Loading...
Notes on building and running production software.
A large permission catalog means little if one route, tool, data query, or approval path can bypass it.
A useful AI assistant does not become a parallel super-admin. Tools should execute inside the same capability, scope, audit, and confirmation boundaries as the application.
Commission correctness depends on participants, policy versions, lifecycle states, locking, and preserved unresolved allocation.
OAuth gives you a connection. Reliable attribution requires verified account, campaign, and internal-project mapping after the callback.
A lead is not isolated CRM data once it becomes a reservation, contract, payment plan, commission event, and management metric.
The value of an ERP appears when one business event crosses multiple departments and the system keeps every downstream state consistent.