Skip to content

The record

AI-assisted. Every run reviewable.

In development · TBD 2027

AI-assisted analysis. Every operator commit is recorded. Rates, floor checks and close notes are drafted by the platform and reviewed by a named person before they count.

craton.ledger · append-only · hash chain

Append-only
Nothing is edited

The ledger takes writes and never takes them back. A correction is a new row that references the one it corrects. The history of a number is the number.

craton.ledger · append-only · no update path

Hash chain
Order is provable

Each row carries the hash of the one before it, so a removed or reordered row is detectable rather than arguable.

ledger.verify · chain checked on every read of the binder

Every run
Kept as a receipt

An AI-assisted run writes what went in, which tools it called, and what came out. The receipt is a first-class object, not a log line someone might have kept.

run.receipt · inputs · tools · outputs · reviewer

Review
A named person

No output reaches a rate, an invoice or the binder without a named reviewer against it. There is no automatic acceptance path to disable, because there is none to begin with.

accept · blocked until reviewer_id is set

A run, in full

RUN 2026-09-15 · 12:10:40
INPUT Q3 indirect pool · posted rows to date
TOOLS rate_calc · ceiling_check
OUTPUT provisional fringe rate · exceptions listed
REVIEWED BY finance@ · 2026-09-15 14:02
LEDGER seq 21,977 · chain ok
What we do not say
We do not name models, hosts or internal tooling on a public page, and we do not describe the analysis as autonomous.
The claim is the record, and the record is the thing you can check.

The mark is the argument

Three arcs. Three jobs.

CRATON's monogram is three stacked strata, and each one is a thing this page describes. It was drawn that way before the product was built, and the product is being built to it.

01Authority — the policy that says what countsbone
02Events — the ledger, as it happensbronze
03Record — the binder, settledslate

assets/brand/craton · the monogram signs the product, the shield signs the company

Today, as it happens

14:02:11labor.postDana Ortiz · wk 8–12 Sep
13:48:02charge_code.activateGA-IT-FY26 → 6300
13:31:55timesheet.approveSam Whitfield → Lee Moreno · Thu 11
12:10:40rates.snapshotQ3 provisional · rows to date
11:07:19unallowable.scan2 merchants · FAR 31.205-14
09:00:00timesheets.nudge3 people · 1 day
craton.ledger · todayseq 21,983

One tick per row written. Bronze is live, sage is settled, and neither is load-bearing: the word is.

Questions we get asked

The short answers.

Which model does CRATON use?
Not something we publish. What we publish is that every run keeps its inputs, the tools it called and its outputs, and that a named person reviews the result before it counts.
Can the AI post an hour or accept a rate on its own?
No. Every write that affects money or the binder requires a named reviewer. The absence of an automatic path is the design, not a setting.
What happens if the hash chain fails verification?
The binder refuses to render the affected area and reports the break with the sequence range. It does not render a clean binder over a broken chain.
Is the ledger the system of record for accounting?
It is the system of record for what happened and when. Interoperation with a general ledger of record is in the API contract for engineering.

Request a walkthrough

Make your next audit the dullest hour of the year.

Forty minutes with the team building it. Bring your last SF 1408 or your first.

leadership@hypati.us

CRATON is in development; availability planned for 2027 (TBD). Walkthroughs by request.