02 / Controlled

How a company stays
in control of itself.

Control has two halves. Inside the company: who may open what. Outside it: whether a supplier can take the company’s tools or records away. Both are built into everything we do, and both are sealed on a blockchain, so they are tamper-proof.

Inside the company

Four rules for who
may open what.

They apply to people, programs and AI helpers alike.

Rule 1

One owner for every item.

Every document, mailbox, payment record and AI helper belongs to one named person or team, and only the owner can hand it on. There is no shared drive, and no administrator login that opens everything.

Rule 2

If in doubt, the answer is no.

Before anything opens, the system checks that the person or program is allowed. The record of who is allowed lives on a blockchain, not on a settings page somebody can flip. If the system cannot prove it, it refuses and says why.

Rule 3

Only approved programs run.

Every program is checked and signed off before it can be installed. A company chooses which sources of programs it trusts, and can stop trusting one without touching the others. A program that has been withdrawn cannot be installed again.

Rule 4

Every decision leaves a trail.

Each approval records who decided, under which rule, and on what evidence. The trail is sealed on a blockchain, so it is tamper-proof: nobody can edit it afterwards. The rules themselves are dated and signed, and important decisions can need two people.

Try it

One company, seen by
five different viewers.

Eight things belong to this company. Choose one of five viewers — a client, an employee, an approver, two AI helpers — and see how much they can open.

Try itFive points of view · one company

One thing at a time.

Something nobody handed you cannot be found, asked for, or opened.

A client sees the conversation and the invoice that belong to them. The other six are not part of this client’s world at all.

Client’s view2 of 8 open
Client conversationRead & reply
InvoiceRead
Approval requestNot yours
Company mailboxNot yours
Money reportNot yours
Support reportNot yours
PayrollNot yours
AI helperNot yours

Choose a closed door to see why it is not there.

Three kinds of yes

Being known is not
being allowed.

A yes for one thing must never quietly become a yes for another.

Who you are, and what you may do.

Proving who you are is one step. Being allowed to open an account, move money or sign for the company is a separate step, decided by whoever is responsible for it.

What works, and what is allowed.

Software being able to do something does not make it allowed. Each kind of money work runs under the official approval that kind of work needs.

One person’s yes, and two.

Asking for something, approving it and carrying it out are separate jobs. For the decisions that matter, the rules can call for two people.

Outside the company

No supplier can
take it away.

A company that depends on a supplier’s goodwill is not in control of itself.

Run it yourself.

The same software runs on a machine the company owns. Moving from our machines to yours is a choice, not a project.

Get the code.

A company that runs the software gets its full source code, so what it does can be checked rather than believed.

Decentralised control.

Approvals are spread across independent parties and recorded on a blockchain, so no single party holds control. The software itself is moving to owners who cannot sell it or switch it off.

See who owns it
Questions

Questions people ask.

What happens when the system refuses by mistake?

The refusal says what is missing. Put the record right, and it opens. A wrong refusal costs minutes. A wrong yes cannot be undone.

Do AI helpers follow the same rules?

Yes. A helper starts with nothing, it is handed one item at a time, and a second helper never sees what the first was given. The company chooses whether the helper runs on its own machines or uses an outside AI service; if outside, what it is handed goes to that service.