Records what was checked.
Not just what was decided.

The claim became the atomic unit.

An audit trail proves who decided. It almost never proves what was checked, which is the question an analyst actually faces months later, in front of a reviewer. A pass across Hummingbird, Unit21, Sumsub and WorkFusion found no product that treats individual claims as first-class objects with their own verification state. So that became the move: the claim, one verifiable statement with a source, a verdict and an asserter, is Docket’s atom, and everything else is built out of it.

FIG. 02 · THE REVIEW VIEW

Claims on the left, the evidence on the right. The analyst works through statements, not documents, and the screen keeps both in view.

Verification takes two seconds, not a search.

Click a claim and the cited line highlights inside the source document, with the OCR boundary drawn around exactly what the model read. That is the whole mechanic. The model reports its boundaries instead of performing confidence, and it never recommends: it reads, it cites, and the verdict stays with the analyst. An assistant in a regulated review earns trust by showing its work, not by being sure.

Five failure states, none of them erased.

Override, a citation that will not resolve, two sources that conflict, a rule that changed mid-case, and the model going down entirely. Each one is a designed state, and each one preserves the record instead of cleaning it up: when an analyst overrides the model, the model’s reading stays in the file next to the human verdict. Being wrong is allowed. Hiding it is not.

FIG. 04 · OVERRIDE · UNRESOLVABLE CITATION · CONFLICTING SOURCES · RULE CHANGED

The reasoning ships with the decision.

The output of a review is a time-ordered, version-stamped record of what was checked, in which order, against which version of which rule, and why a contradiction did not block approval. It is sealed with the analyst’s and the reporting officer’s signatures. The most delicate law in the product is handled the same way: tipping-off protection keys off the state of the case, whether a disclosure exists, rather than a list of banned phrases, and the reporting officer’s screen carries the two statutory clocks in plain sight.

FIG. 06 · THE EVIDENCE REQUEST

Asking a player for a document, with the consequences on the surface: what it asks for, what it does to each clock, and the tipping-off rule keyed off the state of the case. The law sits in the interface, where it is hardest to forget.

Three critics tried to break it. They found things.

Before the design was called done, three independent critic passes went through it. They found a misquoted regulation, a licence condition that does not exist, and a tipping-off block that was legally wrong, and all three were corrected in the file. The system underneath held: one component set spanning two axes, paper and ink, pointer and touch, with no per-mode variants.