use governed rule packs and raise matters in DOCKET, and route available audit events toward VAULT and reporting data toward PRISM. Exact producers, fields and enforcement are validated per workflow; missing evidence is not inferred.