Support · Recovery
Money-moving actions and their guardrails
Everything that moves money passes the same guardrails: clamped amounts, intent-scoped keys, circuit breakers, immutable logging, conservative-by-default gating.
The asymmetry rule
A reversal cannot be reversed — so gating errs conservative, automation stays optional, and humans own judgement calls permanently.
Failure surfacing
Failed actions become first-class queue states with errors attached; silent failures are structurally impossible.