Mode
Internal controls

Ledger Transaction Safety Center

Commit-time Ledger guards, idempotency, double-entry posting balance, projection integrity, and operator balance-adjustment boundaries.

LedgerOperator IntegrityReconciliationOperations
Ledger history00 postings
Integrity issues00 guard issue groups
Idempotency00 missing keys

Safety State

Control statusready
Projection rows0 / 0
Operator adjustments0 / 0

Database Guards

Commit-time PostgreSQL guards reject malformed Ledger history before it can become authoritative.

No records yetRecords will appear here after the first live or test activity.

Control Evidence

The Ledger only changes through guarded commits; operator changes remain separate until maker-checker approval.

No records yetRecords will appear here after the first live or test activity.

Movement Families

Aggregated double-entry families show posting counts, totals, currencies, and latest committed movement.

No records yetRecords will appear here after the first live or test activity.

Guarded Movement Families

Money movement domains are expected to post through known Ledger movement families and guarded service flows.

No records yetRecords will appear here after the first live or test activity.

Idempotency Groups

Ledger movement idempotency is unique per environment and movement type, blocking duplicate money history.

No records yetRecords will appear here after the first live or test activity.

Movement Boundaries

Recent movements expose reference, actor, posting presence, and policy evidence attached to the money mutation.

No records yetRecords will appear here after the first live or test activity.

Projection Safety

Balance Projections must match Ledger postings and account-family available-balance math.

No records yetRecords will appear here after the first live or test activity.

Balance Adjustment Boundaries

Internal operators can request balance corrections, but the Ledger movement only exists after separate approval.

No records yetRecords will appear here after the first live or test activity.

Orphan Postings

This table should stay empty because Ledger postings must reference an existing movement and account.

No records yetRecords will appear here after the first live or test activity.