pearsley
Meghna Rajawatbuild this
Comments (0)
Sign in to leave a comment
Global sending mode set to Drafts-only.
01 / Contracts
Open contract processes
Every tenancy whose contract is not yet fully executed, with its terms, approval state and channel synchronisation in aligned columns. Read-only register: decisions on a selected contract are recorded in the signing workspace below.
| Open process | Unit | Tenancy type | Start date | Notice period | Rent amount | Deposit amount | Approval state | Calendar block | Beds24 sync | Last sync |
|---|---|---|---|---|---|---|---|---|---|---|
| TEN-2042A. KellerExtension requested from 1 Apr 2027 | Unit 07 | Fixed Term | 1 Apr 2025 | none during fixed term | CHF 2,100.00 | CHF 4,200.00 | Awaiting decisionApproval: PendingA human decision is required before this process can continue. | Fixed-term blockFixed term to 31 Mar 2027 | ConfirmedChannel manager | 15 Oct 2026 14:02 |
| TEN-2043S. MeierTermination requested, effective 30 Nov 2026 | Unit 19 | Open Ended | 1 Sep 2023 | 4 weeks to month end | CHF 1,650.00 | CHF 3,300.00 | Awaiting decisionApproval: PendingA human decision is required before this process can continue. | Open-ended blockNo end date | ConfirmedChannel manager | 15 Oct 2026 14:02 |
Source:Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
Contracts / Signing workspace
Contract signing and countersignature
One workspace owns the contract lifecycle: select the tenancy, read its terms, record the prospective guest’s signature and record the Pearlstay staff countersignature decision. Preparation and dispatch follow the rules on this page; termination confirmation and countersignature stay human decisions.
Drafts-only override activeBusiness authority is separate from sending permission. The workspace may prepare the contract; the override governs external sending only.
Tenancies
3 canonical records from the contract system.
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
Contract TEN-2041
Awaiting signatureUnit
Unit 12
Tenant
M. Brunner
Tenancy type
Open-ended
Start date
2024-04-01
End date
—
Notice period
4 weeks to month end
Rent amount
CHF 1,850.00
Deposit amount
CHF 3,700.00
Requested change
No change requested
Requested effective date
—
Approval state
Not required
Calendar block
Blocked — open-ended
Beds24 sync
Confirmed
Last sync (Europe/Zurich)
15 Oct 2026 14:02
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
The prospective guest confirms the terms above — unit, tenancy type, start and end dates, notice period, rent and deposit — as the basis of this contract before it is countersigned.
Validation
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
04 / CONTRACT EXECUTION POLICY
REFERENCE ONLY · SHEET v2.10 · 22-36
The rules that govern how a signed contract is executed. This reference states the standing policy; it carries no selection, no acknowledgement and no decision, and it is read-only.
| Ref | Rule label | Rule |
|---|---|---|
| CP-01 | Termination confirmation | Confirmation of a tenancy termination remains a human decision. The system prepares the evidence and the dates; a member of Pearlstay staff confirms the termination before it is treated as binding. |
| CP-02 | Countersignature | Countersignature of a signed contract remains a human decision. A returned signature never produces a countersignature on its own. |
| CP-03 | Business authority | Business authority is separate from sending permission. Being the authoritative source for a field does not grant the ability to send a message about it. |
| CP-04 | Sending permission | Sending permission follows the per-process mode and the global sending mode only. No other role in the system confers it. |
| CP-05 | Confidence score | A confidence score never grants authority. A high score cannot bypass a hard check, an approval, a permission or a readiness condition. |
| CP-06 | Drafts-only override | The global drafts-only override applies to external messaging. While it is active, prepared messages are held as drafts for staff review and nothing leaves the system. |
| SOURCE: CONTRACT SYSTEM · SHEET v2.10 · VALIDATED 15 OCT 2026 14:02 EUROPE/ZURICH | ||
| Ref | Safeguard | Rule |
|---|---|---|
| CS-01 | Independent cancellation | The AI never independently cancels a signed contract. Cancellation is prepared for staff review and is only carried out on a human decision. |
| CS-02 | Unresolved conflicts | Where two authoritative sources disagree, the action is blocked rather than resolved silently. Staff are notified and the conflict is held for reconciliation before the action proceeds. |
| CS-03 | Blocked action | A blocked action produces an internal task and a notification. It is never retried, reworded or sent through another channel while the conflict stands. |
| SOURCE: CONTRACT SYSTEM · SHEET v2.10 · VALIDATED 15 OCT 2026 14:02 EUROPE/ZURICH | ||
Source: Contract systemSheet v2.10Validated 15 Oct 202614:02Europe/Zurich
Global sending mode set to Drafts-only.
Pearlstay / Corporate AIOne CRM. Traceable rules. No unchecked sends.
A WhatsApp AI for guests and prospects, and one CRM for rentals, accounting, rent collection and Beds24 channel management. Every rule is versioned, every check is recorded, and nothing is sent until its conditions are revalidated.
02 / System overview
How an inbound message is processed
Gates 01-06
An inbound WhatsApp message is authenticated, deduplicated and classified, then checked against availability, price, payment status, permissions and approvals before any reply is sent. It exits into exactly one of two coded outcomes.
- Automaticevery gate passed
- Drafts-onlyheld for staff review
Source: Contract systemSheet v2.10Validated 15 Oct 2026 14:02 Europe/Zurich
04 / Sending modes
Global sending mode and per-process modes
One global sending mode governs every outbound message on the platform. Each process then runs in its own mode underneath it. The global mode always wins: if sending is paused, no process sends, whatever its own mode says.
Global sending mode
Three cells · one active · platform-wide
Outbound guest and prospect messages are prepared as drafts for staff review. Nothing leaves the platform until a staff member approves and sends it.
Sending blocked · staff approval required
Messages are sent automatically only after every hard check passes and the configured confidence threshold is met for that process.
Sending permitted where all checks pass
External sending stops immediately and stays stopped until the mode is deliberately changed. Queued actions are held, not discarded.
Emergency stop · sending suspended
Drafts-only is the global override. It outranks a process set to automatic, and it blocks the release of access details, offers and payment confirmations until a staff member sends them.
Per-process modes
Automatic / review / disabled · set per process
Applies to the named process only. The reply is generated, all hard checks are re-run immediately before sending, and the message is released without staff involvement.
The process prepares the reply and files it for staff review. A staff member edits, approves or rejects it; only an approved draft is sent.
The process produces no outbound message at all. Its internal tasks still run and still appear in the CRM queues, but nothing is drafted for sending.
Internal accounting tasks and arrears alerts operate independently of the global sending mode. Rent obligations, allocation checks and arrears cases continue to be created and surfaced in the CRM while sending is drafts-only or paused.
Business authority is separate from sending permission. Being responsible for a decision does not authorise the system to send it; approval is bound to the exact action details and is invalidated when those details materially change.
A confidence score never grants authority. A high confidence score does not bypass availability, price, payment, permission or approval conditions, and it is not a substitute for deterministic validation.
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
05 / Workflow gates and acceptance
Every gate must pass before a code enters model context or leaves the system.
Four hard gates — identity, payment, contract and time — are enforced by deterministic services. Release criteria, staged deployment, rollback and the model-and-rule update process are stated below as rules with their verification evidence.
- BlockingCritical acceptance violation
- ReviewStaff decision required
- InformationalControl and update rule
- Identity
- Payment
- Contract
- Time
01 — Identity, payment, contract and time gates
Severity: blockingIdentity, payment, contract and time gates must pass before any access code enters model context or is sent.
- No access code enters model context before all four gates pass.
- No access code is sent before all four gates pass.
- A confidence score never grants authority to bypass a gate.
Gate orderIdentity → Payment → Contract → Time
Enforced byDeterministic services
02 — Release criteria: zero critical violations
Severity: blockingRelease requires zero observed critical violations in the agreed acceptance suite.
- Unauthorised access
- Duplicate financial postings
- Incorrect binding prices
- False arrears caused by known stale data
- Internal double commitments
ScopeThis is a release gate, not a guarantee of zero future errors. Fix and rerun failures before activating the affected process.
Acceptance suiteAgreed critical-violation suite
ThresholdZero observed critical violations
03 — Deployment stages 1-6
Severity: reviewStages 1-6 proceed in order; each stage completes before the next begins.
- Integration proof
- Master data and deterministic workflows
- Shadow mode
- Staff-reviewed operation
- Activate approved processes individually
- Monitor and expand
Stage countSix, executed in order
Stage 1Integration proof
Stage 6Monitor and expand
04 — Automatic rollback and global stop control
Severity: reviewA failure returns the affected process to staff review; a global stop halts issuing across every process.
- Affected process returns automatically to review on failure.
- The global stop control halts sending across all processes.
On failureProcess returns to review automatically
OverrideGlobal stop control
05 — Model and rule updates
Severity: informationalA change to any versioned artefact passes a representative regression suite before it reaches production.
- Prompts
- Model configuration
- Extraction schemas
- Templates
- Rules
RegressionRun the representative regression suite before changes reach production; compare results and retain a rollback version. A model upgrade or a second model is not a substitute for deterministic validation.
Versioned artefacts5 tracked items
Before releaseRepresentative regression suite
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
06 / Access PathsVersion 2.1015 October 2026Pages 22-36
Who gets in, and by which gate.
Six accepted personas reach Pearlstay through defined entry points. Staff authenticate before any record is reachable; guests and prospects enter through WhatsApp, where the message is authenticated and deduplicated before any answer is prepared. Each row carries its coded gutter as well as its text label.
- Blocking · gate must pass before release
- Review · verified or countersigned
- Informational · public entry
01
Accounting / Rent Collection Staff
BlockingViews the public landing page, then proceeds to authenticate as a staff account before any receipt, booking or rent record is reachable.
- EntryPublic landing page
- ConditionProceeds to authenticate
- DestinationCRM workspace
02
Cleaner / Tradesperson
ReviewViews the public entry information before reaching cleaner and tradesperson tools. No existing cleaner or tradesperson account yet, so an account is created first.
- EntryPublic entry information
- ConditionNo existing cleaner / tradesperson account
- DestinationRestricted operational access
03
Existing Tenant / Guest in Stay
BlockingMessages the Pearlstay WhatsApp number instead of using an account. The AI authenticates the sender and deduplicates the message before answering.
- EntryPearlstay WhatsApp number
- ConditionRequest relates to an existing tenancy
- RequestGeneral question, operating problem or complaint, payment question, rent status check, cleaning or maintenance need
- AlternativeTenant calls instead of messaging
04
Pearlstay Staff / Business Decision Owner
ReviewViews the public landing page before authenticating, then proceeds to authenticate. A new staff member registers before first access.
- EntryPublic landing page
- ConditionProceeds to authenticate
- ConditionNew staff member registers
05
Property Acquisition Staff
InformationalViews the public entry page carrying the system diagram and version metadata, then chooses to sign in to the CRM.
- EntryPublic entry page · system diagram and version metadata
- DecisionChoose to sign in to the CRM
06
Prospective Guest (Rental Enquirer)
InformationalLands on the public WhatsApp entry point and initiates WhatsApp or channel contact for an accommodation search.
- EntryPublic WhatsApp entry point
- ActionInitiate WhatsApp / channel contact for accommodation search
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
No comments yet. Be the first!