Trust model

What the system trusts

Financial software becomes dangerous when it hides the difference between observed, inferred, repaired, and unknown.

A provider observation

Recorded

Useful source evidence; not proof that a closed cycle is complete.

A complete closed statement

Authoritative for its cycle

Arithmetic must pass before any repair is written.

An owner correction

Narrowly authoritative

Changes effective meaning without deleting the original source fact.

A deterministic relationship

Derived with proof

Transfers and refunds require linked evidence, not similar prose.

A model suggestion

Advisory

May explain or propose; never outranks supported ledger evidence.

Missing evidence

Left unresolved

Ledgerglass would rather show a gap than invent a balancing row.

A deliberate refusal

No invented balancing rows.

When a statement balance and the ledger disagree, a neat adjustment would make the arithmetic green. It would also hide the exact problem I need the system to preserve.

Ledgerglass records the discrepancy, identifies the missing evidence, and waits. A truthful partial answer is more useful than a complete fiction.