D-ONE / Workspace

Settings & Permissions

Ctrl + K

OrganizationDurandisse International Transport

Session-only perspective. Each organization has its own isolated operating environment; controlled cross-organization sharing is not enabled.

Illustrative data · no persistent tenant changes

RoleExecutive / CEO

Role switching is session-only. Organization roles remain inside the selected organization. Platform Administrator is distinct and never receives carrier records implicitly.

Role context

OrganizationDurandisse International Transport

BoundaryOrganization-scoped

Network health and outcome review with policy-bounded approvals.

Session-only role context

Thu, May 21, 2025
1:17 PM (EST)4 12 Settings / Appearance

Jordan Davis

Operations lead

Role-aware operation · session context

Executive / CEO · Durandisse International Transport

Full navigation remains available. Role controls dashboard composition, sensitive fields, exception scope, and action authority inside the selected organization.

PermittedApproval requiredDenied with reasonRead-only

Workspace reference

Governance / organization + platform administration

Configure the carrier organization in context, then review the separate Durandisse One platform controls that govern capability, health, support, and tenant boundaries.

Talk through setup ↗Back to overview

ELOHM Command Signal

Decision ownership visible

ELOHM keeps role, approval, notification, and audit context explicit around consequential operating actions.

Review guardrails

Administration / two distinct contexts

Organization administration is not platform administration.

A carrier Administrator manages the selected organization. A Platform Administrator manages Durandisse One internal tenant, entitlement, health, support, security, audit, and AI governance surfaces only.

Session-only · no production authorization

Role	Visible / allowed	Boundary
Administrator	Users, roles, permissions, policies, DIAL, ELOHM scopes	Selected org only
Organization Owner	Review consequential org approvals	Configured policy
Platform Administrator	Customer orgs, plans, health, support, governance	Platform only
Platform Administrator + org context	Carrier records after explicit selection	No implicit entry

Assign organization permission

Requires permission-assignment · approval owner: Administrator action is audited

Open platform tenant controls

Requires platform-admin

Transparency: denied actions explain the required role / permission and, when relevant, the approval owner. Full navigation remains visible to every role.

Organization administration

Your carrier context is the operating boundary.

Organization Administration belongs to the trucking company: profile, users, roles, fleet, policies, integrations, DIAL settings, ELOHM permissions, notifications, and plan information. Values here are configuration, not fixed D-ONE behavior.

Organization users

Current organization only

Drivers / trucks

18 / 24

Current organization only

DIAL policy

Configured

Current organization only

Notification items

Current organization only

ELOHM scope

Role-bound

Current organization only

Tenant-scoped operating snapshot

The data changes with the organization.

Drivers · trucks · lanes · customers / brokers

Sample drivers

Marcus Reed · Priya Shah · Alicia Grant

Sample lanes

Newark → Atlanta · Columbus → Dallas

Customers / brokers

Oakline Foods · Pine Ridge Retail

Operating scale

11 lanes · 36 relationships

Carrier configuration

Organization profile + access

Editable reference

Company identity

Durandisse International Transport

Legal name, operating name, authority, terminals, and service regions belong to this organization.

Subscription / plan

Enterprise Operations

Plan context is visible to the organization; platform entitlements are managed separately below.

Notification preferences

Priority alerts · in-app center · owner assignment

Delivery preferences are organization configuration, not a second notification system.

Role	Permission scope	Boundary
Operations admin	Loads · Dispatch · DIAL approvals	Full organization scope
Dispatch lead	Freight Decisioning · Dispatch · Communications	Operational scope
Fleet manager	Drivers · Trucks · Maintenance · HOS	Fleet scope
Finance reviewer	Insights · Settlements · Broker history	Financial scope

Organization administration / identity + access

Production controls, honestly staged.

These controls extend the existing organization, role, permission, and tenant context. The showcase has no authentication, no identity provider, no credentials, and no persistent security state.

Designed / session-only

MFA

Designed

Production policy supports required for administrators, optional or required by role, and per-organization enforcement. Showcase state: no MFA challenge or enrollment is active.

SSO / SAML / OIDC

Designed

An organization associates verified domains, selects a provisioning source, and configures a provider connection. No provider is connected in the showcase.

Session management

Simulated

Production design includes lifetime, idle timeout, concurrent-session limits, device/location context, and single/all-session revocation. Showcase sessions are illustrative and session-only.

API credentials

Designed

Organization-scoped credentials have existence, scope, age, last-used, rotation, and revoked states. Key values are never displayed after creation; no value exists here.

Service accounts

Designed

Non-human actors receive their own scopes, named owner, and audit identity, distinct from human users. No service account can exceed the serving user context.

Provisioning lifecycle

Designed

Invite, assign role, change role, suspend, and deprovision are defined against canonical users and roles. Deprovisioning removes access at the next authorization check and ends active sessions in production design.

Policy design

MFA enforcement options

Administrators

Required in production

Role policy

Optional / required by role

Organization policy

Carrier-level override

Showcase state: MFA is not enrolled or enforced here. No challenge is performed.

Organization connection concept

SSO / SAML / OIDC

Domain association: Verified domain required
Provisioning source: IdP or D-ONE invite
Connection: Not connected

An administrator would configure metadata, claims, domain ownership, role mapping, and deprovisioning behavior. No provider details are collected in this showcase.

Session management

Devices and sessions are visible by design.

Revocation simulated

Session lifetime

8 hours

Production policy concept

Idle timeout

30 minutes

Illustrative default

Concurrent sessions

5 maximum

Policy to be enforced server-side

Illustrative organization session list
Device	Location	Last activity	State	Action
Chrome · macOS	Atlanta, GA · illustrative	Now · session context	Active
Safari · iPhone	Nashville, TN · illustrative	Today · 07:42	Active

No session is revoked in the showcase.

Organization-scoped credentials

API credentials + service accounts

D-ONE primary integration key

Existence: configured · Scope: loads.read, documents.read · Age: 42 days · Last used: never · Status: revoked

No value shown

ELOHM advisory service account

Owner: Platform Governance · Scope: permission-filtered reads · Audit identity: `service:elohm-advisory`

Designed

Design rule: key values are never displayed after creation. Rotate or revoke is an auditable workflow; this preview has no key value and no working rotation.

Canonical user + role lifecycle

Provisioning and deprovisioning

1Invite user

2Assign existing role

3Change role

4Suspend access

5Deprovision user

6Revoke all sessions

Production behavior: a deprovisioned user loses organization records, actions, credentials, and active sessions at the next authorization check. The showcase only presents this design; it does not provision anyone.

Organization isolation / canonical foundation

Every record carries its organization.

The existing `canonicalData.ts` organization-scoped accessors, organization IDs on canonical records, tenant-scoped session keys, and explicit role/context switcher define the intended boundary. Cross-tenant reads are prohibited, and a Platform Administrator must select explicit organization context before viewing carrier records.

01 · Record scope

Organization ID on canonical record

02 · Read guard

Cross-tenant reads denied by design

03 · Context

Explicit organization selection required

Existing action / permission matrix

Least privilege stays explicit.

Grant model

Role permissions are explicit grants inside the existing `roleData.ts` model.

Default

Deny by default; approvals remain separate from visibility.

Explanation

Denied actions preserve the existing “Why can’t I do this?” pattern.

No new permission system is introduced here. The role switcher remains session-only and continues to demonstrate the existing matrix.

Organization policy / retention

Set retention by data category.

Designed · not enforced

The organization Administrator configures these illustrative periods. Archive or deletion eligibility still checks operational close, legal hold, and compliance requirements; no records are archived or deleted in the showcase.

Organization retention policy controls
Data category	Illustrative period	Archival / deletion rule	Compliance hold
Operational records	Illustrative: 7 years after close	Archive eligible after operational close	Retain canonical lifecycle and ownership history required by policy
Documents	Illustrative: 7 years after close	Archive or delete by document class and legal hold	Retain proof-of-delivery and required evidence for the configured compliance period
Communications	Illustrative: 2 years	Configure channel and audience retention separately	Retain business communications when required by policy or hold
Audit events	Illustrative: 7 years	Append-only retention; deletion is not an operator action	Retain the event chain for governance and required review windows
Financial records	Illustrative: 7 years after close	Archive only after close and configured hold checks	Retain records required for financial and tax review

Configuration only: final periods are organization policy choices, not legal advice or a claim of compliance.

Platform administration / identity, governance + security

Oversight without implicit carrier access.

Platform governance reviews the architecture, tenant boundaries, audit design, retention policy, and AI guardrails. It does not inherit organization records until an explicit context is selected.

No production controls connected

Immutable events / existing audit concept extended

Security audit trail design.

Session-only showcase

Each event records actor (human or service account), organization, role, action, target canonical record, result, approval requirement, source, and timestamp. Production requires append-only, tamper-evident storage; immutability is not implemented here.

Allowed
Named approval and canonical target remain visible.

Denied
Cross-tenant and permission failures are retained as events.

Append-only target
Production storage still remains to be built.

ResultSourceSearch actor or target

Showing 9 of 9 events.

Filterable security audit events
Actor / role	Organization	Action	Canonical target	Result	Approval	Source	Timestamp
A. MorganHuman user · read-only	ABC	Cross-organization read attempt	load:DL-2051 · DIT	Denied	No approval path · explicit organization context required	UI	Today · 09:14
Priya ShahHuman user · finance-manager	DIT	Approved allocation proposal	money-pod:POD-DIT-03	Allowed	Finance threshold owner confirmed	UI	Today · 09:06
Marcus ReedHuman user · dispatcher	DIT	Workflow activation request	workflow:dit-load-ready	Pending	Executive approval required	UI	Today · 08:58
Jordan DavisHuman user · administrator	DIT	Exception assignment	exception:EX-1042	Allowed	Assigned owner role recorded	UI	Today · 08:51
Jordan DavisHuman user · administrator	DIT	API key rotation requested	credential:dit-primary	Pending	Production approval and secure issuance required	UI	Today · 08:47
Jordan DavisHuman user · administrator	DIT	Session revocation requested	session:illustrative-device-02	Allowed	Simulated action · no live session revoked	UI	Today · 08:46
ELOHMService account · service-account	DIT	Recommendation visibility	exception:EX-1042	Visible	Read permitted by serving user context; no action taken	ELOHM	Today · 08:45
D-ONE decision contextService account · service-account	DIT	DIAL recommendation recorded	load:DL-2051	Visible	Existing session-only audit entry preserved	automation	Aug 18 · 09:12
Sam OrtegaHuman user · finance-manager	DIT	Settlement approved / posted in showcase state	settlement:SET-2047	Allowed	Existing session-only audit entry preserved; no funds moved	UI	Aug 22 · 14:18

Data retention + governance

Retention is policy, not enforcement yet.

Organization administrators configure retention by data category. Archival/deletion eligibility is checked against close state, legal hold, and compliance requirements. This showcase does not enforce, archive, or delete anything.

Designed retention controls by data category
Category	Policy concept	Compliance retention
Operational records	Archive eligible after operational close	Retain canonical lifecycle and ownership history required by policy
Documents	Archive or delete by document class and legal hold	Retain proof-of-delivery and required evidence for the configured compliance period
Communications	Configure channel and audience retention separately	Retain business communications when required by policy or hold
Audit events	Append-only retention; deletion is not an operator action	Retain the event chain for governance and required review windows
Financial records	Archive only after close and configured hold checks	Retain records required for financial and tax review

Designed · not enforced in showcase

DIAL / organization configuration

Policy decides the recommendation.

ELOHM → DIAL → decision

DIAL evaluates each organization’s own policies and operating situation. DIT’s illustrative $3.50 per total mile and 500–600 miles/day range belong to DIT only. ABC Transport demonstrates a margin-based option; it never receives DIT’s settings.

Decision model

Total-mile economics

Minimum RPM

$3.50 / total mile

Minimum gross

$3,200

Required margin

28%

Max deadhead

75 mi

Operating range

500–600 mi / day

Trailer type

Dry van + reefer

Driver availability

Available within 2 hours of pickup

HOS constraints

Appointment fit + legal drive time

Home-time requirements

Respect 7-day home-time preference

Broker credit threshold

≥ 85

Days to pay

≤ 30 days

Fuel assumptions

$3.82 / gal · 7.2 MPG

Risk tolerance

Medium; critical risk blocks

Approval requirements

Human approval for rate below floor or medium+ risk

Negotiation thresholds

Counter below target; reject below minimum

Preferred lanes / markets

Southeast and Midwest reload markets

Restricted lanes

Dead markets under 45% reload

Decision states

ACCEPT · NEGOTIATE · REVIEW REQUIRED · REJECT

Recommendation ranking

#1 · #2 · #3 Recommended

Execution boundary

Freight Decisioning determines what should be booked. Dispatch executes what is booked.

Durandisse One platform administration

Platform owner controls

A separate administration context for customer organizations, feature entitlements, product configuration, integration availability, platform health, support, security, audit, AI governance, tenant management, and system incidents.

Customer organizations

Subscription plans

Integration availability

Platform health + usage

Support + security

Audit + AI governance

Tenant management

System incidents

Platform Administrator · internal audit

D-ONE implementation matrix

A source-grounded truth table for architectural completeness versus operational readiness. Rows are the modules present in this repository.

Platform-only · session surface

UI complete

28/ 29

Rendered module surfaces

Production ready

0/ 29

No row clears the operational gate

Single biggest gap

Backend + persistence

No server route, database, or durable write path is present.

CompletePartialNot builtBlockedN/A

Filter by moduleFilter by status

Showing 29 of 29 capabilities.

D-ONE capability completeness matrix. Status text is paired with every evidence note.
Capability	Module	Designed	UI Complete	Data Model Complete	Backend Complete	Integration Connected	Automation Connected	ELOHM Connected	Tested	Production Ready
Freight Decisioning / DIAL	Operations	CompleteFreightDecisioningWorkspace, NetworkPlanningPanel, and PredictiveNextLoadPanel exist	CompleteAvailability factors, canonical candidates, feasibility checks, and wait/reposition comparison render alongside the existing DIAL and sequence views	CompleteAvailability derives from canonical Load, Truck, Driver, and Location fields; candidate DIAL outputs remain inputs	Not builtNo server persistence	Not builtNo live ETA, telematics, load-board, or market feed	PartialPlanning is advisory; no dispatch, assignment, approval, or policy action is connected	Not builtELOHM explanation remains illustrative and advisory	BlockedProduction check only; no automated test suite	BlockedNo planning service, persistence, or live integration
Fleet-Wide Optimization	Operations	CompleteFleetOptimizationPanel extends Freight Decisioning beside Network Planning and Predictive Next-Load	CompleteFleet result totals, truck × load matrix, pairing reasoning, assumptions, and authorization boundary render	CompletePairings derive from canonical Load, Truck, Trailer, Driver, Location, and Organization records	Not builtSession-only illustrative comparison; no solver or persistence	Not builtNo live capacity, HOS, maintenance, telematics, or market feed	PartialRecommendations link to existing Dispatch review; no assignment or release executes	Not builtELOHM explanation remains illustrative and advisory	BlockedProduction build and route checks only; no automated test suite	BlockedNo optimization service, persistence, or live integration
Load Intake	Operations	CompleteLoadIntakeWorkspace exists	CompleteSource intake sequence rendered	CompleteCanonical Load selected by organization	Not builtNo intake service	Not builtAPI / EDI marked simulated	PartialIntake precedes Decisioning	Not builtExtraction is showcase copy	BlockedNo test suite found	BlockedNo source ingestion backend
Loads queue	Operations	CompleteLoads route is canonical	CompleteDecision queue and stages render	CompleteShared load records and tenant keys	Not builtSession storage only	Not builtNo provider sync	PartialAccept / assign actions are session-only	Not builtELOHM copy in queue	BlockedNo test suite found	BlockedNo persistent queue
Operational state vocabulary	Operations	CompleteSingle-state language and condition separation are documented	N/AItem 1 establishes the source only; consumer migration is item 2	Completesrc/data/canonicalState.ts defines stable keys, labels, definitions, semantic colors, and the singular lifecycle shape	Not builtNo persistent state service	N/AVocabulary is local and provider-independent	N/ANo surface is wired in this item	N/ADIAL/ELOHM outputs remain separate inputs	BlockedProduction check only; no automated test suite	BlockedConsumers are not yet migrated and no durable validation exists
Dispatch	Operations	CompleteOperationsShowcase dispatch mode	CompleteSelected-load board renders	CompleteCanonical Load carries assignment and lifecycle fields	Not builtNo dispatch service	Not builtNo live tracking	PartialAssign / release simulated	Not builtDispatch signal is illustrative	BlockedNo test suite found	BlockedNo release or tracking backend
Fleet (trucks, trailers, maintenance, parts, telematics/ELD)	Fleet	CompleteFleetWorkspace and equipment routes	CompleteFleet modules render	PartialLocal equipment records	Not builtNo fleet persistence	Not builtELD / telematics not live	PartialMaintenance hold sample path	Not builtReadouts are illustrative	BlockedNo test suite found	BlockedNo asset system of record
Drivers & HOS	Fleet	CompleteDrivers and HOS routes exist	CompleteDriver role workflow renders inside the existing Drivers workspace with mobile-first actions	CompleteCanonical Load, Driver, Truck, Document, Exception, geofence, fuel actual, and Settlement references are shared	Not builtNo driver / HOS service	Not builtELD adapter is sample status	PartialFit checks shown in flows	Not builtCompatibility copy only	BlockedNo test suite found	BlockedNo authoritative duty status
Compliance (qualifications, documents, permits, COIs, claims)	Compliance	CompleteComplianceWorkspace tabs exist	CompleteQualification and evidence views render	PartialLocal tenant and exception seeds	Not builtNo compliance repository	Not builtProviders listed, not synced	PartialException and hold flows shown	Not builtCompliance signals illustrative	BlockedNo test suite found	BlockedEvidence is not authoritative
Documents / POD	Compliance	CompleteDocuments route and closeout flow	CompletePOD review surface renders	CompleteCanonical Document records link to the canonical Load	Not builtNo document storage	Not builtNo upload or source connector	PartialBilling readiness simulation	Not builtMissing-POD signal is sample	BlockedNo test suite found	BlockedNo durable evidence chain
Finance — Billing & Settlements	Finance	CompleteFinance settlement workspace exists	CompleteBilling and settlement views render	CompleteCanonical phase-C state links load, documents, invoice, and settlement IDs	Not builtNo ledger or posting service	Not builtNo accounting write-back	PartialHuman-review flow only	Not builtFinance readout is illustrative	BlockedNo test suite found	BlockedNo posting or audit backend
Finance — Factoring & quick-pay intelligence	Finance	CompleteFunding comparison is defined inside existing Billing, AR, and Financial Analytics surfaces	CompleteInvoice detail, comparison table, reserve arithmetic, rollup, and exception links render	CompleteCanonical Invoice carries factoring, NOA, assignment, funding, reserve, and quick-pay state linked from Load	Not builtSession-only illustrative terms; no funding or ledger service	Not builtNo factor, bank, or accounting provider connected	Not builtNo autonomous funding, approval, or money movement	PartialAdvisory recommendation copy only; no connected service	BlockedProduction check only; no automated test suite	BlockedNo persistence, provider connection, or real money movement
Document-to-money completion / accessorial recovery	Finance	CompleteApproved Phase 3 chain and recovery extension	CompleteLoad chain, exact blockers, evidence table, and finance rollups render	CompleteCanonical Load carries readiness, money-chain, geofence evidence, and accessorial records	Not builtSession-only illustrative objects; no durable billing or AR service	Not builtNo live document, telematics, accounting, or payment connector	PartialPotential detention calculation and human-gated session actions only	Not builtNo connected explanation or recommendation service	BlockedProduction check only; no automated test suite	BlockedNo persistence, ingestion, submission, payment, or reconciliation backend
Finance — Payroll	Finance	CompletePayroll deep link exists	CompletePayroll showcase renders	PartialLocal settlement values	Not builtNo payroll service	Not builtNo payroll provider	PartialApproval states are visual	Not builtNo connected learning loop	BlockedNo test suite found	BlockedNo payroll authority
Finance — AR/AP	Finance	CompleteAR/AP deep link exists	CompleteAging workspace renders	PartialProfiles and sample balances	Not builtNo receivables / payables store	Not builtNo accounting connection	PartialReview queue is illustrative	Not builtCash-flow readout is sample	BlockedNo test suite found	BlockedNo ledger or reconciliation
Finance — IFTA	Finance	CompleteIFTA route exists	CompleteFuel tax workspace renders	PartialSample state mileage fields	Not builtNo tax record service	Not builtFuel feeds are not live	PartialReconciliation states are visual	Not builtTax signal is illustrative	BlockedNo test suite found	BlockedNo filing-grade source data
Financial Analytics	Finance	CompleteFinanceAnalytics component exists	CompleteAnalytics tabs, accuracy summary, and variance table render	CompleteCanonical completed Load carries projection and actual fields	Not builtNo analytics pipeline	Not builtNo live financial feed	PartialVariance queue is visual	Not builtLearning boundary is explicit	BlockedNo test suite found	BlockedNo verified actuals
Money Pods & allocation	Finance	CompleteMoneyPodsWorkspace exists	CompletePods and approval views render	PartialLocal Pod and run types	Not builtNo ledger persistence	Not builtProvider execution optional / absent	PartialApproval-gated simulation	Not builtNo connected intelligence	BlockedNo test suite found	BlockedNo money movement backend
Automation Engine	Intelligence	CompleteAutomationEngine component exists	CompleteBuilder, guardrails, run history render	PartialLocal workflow tenant map	Not builtNo runtime or persistence	Not builtNo provider write-back	PartialSimulation and approvals only	Not builtELOHM not connected	BlockedNo test suite found	BlockedNo durable execution
Communications / Alert Center	Network	CompleteCommunications showcase extends the existing Messages + Notifications surface	CompleteChannel-aware threads, canonical load associations, composer, delivery labels, and scoped ELOHM context render inside Communications	CompleteCanonical CommunicationThread and CommunicationMessage carry channel, direction, party references, canonical loadId, stage, timestamps, delivery state, and outcome links	Not builtSession-only illustrative objects; no messaging store	Not builtNo external email, SMS, or provider/API delivery service	PartialSimulated queue state only; existing Alert Center and ExceptionManagement remain human-gated	Not builtELOHM context is advisory showcase data and not a connected service	BlockedProduction check and route verification only; no automated test suite	BlockedNo persistence, provider connection, or real send / delivery backend
Relationships & Customer Portal	Network	CompleteRelationships and portal routes	CompleteCustomer-facing shipment, document, invoice, exception, and message views render inside Relationships → Portal	CompleteCustomerPortalView derives a whitelisted projection from canonical Load, Customer, Document, Invoice, Exception, and Communication records	Not builtNo account or portal service	Not builtNo authenticated portal	PartialRead-only illustrative view; no service action is connected	Not builtRelationship signal is illustrative	BlockedNo test suite found	BlockedNo customer identity or persistence
Exceptions	Operations	CompleteExceptionManagement is shared	CompleteFilters, owners, blockers render	CompleteCanonical organization-scoped Exception registry	Not builtSession-only exception state	Not builtNo source event feeds	PartialHuman-gated actions only	Not builtELOHM may summarize in copy	BlockedNo test suite found	BlockedNo durable event stream
Insights	Intelligence	CompleteInsightsHub is canonical	CompleteReports and analytics hub renders	PartialReport rows are sample literals	Not builtNo reporting pipeline	Not builtNo live source data	PartialLinks to review queues	Not builtReadout is illustrative	BlockedNo test suite found	BlockedNo verified reporting source
Outside Connections / Integrations	Network	CompleteOrganizationConnectionsShowcase exists	CompleteCatalog, scopes, health render	PartialTenant connection seed objects	Not builtNo connector service	Not builtStatuses are sample	PartialNative fallback is visual	Not builtNo enrichment connection	BlockedNo test suite found	BlockedNo credentials or sync
ELOHM intelligence	Intelligence	CompleteOrganizationIntelligenceShowcase extends the existing ELOHM surface with canonical operating questions, visible scope, and audit context	CompleteDeterministic answer view, record evidence links, boundary states, role-limited copy, market selector, and session audit render	CompleteAnswers derive from canonicalDataFor organization-scoped Load, Truck, Driver, Customer / Broker, Invoice, Document, and Exception records; Truck.emptyProjection is a shared canonical field	Not builtNo intelligence service or durable audit store	Not builtNo live model, API, provider feed, or credentials	PartialRecommendations link to existing modules but never execute, approve, dispatch, move money, change policy, or close exceptions	Not builtELOHM remains explicitly not connected	BlockedProduction build and route checks only; no automated test suite	BlockedNo authorization backend, persistence, model, or service connection
Data Foundation	Intelligence	CompleteNormalizedDataFoundationShowcase exists	CompleteSchema and mappings render	PartialTarget schema; local load type	Not builtNo normalization service	Not builtSource adapters are listed only	PartialQuality links are descriptive	Not builtRecord monitor is illustrative	BlockedNo test suite found	BlockedNo canonical storage or ingest
Identity & Security	Governance	CompleteMFA, federation, sessions, credentials, service accounts, audit, retention, isolation, and ELOHM guardrails are defined in IdentitySecurityShowcase	CompleteOrganization identity controls, Platform audit filters, retention design, and AI governance render inside Settings & Permissions	PartialidentitySecurity.ts references canonical TenantId, RoleId, and record IDs; no persisted user, credential, session, or audit store exists	Not builtAuthentication, server authorization, session revocation, credential issuance, and append-only audit storage are absent	Not builtNo SSO/SAML/OIDC provider, MFA service, key vault, or identity integration	PartialIllustrative revoke, rotate, invite, and audit filter interactions only; no security action executes	Not builtELOHM service-account boundary is designed and shown; no connected service	BlockedProduction build and route checks only; no automated security test suite	BlockedNo authenticated boundary or durable security controls
Organization Administration	Governance	CompleteOrganizationAdminShowcase exists	CompleteOrg profile, policy, access render	PartialtenantData and roleData seeds	Not builtNo settings persistence	Not builtConnection catalog is sample	PartialSession role and tenant switching	Not builtPermissions are illustrative	BlockedNo test suite found	BlockedNo authenticated org admin
Platform Administration	Governance	CompletePlatform section in settings exists	CompleteTenant and entitlement views render	PartialPlatform values are tenant seeds	Not builtNo platform control plane	Not builtNo health or support APIs	N/ANo platform runtime shown	N/AELOHM is an org intelligence layer	BlockedNo test suite found	BlockedNo control plane or auth

Canonical Data Foundation audit

Shared objects versus disconnected seeds

Evidence from current source files

Canonical object audit showing shared references, duplicate copies, and findings.
Canonical object	Same object references	Own / disconnected copy	Finding
Organization	canonicalData.ts → tenant-scoped registry and migrated workspace selectors	Automation and display-only modules retain local showcase maps	DIT, ABC, and XYZ are distinct illustrative organization records.
Load	canonicalData.ts → Intake, Decisioning, Loads, Dispatch, Details, Documents, Finance	Automation run IDs are audit references, not load objects	One organization-scoped load identity and field set flows through the migrated path.
Truck	canonicalData.ts organization-scoped Truck registry and load assignment IDs	Fleet and Money Pods retain richer local presentation records	Canonical object exists; Fleet consumer migration remains.
Trailer	canonicalData.ts organization-scoped Trailer registry and load assignment IDs	Trailer page and selectors retain local presentation options	Canonical object exists; Fleet and trailer-page migration remains.
Driver	canonicalData.ts organization-scoped Driver registry with HOS and qualification fields	Fleet and driver qualification pages retain local presentation records	Canonical object exists; roster consumer migration remains.
Customer / Broker	canonicalData.ts customer registry derived from tenant-scoped Load references	Relationship and finance pages retain display metrics	Canonical identity exists; non-load display seeds remain.
Document	canonicalData.ts → Phase C, Details, Documents, and billing readiness	Compliance display rows retain illustrative strings	Typed organization-scoped documents link to the canonical Load.
Invoice	canonicalData.ts invoice registry linked by Load.invoiceId	Finance profile metrics remain display-only	Illustrative object exists; finance summary migration remains.
Location	canonicalData.ts origin and destination objects for each Load	Routing and lane presentation strings remain	Canonical object exists; route display migration remains.
Communication Thread / Message	canonicalData.ts → Communications, Load Details, and customer portal projection	Composer adds session-only messages to the rendered canonical thread	Channel, direction, parties, canonical Load identity, stage, timestamps, delivery state, ELOHM context, and existing Exception outcome links are shared.
Exception	canonicalData.ts → shared ExceptionManagement and Relationships selectors	Phase C mutations are session-only derived state	Typed exception identities are tenant-scoped and shared by migrated consumers.
Money Pod	canonicalData.ts organization-scoped Money Pod registry	MoneyPodsWorkspace retains richer session builder state	Canonical object exists; builder migration remains additive.
Workflow	canonicalData.ts organization-scoped Workflow registry	AutomationEngine retains richer node and run presentation state	Canonical object exists; engine migration remains.

Load identity audit

One organization-scoped load identity

The migrated path uses the same canonical load ID and field set from Load Intake → Freight Decisioning → Loads queue → Dispatch → Load Details → Documents → Billing & Settlements → settlement and analytics context. Phase C keeps session mutations as a derived view and does not create a competing load object.

Organization scope audit

Organization-scoped; not persistent

`canonicalData.ts` selects every canonical object by `dit`, `abc`, or `xyz`; tenant-scoped session keys and legacy-ID filtering remain in place. The app has no server authorization layer or durable database, so this is verified showcase isolation, not production security.

Capability catalog

Entitlements vary by organization.

No pricing defined in this showcase

Capability	DIT	ABC Transport	XYZ Logistics
Core Operations	Enabled	Enabled	Enabled
Fleet	Enabled	Enabled	Available to provision
Safety & Compliance	Enabled	Available to provision	Enabled
Finance	Enabled	Available to provision	Available to provision
ELOHM AI	Enabled	Available to provision	Available to provision
DIAL Freight Intelligence	Enabled	Available to provision	Available to provision
Advanced Automation	Enabled	Available to provision	Available to provision
Advanced Analytics	Enabled	Available to provision	Available to provision
Enterprise Integrations	Enabled	Available to provision	Available to provision

Capability is a platform concern; whether an organization receives it is an entitlement configuration. Future capabilities are not assumed to be included for every carrier.

ELOHM permissions

Intelligence respects the operator’s access.

ELOHM operates within the currently authenticated organization and the same permission boundaries as the user. A user cannot obtain through ELOHM information they would not otherwise be permitted to access.

ELOHM

Platform intelligence layer across permitted records.

DIAL

Specialized freight-decisioning logic using this organization’s policy.

D-ONE

Commercial transportation operations platform for many carriers.