Trust
What you can check today.
Each item links to the code or docs that show it. No certifications yet, and we say so.
The money
Figures that can’t drift, and a history that can’t be rewritten.
- Permanent postings A correction is a reversal, never an edit
- Exact decimals At each currency’s own precision, never a float
- An append-only decision journal SHA-256 of each entry; the database refuses changes
- Versioned, cited tax rules Activated only by a person at a terminal
- The model never computes Agents call Salli’s engines and quote the figures
- An audit log of agent writes Each one recorded, and never updated
- Tax only from your active rules In scenarios too; never worked out by the AI
- Holdings meet the ledger A mismatch is noted, never silently fixed
| Account | Debit | Credit |
|---|---|---|
| Oct 1, 2026 October salary 000000c9 | ||
| Checking | 5,000.00 | |
| Salary | 5,000.00 | |
| Oct 3, 2026 Rent for October Reversed 000000ca | ||
| Rent | 1,800.00 | |
| Checking | 1,800.00 | |
| Oct 5, 2026 Weekly groceries 000000cb | ||
| Groceries | 412.35 | |
| Credit Card | 412.35 | |
| Oct 3, 2026 REVERSAL: Rent for October Reverses 000000ca 00000bb8 | ||
| Checking | 1,800.00 | |
| Rent | 1,800.00 | |
- 09:41:02 audit_log post_journal_entry {"description": "Weekly groceries", "amount": "412.35", "currency": "USD"} approved
- 09:41:02 journal_entry 000000cb posted: Dr Groceries 412.35, Cr Credit Card 412.35
- 09:44:17 journal_entry 00000bb8 posted: REVERSAL: Rent for October, reverses 000000ca
- 09:52:40 audit_log activate_tax_rule_set {"version": 2, "content_hash": "b2b2b2b2b2b2…"} approved
- 10:03:11 decision recorded: chosen "Keep as is", hash sha256:… verified
The software
Run by you, built in the open, released with care.
- Self-hosted On your servers; nothing is sent to us
- argon2id and opaque sessions Only hashes of sessions and tokens are stored
- SBOM and provenance On every server image, pushed after approval
- Staged npm releases Reach no one until approved with 2FA
- Secret scanning in CI gitleaks on every pull request
- Private vulnerability reporting Through GitHub, acknowledged within days
- Digests that name nothing Kinds, counts, dates and a link; opt-in
Not yet
What a buyer may look for, and won’t find yet.
- No certifications yet No SOC 2, no ISO 27001
- No single sign-on yet Salli keeps its own accounts
- No firm-level roles yet The owner adds members, each with their own ledger
- No external security assessment yet No penetration test to share
Become a design partner.
A paid pilot of four to six weeks on your own client cases, run alongside the way you work today.
By email to hello@salli.money. No form, no tracking.