Durante OS / The Ledger
Every move leaves a receipt.
The ledger is the operator's conscience. Each side-effect — sent, signed, scheduled, paid — is bracketed by a pre-flight and a post-flight hash, phase-tagged, and committed to an append-only chain you can read in plain English.
SMTP send · sarah.cho@acme.io
Outbound email delivered. Pre-flight clean (SPF/DKIM/DMARC). Attachment hash verified. No retries.
Chain · Run 0241
- 0108:14OBS · signal locked
- 0208:21THINK · hypothesis 0.78
- 0308:34PLAN · 4 steps
- 0408:41BUILD · 3 artifacts
- 0508:43EXEC · 3 ok · 0 fail ◀
- 06—VER · pending reply
- 07—LEARN · pending
What the ledger promises.
Not a log file. A contract. Three properties hold for every receipt — and they're checked, not asserted.
Append-only
Receipts are SHA-chained. Any edit breaks the chain — and the next Verify catches it within 90 seconds. Past is past.
Side-effect bracketed
Every external action has a pre-flight and a post-flight. If the post never lands, the run flips to escalated — no silent failures.
Plain-English readable
The chain renders as a story, not JSON. Your CFO reads the same artifact your engineer does — and it's the same artifact your auditor reads, too.
Bring one situation. We trace it through the algorithm.
Office hours: 30 minutes, live. Output is a named pack scoped to your shape of work, plus a first-run set of receipts you can keep. No deck, no pitch.