> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vinmake.com/llms.txt
> Use this file to discover all available pages before exploring further.

# The direction

> Where GreatBook is going: the autonomy ratchet, analytics over the same book, multi-org, and the constraints that will not move.

# The direction

This page is **direction**, not commitment.
Nothing here has a date, and everything here is subject to the constraints at the bottom, which are the parts that will not move.

For what is tracked and scheduled, read [What is next](/greatbook/changelog/roadmap).
For what runs today, read [What is live](/greatbook/status).

<Info>
  **Status legend:** ⚪ **Planned** · 🔵 **Future**
</Info>

## The autonomy ratchet 🔵

GreatBook's agents are deliberately narrow today: the Clerk files and never fixes, the Bookkeeper drafts and pauses, the Auditor reads and never writes, the Accountant proposes and never posts.

The direction is to widen that **by earning it**, one measurable class of work at a time:

| Step                                                                               | What has to be true first                                                                               |
| ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- |
| an agent's proposal is right often enough to be reviewed faster                    | a graded eval on that class of document, with a published rate                                          |
| a class of low-risk work posts on a standing grant rather than a per-item approval | a written mandate scoped to that class, revocable, with every posting still attributable                |
| a review becomes an exception queue rather than a full queue                       | the reconciliation graph making "nothing to look at here" a *verified* statement rather than an absence |

The rule underneath it: **starts closed and earns openness.**
Autonomy is granted against a measured rate on a named class of work, never assumed from a demo.

<Warning>
  A standing grant is not a relaxed control.
  It moves *when* a human decides - from per-item to per-class, in advance and in writing - and it never removes the requirement that a posting is attributable to a person who could have refused it.
</Warning>

## Analytics over the same book 🔵

The direction is read-only analytics and planning over the dimensioned ledger: dashboards, budget versus actual, forecasting, and the longer enterprise-performance line.

The endpoints that exist today are already portable Postgres queries over the dimensioned GL rather than being tied to one cube engine, which is what keeps this an extension rather than a migration.

<Warning>
  **The constraint that will not move:** analytics *reads* the book.
  It never becomes a place where a number is computed differently from how the ledger computes it.
  Two answers to the same question is the exact failure the single writer exists to prevent, and a reporting layer with its own arithmetic re-creates it one layer up.
</Warning>

## Multi-org onboarding ⚪

Row-level security is org-scoped from the first migration, and a cross-org caller already sees zero rows - so multi-tenancy is a property of the schema rather than something to retrofit.

What multi-org needs is the surrounding product: a per-session org context forwarded end to end rather than a single-org default, an onboarding path that seeds a chart and rails for a new book, and per-tenant policies for the authenticated database role.

The chart itself is already designed for it: the IFRS core is the design standard and the Vietnamese statutory codes are carried as a **mapping**, so a second jurisdiction is a new projection rather than a second set of accounts.

## Deeper document coverage ⚪

146 document types are declared and classifiable today; the Bookkeeper's document lane posts one accounting effect.

The direction is to widen that lane one effect at a time, each with its posting rule, its sub-ledger row, its Close checksum, and its worked eval case - in that order.
A document type that can be classified but not posted is honest; a document type that posts by a rule nobody tested is not.

## What will not change

These are the commitments the rest of the roadmap is written inside.

| Commitment                    | Consequence                                                                                 |
| ----------------------------- | ------------------------------------------------------------------------------------------- |
| **one writer to the ledger**  | every new capability funnels through it, including anything an agent or an integration does |
| **immutability**              | a correction is always a new entry, never an edit, whatever the source of the correction    |
| **a human on the money path** | an agent may draft, propose and refuse; releasing a posting is a person's act               |
| **refuse rather than guess**  | a new posting rule adds a mapping or raises. It never adds a fallback                       |
| **name what is not built**    | a status page that says everything is green is not a status page                            |

## Related

* [What is next](/greatbook/changelog/roadmap) - the tracked list
* [The GL pipeline](/greatbook/gl/roadmap) - the ledger's own roadmap
* [The guarantees](/greatbook/guarantees) - the commitments above, in full
* [What is live](/greatbook/status) - the honest status board