Skip to main content

Guardrails

Before anything is ordered, every line is checked against the kitchen’s permission slip. The answer is always one of three things, with a sentence you can read:

ResultMeaning
Order aloneWithin every rule
Ask a personAllowed only after someone signs
StopHard no

The same checks run in the kitchen app and again at Valio’s door.

Cart linesLactose-free milk, usualOat crème fraîche (substitute)Tortillas, supplier stockGrated cheese, no allergen dataMilk, 5,000 LCooking cream, usualshared/policyevaluate(slip, lines, context)slipagent keyoffercategoryallergenadds allergendiet claimline caporder €daily/weekly €substitutenew productOTIF barValio rulesdriftconfidenceOrder automaticallyAsk for approvalBlockLactose-free milk, usualOat crème fraîche (substitute)adds allergenTortillas, supplier stockOTIF barGrated cheese, no allergen dataallergenMilk, 5,000 Lline capCooking cream, usualorder over €500outcome: needs_approval
9/9PolicyResult: outcome needs_approval (the worst line), each line with its reasons, the order's reasons, and the rules skipped for lack of data.

What gets checked​

CheckIn plain words
Slip validPermission slip is current and intact
Right keyRequest comes from the kitchen’s authorised buyer
Offer signaturePrice and stock were really signed by Valio, not stale
CategoryProduct is allowed for this kitchen
AllergensNo forbidden allergens
Substitute allergensA swap does not introduce a new allergen
DietClaims match kitchen diet rules
Line capsQuantity within per-product limits
Order spendTotal within the per-order maximum
Rolling spendDay and week totals within caps
SubstitutesKitchen substitute policy applied
New productsFirst-time products need a person
On-time barDelivery chance meets the kitchen’s bar
Valio rulesCut-off, credit, minimum order
Unusual quantityFar above the usual amount (kitchen side)
Low confidenceMatch was unsure (kitchen side)

A human can pre-approve a staple (new product / on-time / confidence) up to a set amount. Learning never weakens diet or budget without a new signed slip.

Proof: 29 of 29 attack cases refused. Threats · How signing works