Current Build Architecture

    Event-Sourced Property Containers

    OursYours is built on a property-centric, event-sourced architecture where every property, user, and trust exists in its own independent, append-only data container with hash-chain integrity verification.

    This model ensures audit isolation, legal defensibility, and property portability — allowing a single property's entire history to be exported as an immutable JSON package.

    Architecture Status:
    7 Complete
    1 AWS Ready

    Core Principle

    Every Property = Its Own Immutable Data Container

    Think of each property like a digital folder with sub-folders, a full event history, and independent recoverability. Corruption is isolated, ownership transfers cleanly, and audits only require the specific property container.

    Property Containers

    es_property_containers
    Complete

    Each property is its own independent, immutable data domain

    Features

    • Unique property ID with external/legacy mapping
    • Ownership pathway (Ours/Yours) classification
    • Strata plan & lot number integration
    • Container-level hash for integrity verification
    • Soft delete with audit trail

    Sub-Containers

    Leases
    Maintenance
    Compliance
    Financials
    Documents

    Trust Containers

    es_trust_containers
    Complete

    Independent container per trust/ownership vehicle

    Features

    • Trust type classification (Unit Trust, SMSF, Company)
    • ABN/ACN registration
    • Unit register with holder tracking
    • Settlement and AGM date tracking
    • Container hash verification

    Sub-Containers

    Unit Register
    Transfers
    Resolutions
    Distributions

    User Containers

    es_user_events
    Complete

    Per-user event log with multi-role support

    Features

    • Profile & role management
    • Linked properties & trusts
    • Activity audit log
    • Multi-role capability (Investor, PM, Tenant, Contractor)
    • Event hash chain

    Sub-Containers

    Activity Log
    Permissions
    Communications

    Event Sourcing

    Nothing Ever Edits a Record — Only Events Are Added

    All changes are stored as immutable events. State is rebuilt from the event sequence. This provides a complete audit trail and enables point-in-time reconstruction.

    Property

    created
    updated
    archived
    transferred
    acquired

    Ownership

    transferred
    acquired
    divested

    Financial

    payment_received
    payment_made
    distribution_made
    levy_issued

    Lease

    lease_commenced
    lease_renewed
    lease_terminated
    rent_reviewed

    Maintenance

    job_created
    job_assigned
    quote_approved
    work_completed

    Compliance

    inspection_scheduled
    inspection_completed
    certificate_issued

    Trust

    unit_issued
    unit_transferred
    resolution_passed
    agm_held

    Document

    document_uploaded
    document_signed
    document_acknowledged

    Hash-Chain Verification

    Each event includes a SHA-256 hash computed from: event_id + timestamp + actor + payload + previous_hash. Any tampering breaks the chain, making alterations immediately detectable.

    Hybrid Architecture

    Five Coordinated Layers

    Each layer has a single responsibility. Property containers are the source of truth; other layers serve performance, storage, access control, and integrity verification.

    1

    Source of Truth

    — Property Containers (es_ namespace)
    Complete

    Append-only event logs with hash-chain integrity

    es_property_events — SHA-256 hash-chained
    es_user_events — per-user audit trail
    es_trust_events — trust governance log
    Immutable history, no destructive edits
    Exportable as JSON package per property

    Events are never edited — only appended. State is rebuilt from events.

    2

    Performance Layer

    — Supabase / PostgreSQL
    Complete

    Materialised operational views for fast queries

    Relational tables with RLS policies
    Real-time subscriptions via Supabase
    Role-based access control
    Optimised indexes for viewport queries
    Server-side RPC functions for aggregations

    Users query views, not raw event logs. Views are synced from events.

    3

    File Storage

    — AWS S3 (Ready) / Supabase Storage (Active)
    Ready

    Document storage with metadata separation

    Supabase Storage as active fallback
    AWS S3 integration ready (signed URLs)
    KMS encryption per property planned
    Versioning & lifecycle management
    WORM support for trust records

    Documents stored externally; only metadata in database. Access via short-lived signed URLs.

    4

    Access Control

    — Role-Based + Property-Scoped
    Complete

    Granular permissions per property and role

    es_property_access table with scoped permissions
    View, Edit, Delete, Export, Manage flags
    Scope controls: Leases, Maintenance, Financials, Documents
    Grant/revoke with expiry dates
    Full audit trail of access changes

    Different users see different data for the same property based on their role and grants.

    5

    Audit & Integrity

    — Hash-Chained Event Verification
    Complete

    Tamper-evident records with cryptographic verification

    SHA-256 hash chain per event sequence
    Previous event ID linking
    Actor metadata (user, role, IP, user agent)
    Source system tracking
    Container-level hash verification

    Any tampering breaks the hash chain, making alterations detectable.

    Database Schema

    Implemented Tables (es_ Namespace)

    The event-sourced architecture uses a dedicated namespace with full RLS policies.

    es_property_containers

    Property identity & classification

    Core container
    es_property_events

    Immutable property event log

    Hash-chained
    es_property_leases

    Lease sub-container

    Materialised state
    es_property_maintenance

    Maintenance sub-container

    Materialised state
    es_property_compliance

    Compliance sub-container

    Materialised state
    es_property_financials

    Financial transactions

    Materialised state
    es_property_documents

    Document metadata

    Materialised state
    es_property_access

    Granular access control

    Per-user/property
    es_trust_containers

    Trust/entity identity

    Core container
    es_trust_events

    Immutable trust event log

    Hash-chained
    es_trust_unit_register

    Unit holder registry

    Materialised state
    es_user_events

    Per-user activity log

    Hash-chained

    Security Status

    Security Implementation Status

    Event Sourcing Architecture

    Complete

    Append-only event logs with immutable history

    All changes recorded as events in es_property_events, es_user_events, es_trust_events

    Hash-Chain Integrity

    Complete

    SHA-256 cryptographic verification of event sequences

    Each event includes previous_event_id and event_hash for tamper detection

    Property Container Isolation

    Complete

    Each property is an independent, recoverable data domain

    Corruption in one property cannot affect others; full export via es_export_property_container()

    Multi-Role Authentication

    Complete

    Investor, Professional, Admin, Settlement, Contractor, Tenant roles

    user_roles table with has_role() security definer function

    Row-Level Security (RLS)

    Complete

    Database-level access policies on all tables

    RLS enabled on all es_ tables with proper user/property scoping

    Professional Action Ledger

    Complete

    Immutable audit log of all professional actions

    professional_action_events with SHA-256 hashing and automatic capture

    Document Storage (AWS S3)

    Ready

    Enterprise document storage with encryption

    Service layer ready; Supabase Storage active fallback; awaiting AWS credentials

    Session Management

    Complete

    30-minute idle timeout with MFA enforcement

    Automatic session refresh, login history, device tracking

    Strategic Value

    Why This Architecture

    This model is required because properties are legal assets, disputes require isolated records, trusts need immutable history, and the platform will host millions of assets.

    Benefits Delivered

    • Legal defensibility — complete immutable audit trail
    • Subpoena readiness — export property as one package
    • Corruption isolation — each property independent
    • Trust-compatible — immutable unit register
    • Point-in-time reconstruction from events

    Future Extensibility

    • New modules via new event types — no migrations
    • Analytics products without security compromise
    • Data rooms for lender due diligence
    • Insurance & tokenisation ready
    • Acquirable architecture — institutional-grade

    Summary

    Institutional-Grade Infrastructure

    This architecture positions OursYours to scale to 2M+ daily users and millions of properties without owning assets, competing with listings portals, or acting as a fund manager — while capturing deep structural value as the infrastructure layer for modern property ownership.

    Event-Sourced
    Hash-Chained
    Container-Isolated
    AWS-Ready
    Acquirable

    Security & Compliance

    Institutional-grade infrastructure. Built for trust.

    OursYours is built on the same governance and security principles used by institutional property funds — applied to individual ownership for the first time.

    Regulated trust structures

    Unit trusts established under Australian law with independent corporate trustees and full fiduciary obligations.

    Encrypted document storage

    All documents stored with role-based access controls — only the right people see the right information at the right time.

    Full audit logging

    Every action — document upload, approval, message, vote, distribution — is timestamped, attributed, and permanently recorded.

    AML/KYC & professional verification

    All users and professionals are identity-verified. Professionals are credential-checked before being listed on the platform.

    No financial advice. No conflict.

    OursYours does not hold an Australian Financial Services (AFS) licence and does not provide financial, legal, or tax advice. All professional advice is provided by independently verified practitioners engaged directly by you. OursYours is infrastructure — not an adviser, fund manager, or lender.

    Regulatory position

    The unit trust structure used in the Ours pathway is designed to hold property directly and has been structured with the intention that it does not constitute a managed investment scheme under the Corporations Act 2001. This position has been reviewed with legal counsel. All owners should seek independent legal advice specific to their circumstances.

    General information only. Not financial, legal, or tax advice. OursYours does not provide financial advice and does not hold an AFS licence. Seek independent professional advice before making ownership decisions.