Boards approve budgets. Managers and accounting firms pay the bills and keep the books. When a CPA asks how fund segregation is ensured, or a lender asks what controls exist on disbursements, the answer is either a record or an assurance.
No decision records
Board turnover erases institutional memory. Who approved what payment, when, under what policy? Gone.
No control evidence
Internal controls exist as informal habits, not documented procedures. They break silently when people change.
No third-party proof
CPAs, lenders, and insurers want evidence of controls — not assurances.
Every financial transaction passes through a chain of guards before it posts to the ledger. Each guard checks one specific invariant. Guards are stateless, independent, and composable. No exceptions.
Accounting Integrity
Balance Guard
Every journal entry must balance. Debits equal credits, always.
Subledger Guard
Control accounts reconcile against subledger totals (AR, AP, Loans).
Invariant Guard
The accounting equation holds: Assets = Liabilities + Equity.
Reversal Guard
Reversal entries must exactly mirror the original transaction.
Period & Policy Controls
Closed Period Guard
No posting to closed or locked accounting periods.
Fund Segregation Guard
Operating and reserve funds stay separated. No commingling.
Fund Consistency Guard
A fund's cash does not settle another fund's entry. Cash moves between funds as an approved transfer.
Trust Segregation Guard
Trust accounts are isolated from operating funds.
Spending Controls
Bill Payment Guard
The payment spends a live approval bound to the bill's amount, vendor, and fund — and, on the Stripe rail, the payout destination approved with them.
Vendor Risk Guard
For a vendor linked to a Washington or Oregon licensing record, reads debarment, license status, license expiry, insurance expiry, and active contractor strikes before the payment posts. An unlinked vendor passes, and the decision records that it could not be evaluated.
Disbursement Compliance Guard
State disbursement rules read against the bill's live approval: board approval thresholds, two distinct approvers, reserve restrictions.
Connect Balance Guard
A vendor payout the payment provider's balance cannot fund is refused before it is sent. So is any single vendor payment, or any 24 hours of them in total, above the association's transfer limit, which is its buffer target ($5,000 where none is set).
Fund Policy Guard
The board's own fund policies, read against the bill being paid: which expense accounts may draw from the fund, and the board vote or approver seat a payment at or over the policy's amount requires.
Fund Eligibility Guard
Evaluates eligibility rules before fund operations proceed.
L5 Exclusion Guard
Refuses posting for an entity under an active L5 bind-block exclusion.
Debt Discipline
Loan Covenant Guard
Debt covenants evaluated on every relevant transaction (DSCR, reserve ratio, delinquency).
Payment Split Guard
Loan payments split correctly between principal, interest, and fees.
Interest Calculation Guard
Accrual math verified against loan terms. No drift, no rounding errors.
The guards judge an entry before it posts. These controls decide who may act and where money may go. Each is enforced on the server and recorded.
Authority
The admin holds authority
Only the association's admin changes, demotes, or removes a member who holds authority. Staff cannot. Every grant and removal is emailed to the board.
A fresh code before authority or money moves
An authenticator code from the last ten minutes is required to give or remove authority, approve a bill, write an override, change a fund policy, change who may approve and pay, and pay a vendor. A text-message code never confirms a money action.
Money abilities start off
Paying vendors, vendor bank details, the transfer limit, top-ups, and the payout bank are granted per admin, by someone who holds them, with a fresh code and an email to the board. An ability that is off is refused on the server.
Money Out
One pinned payout bank
A vendor's bank can never be the association's payout bank. Automatic payouts pause when the processor's default bank is not the pinned bank, and a person releases them.
A bank PIN that belongs to the association
It is separate from any login and checked on the server. Changing it takes the current PIN and a fresh code. Five wrong tries lock it, and staff cannot set it.
Two board members change the payout bank
One asks and a different one confirms, with the PIN and a fresh code. The board is emailed, and the first payout to the new bank is held until a person releases it.
A changed vendor bank waits three business days
A different board member can end the wait after calling the vendor at a number already on file, with a fresh code and the PIN.
The board is told
Every vendor payment sent by transfer and every top-up is emailed to the whole board. A bounced payout reverses its entry and reopens the bill.
Every enforcement decision creates an immutable record. The decision captures what was evaluated, what signals were present, and what the outcome was. These records cannot be edited or deleted.
decision_id a7b3c912-4f8e-...
transaction_type pay_bill
outcome ALLOWED
balance_guard PASS — debits = credits
closed_period PASS — period open
fund_segregation PASS — same fund
bill_payment PASS — approval bound to amount, vendor, fund
vendor_risk PASS — compliant
evaluated_at 2026-03-13T14:22:07Z
immutable true
Every decision is preserved with its full signal snapshot — the exact data the guards evaluated at the moment of decision. Any decision can be independently verified after the fact.
Enforcement decisions accumulate into a Fiduciary Shield Report, generated on request for any period — an institutional artifact that proves controls operated effectively throughout it.
1
Every Transaction Evaluated
Every entry is judged by the guards that apply to it, and eight apply to every entry. The decision is logged with a full signal snapshot. No transaction bypasses the chain.
2
Report Generated on Request
Guard performance, block analysis, override audit, integrity scan status — all assembled into a content-hashed institutional packet.
3
Proof Delivered
Share with CPAs, lenders, and insurers. The report is cryptographically verified — any modification is detectable.
Firms, Managers, and Boards
A record of each association's rules and what was done under them: approval tiers, separation-of-duties settings, and every payment decision. When an auditor or a homeowner asks what happened, the answer is the decision record, not anyone's memory.
CPAs & Auditors
Control effectiveness measured, not assumed. Guard pass/fail rates by category. Override audit with justification text. Integrity scan status. The data you need for audit opinions — already computed.
Lenders & Insurers
Real-time governance signals, not annual surveys. Block rate indicates active controls. Override rate indicates discipline. Fiduciary Shield Reports are generated for any period as content-hashed institutional packets.
Homeowners
Transparency without noise. Your board's financial controls are documented and verifiable. Every dollar that moves through the association is evaluated by the same 18 guards, with no exceptions.
