When a task mirrors a System-of-Record object — an SAP purchase order, an invoice — it must never be marked done on an agent's word alone. This kernel derives the task's close-out state from the ledger status of its attached references: done only when every reference is confirmed, verifying_ledger while any is pending, failed if the ledger rejects one. Toggle each reference and watch the gate.
Honest scope. A deterministic, signable state machine in the same family as the signing-limit and coalition kernels. A live, authenticated API endpoint implements it — POST /api/sor stores references in a task_object_refs table and runs this exact kernel server-side to refuse close-out until every reference is confirmed (API-only today — not yet wired into the in-app task checkbox). EcoCloud ships no SAP/Oracle connector and never executes the transaction or moves money — you build the integration that fetches the verdict and POSTs it (over MCP, OData, RFC/BAPI, or anything else; none of that is in EcoCloud today). The gate is only as strong as who you let confirm: a terminal confirmed/rejected verdict requires a connector secret or a workspace admin, and is recorded with its attestor — a human admin confirming is an attestation, not an autonomous System-of-Record check. Source: flowdesk-ledger-kernel.js.