Driver continuity
Local-first route sync
Durable capture, ordered outbox processing, idempotent replay, and evidence reconciliation are ready behind the shared API contract.
Core connectedSecure workspace
Checking your session
1 · Microsoft identity
2 · Courier access
3 · Role-scoped workspace
Authenticated operations surface
Workspace access verified
Entra established identity. Hermetic Labs independently established organization membership and role.
Identity providerMicrosoft Entra ID
→
Authorization authorityHermetic Labs Operations API
→
Operational policyOrganization + role
Chain of custody
Gated package capture
Barcode and exception-first collection flows attach evidence to stops without asking drivers to navigate an administrative system.
UI mount nextOperations intelligence
API + MCP context
One policy boundary supplies the web app, iOS wrapper, automation, and model with the same organization-scoped operational truth.
Core connectedDispatch connector fabric
One operating model, replaceable provider edges
Hermetic Labs keeps authority, package identity, audit, and recovery in the core while each dispatch service advertises its honest boundaries.
Loading governed connector capabilities…
Administrator
Workspace access
Add an exact email or a domain beginning with @, then assign the least-privileged starting role.
An access rule authorizes an existing tenant identity. External guest invitation remains a separate Entra administrative action for this pilot.