When documents disagree, the pipeline refuses to guess.
The CIM states one unit count; the rent roll enumerates another. A budget column arrives dressed as actuals. A QoE lands password-protected. Most systems pick a value silently — and a year later nobody can defend it. Capital Refinery parks every unresolved disagreement in a review queue with the competing values as one-click choices, and writes the resolution — who chose what, and why — to an audit log.
Two documents, one fact, and an honest queue.
Live capture from the Falcon Services demo deal: a cross-document A/R disagreement with both source values offered as one-click resolutions, and a password-protected upload waiting for its password — because nothing can be extracted from ciphertext, and pretending otherwise is how phantom numbers are born.
Real system output — the deal workspace document-review surface, unretouched.
Four honest exits from every disagreement.
Pick a value
The easy button.
Each item carries the competing values as explicit choices — "Use 55,480 (ar_aging_total)" or "Use 21,340 (balance_sheet_ar)" — or type the correct figure. Value corrections write into the governed record through the same guarded, audited path as every operator edit. No snipe-hunting through the spreadsheet to find what disagreed.
Unlock it
Password-protected uploads are flagged, not guessed.
Every upload is swept for encryption — PDFs, Office files, archives. Protected files skip extraction entirely (ciphertext extracts nothing) and surface here with a password prompt. The password is used once to decrypt, never stored, never logged; the decrypted copy enters the pipeline as a new version.
Upload the corrected source
Or fix the document itself.
One click deep-links into the deal room with the offending document's version panel open. Upload the corrected file, re-run ingestion, and a disagreement that now ties clears its own review item — the queue empties itself when the arithmetic agrees.
Ten accounting identities decide what needs review.
Review items are not vibes — they are arithmetic. Deterministic identities recompute on every read: balance-sheet equation, debt composition, gross profit, free cash flow, aging ties, bank-truth bridges, and the offering-vs-rent-roll unit-count tie. Internal failures mean an extraction defect; cross-document mismatches mean a human call. Skipped identities are shown, never hidden — missing data must not read as clean.
The same slate ships as a signed artifact in the Falcon proof pack and stamps the verified column of the Excel Model Bridge.
Bring the deal pack that never reconciles.
The one where the CIM, the model, and the aging never quite agree. Same-day diagnostic back — with every disagreement named, not papered over.