Step 1 of 10·Capture raw files and feeds exactly once, assign a unique window ID, and bind the active policy manifest. Retries and resubmits can't double-count — every downstream step references this window for clean traceability. (patent §0044–§0045)
1
Gateway
Validate tenant credential via mTLS. Open settlement window. Bind active policy manifest. Assign session token to all downstream operations.
Why this mattersThe gateway is the only authorized entry point. It binds every downstream operation to a specific policy version, tenant, and window ID. An event arriving outside this session is rejected before touching any accumulator. This is the single-writer invariant at the session boundary (patent §0044–§0045).