The desk with every key

Expect · Capital raised, distributed, investors and escrow, plus “your desk”: every queue with work, in the order money flows.

Expect · Tasks, issuer requests and business exceptions as three tabs. Exceptions carry exposure, last-known-good state and a recovery route. There are no raw database edits.

Expect · The builder opens pre-filled from the submission record.

Expect · The lifecycle chip walks draft → structuring as terms work lands.

Expect · When every document is published and policies approved, lifecycle reaches documentation → approved with a frozen readiness hash.

Expect · You re-enter your password for a short-lived proof. Deploy prepares and activates the asset ledger; the offering schedules and opens exactly as the frozen evidence promised.

If anything material changed after freezing, deploy refuses with “readiness changed” — re-freeze, re-approve.

Expect · A three-way comparison per holder across the internal book, legal register and asset ledger, with evidence hashes.

Expect · Pause halts new subscriptions; the public status projects honestly.

Expect · Close computes allocations, mints units on the ledger, settles the register, sweeps fees, and creates a governed escrow release request for a second approver. Principal stays held until then.

Expect · Draft → published valuation versions; NAV is only ever a projection of the published record.

Expect · Terminal, with a reason: live subscriptions cancel and funded money refunds through the standard payment machinery.

Expect · The request records reason and legal basis, and waits for a different approver.

Expect · Approval runs the ledger freeze. If the ledger command fails, the restriction shows FAILED with an open exception rather than pretending the position is frozen.

Expect · The proposal freezes the reconciliation deltas; a different admin approves; execution writes a compensating adjustment transaction and immediately re-runs the three-way reconciliation.

There is no route that edits units directly.

Expect · A replacement digital account is created; ledger recovery moves every position old-wallet → new-wallet; the old account is preserved and then closed, not deleted.

Expect · Grants and escalations ride a step-up (access.role_escalation) and land in the audit log.

Expect · Every model application with its lifecycle, the named human act it can never perform, and an immutable evaluation trail. Transitions and evaluations demand written rationale.

Expect · Append-only, hash-chained actions with actor, object, before/after states and correlation IDs.