Personal Finance Runtime
Pure authorization, strict quarantine, currency-preserving aggregation, exact offline eligibility, and no-data-loss rights planning for PersonalOS finance. It deterministically builds correction-aware currency-separated snapshots and expiring family-office views, applies digest-bound reversible scenario changes, and reconciles paginated account records by cursor, revision, and idempotency. Host integrity ports verify canonical snapshot inputs, domain-separated scenario state digests, and exact receipt bindings before a projection or change applies. The durable reducer preserves an append-only subject aggregate across records, corrections, scenarios, provider connections, reconciliation cursors, and exact command/idempotency bindings. It rejects stale aggregate or connection revisions, terminal connection resurrection, identity substitution, duplicate correction chains, page replay, and partial pages without explicit continuation or terminal-incomplete evidence. The runtime exposes encrypted-store and audit ports but does not own keys, provider credentials, network transports, or formal compliance qualification.
buildPersonalTaxRecoveryDossierV1 (workflow tax-recovery-v1) resolves each candidate's citations against consented original document records by id, artifact reference and content digest, rejects unresolved or tampered citations, flags uncertain classification, unknown or estimated amounts and out-of-period items for adviser review, and keeps per-currency documented totals free of flagged items. Coverage gaps keep a fiscal period explicitly not fully searched. advancePersonalTaxObligationV1 keeps follow-ups, filing and payment independent, accepts outcomes only from external evidence origins, and preserves correction lineage. Nothing here files, submits or pays.
resolvePersonalFinanceCompanyProjectionV1 (workflow finance-review-v1) is the only path from personal finance to a company: an exact, active, unexpired, unrevoked grant for the requesting company and purpose, an active share consent, and a derived projection (cash bands, obligation counts, freshness) without raw records, amounts or subject identifiers.
