Every workflow must capture explicit consent naming the exact purpose (payroll setup, supplier payment update, etc.). Use of the document outside that purpose is blocked.

Requester, reviewer and approver roles must be held by distinct identities. Authority is checked per scenario at runtime.

Supplier bank-detail changes within 48h of an outstanding invoice trigger a high-severity exception and require dual approval.

Each submitted document image is fingerprinted. Re-use of the same fingerprint across distinct workflows raises a re-used document exception.

Account numbers, transit, institution and holder details remain off-ledger. KATLAS records hashes, proofs and attributable receipts only.

Every consent, review, approval, rejection and handoff produces a signed CAR receipt referencing the actor, role, purpose and evidence hash.