One gate, every channel
A single decision point rules whether a claim may be used. Outreach, narrative export and reports all call it at the moment of use — and it fails closed.
Fundraising operating system
Capital Command runs one parent raise across four verticals on a single evidence standard. Claims carry source, reviewer, channel and expiry. If a statement cannot be evidenced, it does not leave the building.
What it does
A single decision point rules whether a claim may be used. Outreach, narrative export and reports all call it at the moment of use — and it fails closed.
A claim carries its source, its reviewer, the channels it is cleared for, and an expiry. Approval needs an independent reviewer and accepted primary evidence.
Every event stores the hash of the one before it, so an edited or deleted row is detectable — even by someone with direct database access.
The operator cannot approve a claim. The reviewer never sees salary figures. The vertical lead sees one vertical. The advisor gets read-only summaries.
The claim gate
Approval has hard preconditions: a reviewer who is not the claim owner, at least one accepted piece of primary evidence, explicitly declared channels, and a future review date. Miss one and the claim stays where it is.
Governance
Confideo owns protected documents; Capital Command holds relationship state only. AI may research, draft and score — humans approve outreach, publication and access. Sessions are bounded, and every sign-in, success or failure, lands in an append-only trail.
Money is stored in integer minor units with an ISO-4217 code. No float arithmetic ever touches a currency figure.