Identity & tenancy
Organizations, workspaces, memberships and capabilities separate legal entities and operating scopes.
Security & governance
Water data should be useful without becoming careless.
WaterPesa is designed around tenant boundaries, capability-based permissions, append-only evidence for high-risk records, explicit approvals and safe integration boundaries.
Controls
Defense in depth
Audit & approvals
Before/after state, actor, reason, approval, correlation ID and related case/work order are preserved for sensitive changes.
Data lifecycle
Meter reads, issued bills, payment transactions, used tariff versions and completed evidence are corrected through superseding records rather than silent deletion.
AI boundary
Advisory, cited, reviewable.
Rule
AI may explain, summarize, classify and suggest. Deterministic domain logic remains authoritative for tariff calculation, payment accounting, metrology, disconnection and remote infrastructure control.