Rules that hold when nobody is watching.

Scope, wards, tariffs and the council share live as configuration on the city host, so the operating system and the contract cannot drift apart.

Service events are compared to the published schedule per ward. Exceptions are enumerated in the monthly statement rather than smoothed into an average.

The settlement order is enforced by the platform and evidenced by a remittance statement that reconciles line by line to the weight ledger.

Operational and financial actions are logged with actor and timestamp. Ledger rows are never mutated; corrections reference the original entry.

Each city host keeps its own data boundary. Tanzanian personal data for the first deployment is held in af-south-1 under PDPA, with role-scoped access.

Diversion and avoided disposal are monitored at Tier 1–2 against methodology parameters. We do not issue, hold or market carbon credits.