All state derives exclusively from immutable events.

• •No destructive updates
• •No silent overwrites
• •Projections are derivative, never authoritative

Errors are corrected only via compensating events.

• •Original events are never deleted or rewritten
• •Corrections require reason, actor, and timestamp linkage
• •Full audit trail preserved

No forced partnerships or embedded advertising.

• •Equal support for all microchip brands
• •Data export always available
• •No per-user, per-animal, per-chip, or hidden fees
• •No technical or contractual lock-in

Critical daily workflows MUST NOT exceed limits.

• •≤3 clicks post-context
• •≤1 form screen unless progressive disclosure
• •0 mandatory free-text fields when structured options exist
• •Violations are defects

Offline commands are first-class citizens.

• •Idempotent command handling is mandatory
• •Conflicts MUST surface to users
• •Silent failure is prohibited
• •Event provenance MUST survive reconciliation

Approved adoptions MUST be resumable at any step.

• •Payment, documents, and handoff MUST be atomic
• •Offline fallback notes are mandatory at handoff boundaries

Time from intake to first care action MUST be measurable.

• •KPI MUST be reportable
• •KPI MUST be auditable
• •KPI MUST be ledger-traceable

Sandbox data MUST never leak to production.

• •Training mode MUST be visually distinct
• •Training mode MUST be technically isolated
• •Ambiguity fails closed

Hard invariants that MUST be met.

• •Page load: p95 < 2s
• •API response: p95 < 200ms
• •Search: p95 < 500ms
• •Violations are defects

Things Pet360 will NEVER do.

• •No ads
• •No sale of adopter data
• •No shelter ranking
• •No gamification of euthanasia
• •No behavioral ad targeting
• •No donor data resale or enrichment