Current Build Architecture
OursYours is built on a property-centric, event-sourced architecture where every property, user, and trust exists in its own independent, append-only data container with hash-chain integrity verification.
This model ensures audit isolation, legal defensibility, and property portability — allowing a single property's entire history to be exported as an immutable JSON package.
Core Principle
Think of each property like a digital folder with sub-folders, a full event history, and independent recoverability. Corruption is isolated, ownership transfers cleanly, and audits only require the specific property container.
Each property is its own independent, immutable data domain
Independent container per trust/ownership vehicle
Per-user event log with multi-role support
Event Sourcing
All changes are stored as immutable events. State is rebuilt from the event sequence. This provides a complete audit trail and enables point-in-time reconstruction.
Each event includes a SHA-256 hash computed from: event_id + timestamp + actor + payload + previous_hash. Any tampering breaks the chain, making alterations immediately detectable.
Hybrid Architecture
Each layer has a single responsibility. Property containers are the source of truth; other layers serve performance, storage, access control, and integrity verification.
Append-only event logs with hash-chain integrity
Events are never edited — only appended. State is rebuilt from events.
Materialised operational views for fast queries
Users query views, not raw event logs. Views are synced from events.
Document storage with metadata separation
Documents stored externally; only metadata in database. Access via short-lived signed URLs.
Granular permissions per property and role
Different users see different data for the same property based on their role and grants.
Tamper-evident records with cryptographic verification
Any tampering breaks the hash chain, making alterations detectable.
Database Schema
The event-sourced architecture uses a dedicated namespace with full RLS policies.
Property identity & classification
Immutable property event log
Lease sub-container
Maintenance sub-container
Compliance sub-container
Financial transactions
Document metadata
Granular access control
Trust/entity identity
Immutable trust event log
Unit holder registry
Per-user activity log
Security Status
Append-only event logs with immutable history
All changes recorded as events in es_property_events, es_user_events, es_trust_events
SHA-256 cryptographic verification of event sequences
Each event includes previous_event_id and event_hash for tamper detection
Each property is an independent, recoverable data domain
Corruption in one property cannot affect others; full export via es_export_property_container()
Investor, Professional, Admin, Settlement, Contractor, Tenant roles
user_roles table with has_role() security definer function
Database-level access policies on all tables
RLS enabled on all es_ tables with proper user/property scoping
Immutable audit log of all professional actions
professional_action_events with SHA-256 hashing and automatic capture
Enterprise document storage with encryption
Service layer ready; Supabase Storage active fallback; awaiting AWS credentials
30-minute idle timeout with MFA enforcement
Automatic session refresh, login history, device tracking
Strategic Value
This model is required because properties are legal assets, disputes require isolated records, trusts need immutable history, and the platform will host millions of assets.
Summary
This architecture positions OursYours to scale to 2M+ daily users and millions of properties without owning assets, competing with listings portals, or acting as a fund manager — while capturing deep structural value as the infrastructure layer for modern property ownership.
Security & Compliance
OursYours is built on the same governance and security principles used by institutional property funds — applied to individual ownership for the first time.
Unit trusts established under Australian law with independent corporate trustees and full fiduciary obligations.
All documents stored with role-based access controls — only the right people see the right information at the right time.
Every action — document upload, approval, message, vote, distribution — is timestamped, attributed, and permanently recorded.
All users and professionals are identity-verified. Professionals are credential-checked before being listed on the platform.
OursYours does not hold an Australian Financial Services (AFS) licence and does not provide financial, legal, or tax advice. All professional advice is provided by independently verified practitioners engaged directly by you. OursYours is infrastructure — not an adviser, fund manager, or lender.
The unit trust structure used in the Ours pathway is designed to hold property directly and has been structured with the intention that it does not constitute a managed investment scheme under the Corporations Act 2001. This position has been reviewed with legal counsel. All owners should seek independent legal advice specific to their circumstances.