- Client, matter, worker, and engagement
- Bind every candidate and entry to stable provider, client, matter, engagement, worker and role identifiers; enforce current team and ethical-wall access; version fee and billing terms; expire closed or transferred matters; and never use name similarity to cross a boundary.
- Actual duration and source integrity
- Preserve event and source times, timer changes, interruption and overlap; require worker confirmation; separate elapsed, actual, captured, billable and adjusted time; retain late-entry reasons; reject unsupported reconstruction; and never infer labor from mere presence or software telemetry.
- Rate, guideline, taxonomy, and arithmetic
- Version effective rate, fee arrangement, increment, rounding, cap, budget, task, activity, expense and narrative rules; run exact duration and total arithmetic; show original and adjusted values; and keep structural standards downstream of professional fee judgment.
- Confidentiality and minimal narrative
- Use the minimum permitted metadata and narrative, isolate clients and matters, block unapproved content, protect privilege and personal data, warn on sensitive terms, keep source content out of external tools unless approved and provide a complete manual and redaction path.
- Professional review and invoice separation
- Separate record, attest, classify, review, adjust, approve prebill, issue invoice, appeal, credit and account capabilities; verify delegation, require reasoned changes, freeze approved versions, scope exports, use idempotency and retain client and accounting receipts without moving money.
- Worker rights, security, retention, and recovery
- Provide clear notice and controls, minimize surveillance, support access and challenge, protect credentials and data, monitor exports and administration, test backup and restore, reconcile after outages, retain by engagement and qualified policy, delete safely and revoke providers on exit.