A Ledger That Can't Lie

An unbalanced journal entry is the oldest error in accounting, and almost every system catches it in the software on top — which means it is caught everywhere someone remembered to add the check, and nowhere they did not. An import, an automated task, a quick fix somebody ran: each is a way around it.

• The system itself refuses an unbalanced entry before it can be saved. The rule is built into the foundation, not into a screen that can be bypassed.

The difference is where the rule lives. A rule enforced at the foundation does not care which route an entry took to get there, whether that route was built this year, or whether whoever built it knew the rule existed. There is no way to be clever enough to get around it, because there is nothing to be clever about.

• History is never overwritten. Every record is sealed to the one before it, and a correction is a new entry that reverses the old one, so the original stays in the books.

• The books' tamper-evident seal is re-checked automatically on a schedule, and a break raises an alert rather than waiting to be discovered during an audit.

A correction does not overwrite the thing it corrects. It is posted as a reversal, so the original entry, the reversal, and the reason are all still there — which is what makes the next claim possible at all. A system that allows edits cannot answer it, because the answer was overwritten.

You can ask not just what the books say now, but what they said on any date since the books were opened here — and see exactly what changed between the two.

That is not a search through old reports. The books are reconstructed from the ledger’s own record of every change, so an entry that was still a draft on the date you ask about is absent, one voided afterwards is present, and one amended since shows the figures it carried then — and the difference against today is listed account by account.

• Every posting, whether yours, a rule's, or an automation's, goes through the same single door, with the same approvals and the same ability to reverse it.

This is the sentence that makes automation safe to buy. A bank-coding rule, a recurring journal, a prepaid amortization, an AI-extracted bill — none of them get a private door into the ledger. They post the way a person posts, go through the same approvals, are sealed into the same tamper-evident history, and reverse the same way.

• A closed period is locked at the point of entry: anything dated into it is refused outright, not flagged for someone to notice later.

• Year-end close posts a real, balanced entry that closes the P&L into retained earnings — and a correction booked afterwards is folded in, not lost.

Locking is enforced at the point of entry, so a backdated entry into a closed month is refused rather than reported. And because year-end posts a real entry rather than a calculated figure, a correction to a prior year has somewhere to go: it is folded into a separate adjustment instead of silently changing what last year said.

• Every figure on every statement opens into the journal entries behind it, and from there into the invoice, bill or payment that caused them.

• A complete due-diligence package, with statements, ledgers, agings and evidence, produced as a snapshot of one moment in time and carrying a seal anyone can check.

The practical test of a ledger is what happens when someone points at a figure and asks where it came from. Here that is a click, then another — statement to journal lines to the invoice, bill, or payment that produced them — and the same trail of evidence is what the diligence package assembles when a bank or an acquirer asks for it in bulk.

Everything above is the foundation for something larger: books whose integrity is a thing you can hand to someone, rather than a thing they have to take our word for.

A recipient checks a delivered package on their own computer, with a tool that travels inside the package, installs nothing and contacts no one.

A sealed package cannot be checked by its recipient unless history was never overwritten in the first place, which is why this page comes before that one. The last piece — a signature from a party we do not control, which every package now carries — is set out on the Verifiable Books page. We publish direction, not dates, and we do not sell what has not shipped.