# CloudAudit planning package

These documents define the build-ready baseline for CloudAudit. They are specifications, not production code.

1. `01-product-requirements.md` — commercial scope, users, MVP, acceptance criteria.
2. `02-ux-screen-component-map.md` — information architecture and responsive UI system.
3. `03-accounting-posting-rules.md` — the inventory and double-entry posting contract.
4. `04-data-model-and-migrations.md` — MySQL entities, constraints, and migration order.
5. `05-api-permissions-ai-contract.md` — REST interface, RBAC, AI safety, and provider failover.

## Governing decisions

- CloudAudit is multi-tenant: all business data is scoped to an organization and, where applicable, a branch.
- Posted financial records are immutable. Corrections are made with authorised reversals or credit documents.
- Inventory and accounting are produced from the same approved transaction workflow.
- The first mobile product is a responsive PWA sharing the same API; no separate mobile backend is permitted.
- Mistral is the primary AI provider. Gemini is an observable, controlled fallback. AI never writes financial data without an approved proposal.

