
Global sending mode set to Drafts-only.
03 / Channel mapping
Every inbound channel is bound to its receiving account, portal, source listing, reply address and CRM unit so an enquiry is never answered from the wrong account.
| No. | Channel | Receiving account | Portal | Source listing | Reply address | Mapped CRM unit |
|---|---|---|---|---|---|---|
| 01 | WhatsApp Business | Pearlstay Guest WhatsApp (Business Platform number) | WhatsApp Business Platform | Direct guest conversation (no listing) | Inbound conversation thread — replies sent from the Business Platform number | Unit 21gsc-004 · Arrival information · sent |
| 02 | HousingAnywhere | guest@pearlstay.example (portal mailbox) | HousingAnywhere | Unit listings published on HousingAnywhere | Reply routed through the HousingAnywhere portal thread | Unit 12gsc-001 · General question · answered |
| 03 | Homegate | guest@pearlstay.example (portal mailbox) | Homegate | Unit listings published on Homegate | Reply routed through the Homegate listing inbox | Unit 03gsc-003 · Access code request · blocked |
| 04 | ImmoScout24 | guest@pearlstay.example (portal mailbox) | ImmoScout24 | Unit listings published on ImmoScout24 | Reply routed through the ImmoScout24 listing inbox | Unit 12gsc-001 · General question · answered |
| 05 | Flatfox | guest@pearlstay.example (portal mailbox) | Flatfox | Unit listings published on Flatfox | Reply routed through the Flatfox listing inbox | Unit 12gsc-001 · General question · answered |
| 06 | Designated Gmail inbox | guest@pearlstay.example (Gmail) | Direct email (no portal) | Direct enquiries raised against a unit listing | enquiries@pearlstay.example | Unit 07gsc-002 · Operating problem · escalated |
Every portal account, mailbox and listing maps to exactly one CRM unit. A mapping is never shared across two units, so a received message resolves to a single unit.
Automated portal and system notifications are treated as senders of a message, never as guests. They are excluded from identity matching and never receive a guest reply.
A single active response workflow exists per matched enquiry. Later messages from the same enquiry attach to that workflow instead of opening a second one.
WhatsApp Business PlatformBlocking · Consent required
Template-initiated contact requires documented consent for the contact. Without a documented consent record the channel stays inbound-first and no template-initiated message is prepared.
HousingAnywhereReview · Pending permitted use
The HousingAnywhere PDF handover asset containing the WhatsApp number is pending confirmation of permitted use. Until that confirmation is recorded, communication stays on-platform.
All channelsInformational · On-platform until confirmed
While a handover asset is unconfirmed, replies are prepared as drafts and manual tasks on the platform. No message is dispatched through the unconfirmed asset.
SOURCE: Channel mapping · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
Inbox · 04
Read-only register · Unified inbox
Every enquiry keeps one tracked response state. Each row carries its channel, the reply state, the last activity, the owning team and the next due follow-up, so an unchecked or duplicated send is visible rather than assumed.
04 tracked replies
| Severity | Channel | Reply state | Last activity | Owner | Next due follow-up |
|---|---|---|---|---|---|
| Email / portalUnit 12 · M. KellerOwnerGuest SupportNext due2026-10-22 | Reply sent | 2026-10-15 09:41 | Guest Support | 2026-10-22Seven days from 2026-10-15 | |
| WhatsAppUnit 07 · A. BrunnerOwnerOperationsNext due2026-10-22 | Awaiting response | 2026-10-15 08:20 | Operations | 2026-10-22Seven days from 2026-10-15 | |
| WhatsAppUnit 03 · L. MeierOwnerAccountingNext dueNone | Follow-up stopped | 2026-10-15 06:05 | Accounting | NoneFollow-up stopped | |
| HousingAnywhereUnit 21 · S. WeberOwnerGuest SupportNext due2026-10-20 | Reply sent | 2026-10-13 14:02 | Guest Support | 2026-10-20Seven days from 2026-10-13 |
Replies are matched to the original thread and message IDs before the register is updated.
Duplicate sends are prevented across imports and retries; an uncertain send is reconciled before any retry.
A reply, bounce or decline stops further follow-up for that enquiry; no second general follow-up is issued.
SOURCE: Reply tracking · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
Source:Unified inboxSheet v2.10Validated 15 Oct 2026 14:02 Europe/Zurich

Global sending mode set to Drafts-only.
A WhatsApp AI for guests and prospects, and one CRM for rentals, accounting, rent collection and Beds24 channel management. Every rule is versioned, every check is recorded, and nothing is sent until its conditions are revalidated.
02 / System overview
Gates 01-06
An inbound WhatsApp message is authenticated, deduplicated and classified, then checked against availability, price, payment status, permissions and approvals before any reply is sent. It exits into exactly one of two coded outcomes.
Source: Contract systemSheet v2.10Validated 15 Oct 2026 14:02 Europe/Zurich
04 / Sending modes
One global sending mode governs every outbound message on the platform. Each process then runs in its own mode underneath it. The global mode always wins: if sending is paused, no process sends, whatever its own mode says.
Three cells · one active · platform-wide
Outbound guest and prospect messages are prepared as drafts for staff review. Nothing leaves the platform until a staff member approves and sends it.
Sending blocked · staff approval required
Messages are sent automatically only after every hard check passes and the configured confidence threshold is met for that process.
Sending permitted where all checks pass
External sending stops immediately and stays stopped until the mode is deliberately changed. Queued actions are held, not discarded.
Emergency stop · sending suspended
Drafts-only is the global override. It outranks a process set to automatic, and it blocks the release of access details, offers and payment confirmations until a staff member sends them.
Automatic / review / disabled · set per process
Applies to the named process only. The reply is generated, all hard checks are re-run immediately before sending, and the message is released without staff involvement.
The process prepares the reply and files it for staff review. A staff member edits, approves or rejects it; only an approved draft is sent.
The process produces no outbound message at all. Its internal tasks still run and still appear in the CRM queues, but nothing is drafted for sending.
Internal accounting tasks and arrears alerts operate independently of the global sending mode. Rent obligations, allocation checks and arrears cases continue to be created and surfaced in the CRM while sending is drafts-only or paused.
Business authority is separate from sending permission. Being responsible for a decision does not authorise the system to send it; approval is bound to the exact action details and is invalidated when those details materially change.
A confidence score never grants authority. A high confidence score does not bypass availability, price, payment, permission or approval conditions, and it is not a substitute for deterministic validation.
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
05 / Workflow gates and acceptance
Four hard gates — identity, payment, contract and time — are enforced by deterministic services. Release criteria, staged deployment, rollback and the model-and-rule update process are stated below as rules with their verification evidence.
Identity, payment, contract and time gates must pass before any access code enters model context or is sent.
Gate orderIdentity → Payment → Contract → Time
Enforced byDeterministic services
Release requires zero observed critical violations in the agreed acceptance suite.
ScopeThis is a release gate, not a guarantee of zero future errors. Fix and rerun failures before activating the affected process.
Acceptance suiteAgreed critical-violation suite
ThresholdZero observed critical violations
Stages 1-6 proceed in order; each stage completes before the next begins.
Stage countSix, executed in order
Stage 1Integration proof
Stage 6Monitor and expand
A failure returns the affected process to staff review; a global stop halts issuing across every process.
On failureProcess returns to review automatically
OverrideGlobal stop control
A change to any versioned artefact passes a representative regression suite before it reaches production.
RegressionRun the representative regression suite before changes reach production; compare results and retain a rollback version. A model upgrade or a second model is not a substitute for deterministic validation.
Versioned artefacts5 tracked items
Before releaseRepresentative regression suite
SOURCE: Contract systemSHEET v2.10VALIDATED 15 Oct 2026 14:02 Europe/Zurich
06 / Access PathsVersion 2.1015 October 2026Pages 22-36
Six accepted personas reach Pearlstay through defined entry points. Staff authenticate before any record is reachable; guests and prospects enter through WhatsApp, where the message is authenticated and deduplicated before any answer is prepared. Each row carries its coded gutter as well as its text label.
01
Views the public landing page, then proceeds to authenticate as a staff account before any receipt, booking or rent record is reachable.
02
Views the public entry information before reaching cleaner and tradesperson tools. No existing cleaner or tradesperson account yet, so an account is created first.
03
Messages the Pearlstay WhatsApp number instead of using an account. The AI authenticates the sender and deduplicates the message before answering.
04
Views the public landing page before authenticating, then proceeds to authenticate. A new staff member registers before first access.
05
Views the public entry page carrying the system diagram and version metadata, then chooses to sign in to the CRM.
06
Lands on the public WhatsApp entry point and initiates WhatsApp or channel contact for an accommodation search.
SOURCE: Contract system · SHEET v2.10 · VALIDATED 15 Oct 2026 14:02 Europe/Zurich
No comments yet. Be the first!