
Global sending mode set to Drafts-only.
04 · Approvals
Every pending draft that passed the hard checks but stopped short of an unchecked send. Read the coded severity, mode and confidence before a decision is recorded in the review workspace below. This queue is a projection: no write action is available here.
| Severity | Unit | Tenant | Process | Mode | Confidence | Reason · Evidence · Source | Owner | Next Deadline |
|---|---|---|---|---|---|---|---|---|
| Informationaldraft-4471 | Unit 12 | M. Brunner | Arrival information | Automatic | 0.94 | Arrival window confirmed by contract; no blocking gateSOURCE: Contract system · SHEET v2.10 · STATUS: PENDING | Pearlstay StaffDraft reply held | 16 Oct · 16:00+02:00 |
| Blockingdraft-4472 | Unit 07 | A. Keller | Access code release | Drafts-only | 0.88 | Payment receipt not verified; source conflict blocks code release pending reconciliationSOURCE: Contract system · SHEET v2.10 · STATUS: PENDING | Pearlstay StaffDraft reply held | 16 Oct · 12:00+02:00 |
| Reviewdraft-4473 | Unit 21 | S. Frei | Price objection follow-up | Review | 0.71 | Confidence below calibrated threshold; discount eligibility requires owner-approved parametersSOURCE: Contract system · SHEET v2.10 · STATUS: PENDING | Pearlstay StaffDraft reply held | 17 Oct · 09:00+02:00 |
| Reviewdraft-4474 | Unit 03 | L. Meier | Cleaning defect reply | Review | 0.63 | Defect report needs a tradesperson decision; individual approval requiredSOURCE: Contract system · SHEET v2.10 · STATUS: PENDING | Pearlstay StaffDraft reply held | 17 Oct · 14:00+02:00 |
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
Source: Contract system · SHEET v2.10 · 4 drafts awaiting · Validated 15 Oct 2026 14:02 Europe/Zurich
No draft selected. Choose a draft in the pending list to review its proposed reply, edit it, and record a decision.
Approvals / Policy reference
The rules that govern approval decisions on this page: business authority is separate from sending permission, a confidence score never grants authority, the global drafts-only override applies to external messaging, and per-process modes are automatic, review or disabled.
01
| Ref. | Policy statement | Source |
|---|---|---|
| Ref.P-01 | Policy statementBusiness authority and sending permission are separate. A process may hold the authority to decide what is correct and still hold no permission to send an external message. | SourceContract system · SHEET v2.10 |
| Ref.P-02 | Policy statementA confidence score never grants authority. A high confidence score does not bypass availability, price, payment, permission or approval conditions. | SourceContract system · SHEET v2.10 |
| Ref.P-03 | Policy statementInternal tasks and alerts operate independently of the global sending mode, and are not blocked by it. | SourceContract system · SHEET v2.10 |
| Ref.P-04 | Policy statementWhere the case is not covered by policy, or a decision sits outside the system’s scope, the decision returns to staff as an approval case. | SourceContract system · SHEET v2.10 |
SOURCE:Contract system · SHEET v2.10
02
| Mode | Authority | Sending permission | Source |
|---|---|---|---|
| ModeDrafts-only | AuthorityApplies to all external messaging channels without exception and takes priority over every per-process setting. | Sending permissionNo automatic or scheduled message leaves the system. Every external reply is prepared as a draft and waits for a staff decision. | SourceContract system · SHEET v2.10 |
| ModeAutomatic | AuthorityPermitted only for a process declared automatic in the approved policy catalogue and enabled individually by Pearlstay. | Sending permissionThe reply is sent automatically after all hard checks and the pre-send recheck have passed for the current data. | SourceContract system · SHEET v2.10 |
| ModeReview | AuthorityStaff retain the decision. The system holds no sending permission even when every check passes. | Sending permissionThe reply is queued as a draft for staff review, editing and approval before anything is sent. | SourceContract system · SHEET v2.10 |
| ModeDisabled | AuthorityThe process does not run any external action while it is disabled; the policy remains declared and inactive. | Sending permissionNo draft is prepared for sending and no message is dispatched for the disabled process. | SourceContract system · SHEET v2.10 |
SOURCE:Contract system · SHEET v2.10
03
BOUNDARY
Termination confirmation and countersignature remain human decisions · colour code: red signal · never produced automatically
H-01
Termination confirmation remains a human decision. The system prepares the case; only a person confirms a termination.
Contract system · SHEET v2.10H-02
Countersignature remains a human decision. The landlord countersignature is never produced automatically by the system.
Contract system · SHEET v2.10H-03
Approval is bound to the exact action details shown at the time of approval; a material change invalidates the approval and returns the case to review.
Contract system · SHEET v2.10SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
SOURCE:Contract systemSHEET:v2.10VALIDATED:15 Oct 2026 14:02 Europe/Zurich

Global sending mode set to Drafts-only.
A WhatsApp AI for guests and prospects, and one CRM for rentals, accounting, rent collection and Beds24 channel management. Every rule is versioned, every check is recorded, and nothing is sent until its conditions are revalidated.
02 / System overview
Gates 01-06
An inbound WhatsApp message is authenticated, deduplicated and classified, then checked against availability, price, payment status, permissions and approvals before any reply is sent. It exits into exactly one of two coded outcomes.
Source: Contract systemSheet v2.10Validated 15 Oct 2026 14:02 Europe/Zurich
04 / Sending modes
One global sending mode governs every outbound message on the platform. Each process then runs in its own mode underneath it. The global mode always wins: if sending is paused, no process sends, whatever its own mode says.
Three cells · one active · platform-wide
Outbound guest and prospect messages are prepared as drafts for staff review. Nothing leaves the platform until a staff member approves and sends it.
Sending blocked · staff approval required
Messages are sent automatically only after every hard check passes and the configured confidence threshold is met for that process.
Sending permitted where all checks pass
External sending stops immediately and stays stopped until the mode is deliberately changed. Queued actions are held, not discarded.
Emergency stop · sending suspended
Drafts-only is the global override. It outranks a process set to automatic, and it blocks the release of access details, offers and payment confirmations until a staff member sends them.
Automatic / review / disabled · set per process
Applies to the named process only. The reply is generated, all hard checks are re-run immediately before sending, and the message is released without staff involvement.
The process prepares the reply and files it for staff review. A staff member edits, approves or rejects it; only an approved draft is sent.
The process produces no outbound message at all. Its internal tasks still run and still appear in the CRM queues, but nothing is drafted for sending.
Internal accounting tasks and arrears alerts operate independently of the global sending mode. Rent obligations, allocation checks and arrears cases continue to be created and surfaced in the CRM while sending is drafts-only or paused.
Business authority is separate from sending permission. Being responsible for a decision does not authorise the system to send it; approval is bound to the exact action details and is invalidated when those details materially change.
A confidence score never grants authority. A high confidence score does not bypass availability, price, payment, permission or approval conditions, and it is not a substitute for deterministic validation.
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
05 / Workflow gates and acceptance
Four hard gates — identity, payment, contract and time — are enforced by deterministic services. Release criteria, staged deployment, rollback and the model-and-rule update process are stated below as rules with their verification evidence.
Identity, payment, contract and time gates must pass before any access code enters model context or is sent.
Gate orderIdentity → Payment → Contract → Time
Enforced byDeterministic services
Release requires zero observed critical violations in the agreed acceptance suite.
ScopeThis is a release gate, not a guarantee of zero future errors. Fix and rerun failures before activating the affected process.
Acceptance suiteAgreed critical-violation suite
ThresholdZero observed critical violations
Stages 1-6 proceed in order; each stage completes before the next begins.
Stage countSix, executed in order
Stage 1Integration proof
Stage 6Monitor and expand
A failure returns the affected process to staff review; a global stop halts issuing across every process.
On failureProcess returns to review automatically
OverrideGlobal stop control
A change to any versioned artefact passes a representative regression suite before it reaches production.
RegressionRun the representative regression suite before changes reach production; compare results and retain a rollback version. A model upgrade or a second model is not a substitute for deterministic validation.
Versioned artefacts5 tracked items
Before releaseRepresentative regression suite
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
06 / Access PathsVersion 2.1015 October 2026Pages 22-36
Six accepted personas reach Pearlstay through defined entry points. Staff authenticate before any record is reachable; guests and prospects enter through WhatsApp, where the message is authenticated and deduplicated before any answer is prepared. Each row carries its coded gutter as well as its text label.
01
Views the public landing page, then proceeds to authenticate as a staff account before any receipt, booking or rent record is reachable.
02
Views the public entry information before reaching cleaner and tradesperson tools. No existing cleaner or tradesperson account yet, so an account is created first.
03
Messages the Pearlstay WhatsApp number instead of using an account. The AI authenticates the sender and deduplicates the message before answering.
04
Views the public landing page before authenticating, then proceeds to authenticate. A new staff member registers before first access.
05
Views the public entry page carrying the system diagram and version metadata, then chooses to sign in to the CRM.
06
Lands on the public WhatsApp entry point and initiates WhatsApp or channel contact for an accommodation search.
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
No comments yet. Be the first!