A8 Core™ and B5 Secure™. The book, and the vault it lives in.
A8 Core™ is the account operating system — the book of record for parties, accounts, positions, and the entitlements that sit on them. B5 Secure™ is the authorization layer that decides, record by record, who may see or change any one of them. One answers what is true; the other answers who may act on it. They are separate systems on purpose.
Why they are separate
A ledger that also decides its own permissions is a ledger you cannot independently verify.
The book A8 Core™
Parties, accounts, positions, directives, and executed records. Every economic fact about an account lives here, as an evidenced record rather than a mutable row.
The vault B5 Secure™
Data-element authorization for every read and write. Access is decided against the specific record and the acting party — not a role granted once and trusted thereafter.
Independent evidence
Because authorization is external to the book, the record of who was permitted to do what can be examined on its own terms, rather than being asserted by the same system that holds the data.
How a request travels
Every operation crosses both layers, in the same order, every time.
Authorized per data element
A party may hold rights over one account and none over the next. Authorization is evaluated for the record in hand, so entitlement never leaks across accounts.
Refusals are records too
A denied request is written down with its reason, which is what makes access reviewable after the fact instead of invisible.
Same path for people and systems
Staff, investors, and integrating systems all traverse the same authorization path — there is no privileged side door for machine access.
Where each one sits in the stack
Four layers, each doing one job.
InvestNow
Finds the opportunity and brings the investor to it.
A8 Core™
Clears and settles it, and keeps the book of record for the account and the position.
Investor Services
Custodies the asset under the applicable custodial and trust authority.
B5 Secure™
Authorizes every data element touched along the way, and records the decision.
See the two layers together
The clearest way to understand the split is to watch a single account open, fund, and settle — with the authorization decisions visible alongside the records they protect.