Identify the actor
Require a signed-in identity. Customer service records stay scoped to their requester and Numina’s operator.
A boundary for each action.
Limit authority
Use explicit internal record permissions and revocable delegation. Credentials do not grant control over unrelated external systems.
Require evidence
Attach a review attestation, resolve conflicting evidence, and evaluate the allowed next action before a record is committed.
Preserve the record
Keep revision history, delivery activity and payment evidence available for review. A recorded decision does not itself execute an external transaction.