Governed · Gated · Audit-First

Fusion FDAI OS
One system for every project

A governed AI operating system for Fusion Developers — documents, commercial, approvals and client portals under one roof, with human-in-the-loop gates on every high-risk decision.

7Gated stages
110Tests passing
0Cost leaks to client
10yrRetention model
Live Pilot · UAS Marquee 80×150

Concept → Complete, governed end-to-end

The UAS Marquee pilot was driven through every gate on the live stack. Each gate required the right role and, where mandated, an independent AI-checker verdict before the Chairman could approve.

Non-delegable gates (G4 Award, G5 Contract, G6 Variation, G7 Handover) require the Chairman (admin) seat only — enforced by DR-14, never a client-supplied role.
DR-12 · DR-14 · DR-07 · DR-13

Cost stays internal. Approval stays human.

Four governing rules make FDAI OS safe for real client work — once the legal and PEC sign-offs land.

DR-12 — Client never sees cost

BOQ line (internal)unit_cost 310 · margin 18%
BOQ line (client view)unit_cost • margin • supplier
Keys leaked to client0

Every response is passed through a sanitizer that strips cost/margin/supplier keys the moment the caller is a client. Verified on the live API: zero leaks.

DR-14 — Chairman sole approver

Client / staff approve403 denied
Non-delegable gatesG4 · G5 · G6 · G7
Chairman approve200 OK

No agent approves its own high-risk output. The four non-delegable actions can only be cleared by the admin seat, and every denial is itself audited.

DR-07 — AI checkers, not AI sign-off

FDAI-IBC-001 (BOQ)clears Gate G4
FDAI-IDC-001 (Design)clears G2 · G6
Approval authorityHuman only

Independent AI checkers pre-clear engineering and commercial gates. They can block — they cannot approve. A PEC-registered engineer must counter-sign before any drawing reaches a live site.

DR-13 — 10-year retention

Contracts / BOQ / audit10-year hold
Legal holdnever purged
Delete policyarchive only

Nothing is ever hard-deleted. The retention model reports what would be purged and stops on legal hold — deletion is a human-approved act. Pending Tariq Mahmood legal sign-off.

Client Portal · /p/uas-marquee

One hostname. Path-based client views.

fusionos.aiomatic.pk hosts every client project at its own path. The client sees only what the current gate unlocks.

Sections visible to the UAS client right now

Audit trail for this pilot: append-only entries. Commercial cost, contract sum and supplier rates are intentionally absent from the client view.