Potentially certifiable later
Exact contracted flat, unit, first/additional, and matrix mismatches, plus uniquely identified within-invoice duplicates, have the narrowest eligible proof shapes.
Live
Planned
Fictional sample
Prelaunch status
A public record of what exists—and what does not.
Auditario has a local deterministic audit engine, a live hosted prelaunch service boundary, and a public waitlist. It does not have an enabled authenticated merchant product, public document intake, Shopify access, billing, or automated dispute sending.
Availability
The exact product boundary
“Built” does not mean “available to merchants.” Local engineering, public website behavior, and future application capability are kept separate below.
Live
Public information and waitlist
This site explains the methodology and accepts contact-only waitlist requests through a small Cloudflare Pages handler.
No account is created. No contract, invoice, payment, or Shopify data is accepted.
Built locally
Deterministic audit engine
Local Python tooling can parse CSV, XLSX, and native-text PDF fixtures, normalize supported layout families, execute versioned checks, seal outcomes, and generate reports.
This is operator software in a local workspace, not a hosted merchant service.
Fictional
Product previews
Dashboard, issue, and invoice previews present the sealed synthetic showcase through a possible interaction model.
They are presentation references, not live accounts, customer outcomes, claim-ready findings, or provider allegations.
Planned
Authenticated merchant features
Magic-link, organization, role, and upload foundations exist behind disabled flags. Functional dashboards, invoice and issue projections, approvals, recovery tracking, and the operator console remain gated Phase 1A work.
The Cloudflare-to-Railway BFF, private API, and PostgreSQL prelaunch path is live, but there is no public login, active tenant account, merchant data, or merchant API today.
Planned
Secure intake and connected evidence
A private short-lived R2 staging bucket and the tenant-scoped upload code path exist, but uploads are disabled. Runtime R2 credentials, retained storage, malware scanning, Postmark, Shopify, and live model refutation remain absent or gated.
Do not email or submit documents through the waitlist.
Planned
Billing and dispute automation
Flat subscriptions, guarantee credits, merchant-approved dispute dispatch, 24-hour notice, cancellation, and AutoPilot are not active.
Joining the waitlist is not a purchase, price reservation, or authorization to act.
Engineering evidence
Capability without overclaiming coverage
The repository can recognize several documented shapes. None is certified to publish a positive claim, and extraction-harness success is not provider adjudication.
0
claim-ready certification cells
3
provider layout families normalized locally
4
documented file-layout variants in the public corpus
$0
amount the present system may request in production
Review-only now
Effective dates, tiers, minimums, missing credits, storage continuity, and tax-on-gross-of-credits remain capped below claim-ready.
Observation-only now
Undefined charges, rate drift, insurance overlap, document integrity, and charge-code mapping can inform a review but cannot state money owed.
Layout support is not claim certification. A parser can read a shape accurately while a finding still lacks source integrity, governing terms, an established window, reconciliation, refutation, or evidence that excludes an innocent explanation.
Approved architecture
Cloudflare at the edge. Railway behind the application.
The edge, BFF, private API, and PostgreSQL service boundary is live for prelaunch checks. Merchant authentication, uploads, processing, and financial features remain disabled.
Cloudflare
The current public surface is static marketing plus one contact-only waitlist handler backed by KV, with server-validated Turnstile, same-origin enforcement, and a short-lived abuse counter. The private R2 staging bucket is not an enabled public intake path; scoped credentials, retained storage, and the event control plane remain gated.
Railway
A React BFF, private FastAPI service, and PostgreSQL database run in Railway staging behind Cloudflare. The database role split, hosted RLS proof, backup/restore evidence, and merchant routes are not production-ready. The Python worker is not deployed and has no handlers.
What changes this status
Evidence earns the next label.
A feature moves from planned to live only after its phase is explicitly authorized and its security, isolation, accuracy, and release gates pass.
- 01Authorize the phaseNo later-phase service begins merely because its design exists.
- 02Prove the boundaryTenant isolation, upload controls, sealed artifacts, and fail-closed model behavior must be exercised.
- 03Certify each cellReal held-out evidence and provider adjudication are required before positive claim publication.
- 04Report the gateAuditario publishes what passed, what remains unsupported, and the date of the assessment.