v1.1 (DRAFT) — CEO causality correction.
v1.0 described the CRM as the trigger surface for deal progression. That was wrong. The correct model: handshakes drive deals, engine drives money, CRM observes. v1.0 superseded same day. See the change log for the full correction record.
Level 2 — Who Owns What
Eight tools. Eight cards. Each tells you what one tool does, what it does NOT do, and its job in the bigger picture. Note the health indicators — the chain (red) and the CRM (red) reflect EA debt logged in v1.1.
Handshake Chain
The cause of everything
🟢 Green
Owns: Cryptographic proof of every action. 14 event types incl. 5 deal handshakes H1–H4.
Does NOT own: Business consequences (engine), interpretations (accounting/BI)
Its job: Receive signed events from real devices → sign + link + anchor → emit to engine
Health note: H1 and H2 are both proven end-to-end on production with the first real prev_event_hash chain link recorded 2026-06-28: H1 receipt 6HW3635 (event_id 59), H2 link receipt 7QVDSCM (event_id 61, prev=H1 hash, status ACKNOWLEDGED). Three negative tests (forged ACK, bad prev_event_hash, idempotent replay) all rejected with audit trail. EA-Debt-01 fully REMEDIATED at H1+H2 scope. Sprint EA-3 will add H3a/H3b (partner intake/settlement) and EA-4 adds H4 (referee outcome) + iOS Secure Enclave attestation.
Device-signed event capture: H1 (Sprint EA-1) + H2 + chain-link enforcement + chain walker (Sprint EA-2)
Legal (Pine Lawyers)
The rule source
🟢 Green
Owns: Signed legal agreements. Commission entitlements (the *right* to be paid).
Does NOT own: The actual money. The deal lifecycle.
Its job: On agreement signing, automatically create the commission_rules row the engine will use
Commission Engine
Calculator AND lifecycle driver
🟡 Amber
Owns: Money (the ledger). Deal lifecycle state. All math.
Does NOT own: Real-world facts (chain has those), rules (Legal has those)
Its job: Consume chain event → advance lifecycle → do math → write ledger → emit receipt
Health note: Math + ledger + idempotency are solid. Lifecycle-advance-from-chain is currently driven from the CRM stand-in path, not from the chain directly.
Not user-visible — invoked by the chain on signed handshake events
CRM
The salesperson’s window — OBSERVER ONLY
🟡 Amber
Owns: Contact state, marketing funnel, tasks, saved views, UI overlays
Does NOT own: Deal lifecycle (engine+chain own that). Commission (engine owns that).
Its job: Render current state for the right team member. Provide filters, drill-downs, kanban visualisations of where deals currently sit — not kanban drag-drop.
Health note: Parallel rails as of Sprint EA-2.5: chain writes source=CHAIN deals; CRM 8 writers still write source=MANUAL deals. EA-Debt-02 IN_REMEDIATION.
/crm/* (49 routes)
Member Portal
The partner’s window — OBSERVER ONLY
🟢 Green
Owns: Dispute initiation (POST /api/disputes writes to disputes table)
Does NOT own: Any deal state, any other partner’s data, any commission math
Its job: Show one partner one truth — earned, owed, disputable
Accounting
Carla’s tool — READER
🟢 Green
Owns: Journal entries, double-entry posting, P&L, Balance Sheet
Does NOT own: The ledger — it reads, never writes money
Its job: Read every ledger entry → turn into balanced DR/CR → produce P&L + BS
BI / Budget vs Actuals
Variance dashboard — READER
🟢 Green
Owns: Variance calculations, RAG thresholds, budget snapshots
Does NOT own: Budgets (Steer Co sets), actuals (ledger has)
Its job: Compare actuals vs budgets → flag Red/Amber/Green
KPI Cascade
Strategic view — READER
🟢 Green
Owns: Links from leaf operational KPIs up to strategic ones
Does NOT own: KPI values themselves (BI provides those)
Its job: Roll leaf attainments via weighted edges → 6 strategic KPIs ($248M exit, etc.)
Audience: Steer Co (Matt, Carla, Corrina) + future hires + auditors. Source of truth:
docs/ENTERPRISE_ARCHITECTURE.md (version controlled). EA function: Claude under delegated authority from CEO Matt.