Platform architectureConceptual view

Control, permission and traceability start in the platform’s shared layer.

The OneMaris architecture is designed to keep operational records, user permissions, change history and connected workflows under the same control model.

This page is a conceptual view of the product architecture. It is not an infrastructure topology, not a statement of security certification and not a statement of class approval.

Controlled operation model

Permission.
State.
Trace.
Relation.

Who may act, what state the record is in, who changed it and when, and where the action came from — combined in one model.

Shared control services

Four properties every record is designed to carry.

Permissioned

Every action is evaluated in the user’s permission context.

Seeing a screen does not mean being able to change the record. Scopes can be configured by role, record type and operational context — technical department, procurement approval scope, voyage and bridge duties.

Traceable

The actor and time of a change can be recorded.

Operation history (“what happened to this equipment or record?”) and the audit trail (“which user performed which action?”) are kept as two separate lines and are not used in place of each other. Record time is kept consistent so that vessel and office clocks do not break traceability.

Linked

Related records keep their source references.

Work order, requisition, purchase order, goods receipt, defect and voyage each keep their own identity; the relation is kept visible as the process moves on rather than dissolving into the next record.

Controlled

Reading, changing and approving are not the same action.

View, search, open and review are separated from create, edit, submit, approve and cancel by a permission check. State transitions follow the business rules of each record type.

Record model

How a record lives, locks and is corrected.

Record lifecycle

A record is more than its current state.

Draft, submitted, reviewed or approved, active or issued, completed or closed — transitions are governed by the record type’s own rules.

Locked states

Leave a new trace instead of rewriting history.

Certain decided commercial records — a received quotation, an issued purchase order, a posted goods receipt — are corrected through controlled new actions such as reversal or cancellation. The original record stays in history. This is not presented as a general rule for every record type.

Controlled approvals

Starting an action and deciding it can be separated.

Approval flows apply only to supported record types — requisition, purchase order and postponement. In the supported procurement flows the user who created a request cannot approve it. No approval step is claimed for other record types.

Operation integrity

A half-finished action must not break the record chain.

Connected critical changes are designed to be handled as one operation: validate, apply the related changes, commit — or roll back. Resubmitting the same critical action, such as posting a goods receipt, must not create a duplicate record.

Inventory movements

Stock is followed through its movement history.

Receipts, issues, returns and adjustments leave a traceable history from which the current quantity follows.

Evidence and timeline

Evidence stays with the record; events read on one timeline.

Measurements, photos, documents and notes are attached to the same record, and events from separate record types are designed to merge into one history view of that record.

Context and direction

Vessel context today, wider boundaries as the platform grows.

Vessel context

A record does not lose the vessel it belongs to.

Equipment, work orders, defects, requisitions, voyages and certificates are kept with their vessel context; the context is part of the record’s identity.

PLATFORM DIRECTION

Company and fleet boundaries.

Wider company and fleet data boundaries are part of the platform’s expansion architecture. Vessel and office use are intended to progress on a common record model.

PLATFORM DIRECTION

Limited-connectivity design.

The assumption that a vessel’s connection may be slow, intermittent or limited is part of the product design. Recently viewed screens can be read without a connection; data entry requires a connection. An offline entry and synchronisation model is one of the platform’s technical development areas.

AI control boundary

AI is not above the permission model.

The assistance layer reads permitted records, produces summaries and drafts and leaves the action to the user. Uncertain permission does not mean automatic permission: outside the known scope the outcome is block or review. This is defined as an architectural principle, not a security statement that every edge case has been verified.

See not only the outcome of an operation, but how it came to be.

Designed to support operational records and follow-up workflows related to ISM, SOLAS, MARPOL, STCW, GMDSS and PSC requirements — without claiming compliance on the operator’s behalf.

See our approach

Explore OneMaris