Pilot · 0.4.1 Repossession ops Hash-chained audit

One tamper-evident system of record for a vehicle-recovery case.

Repo Runner is a recovery-operations and vehicle case-management platform for repossession companies. It brings recovery cases, client records, assignment-enforced routing, live duty dispatch, deliberate on-duty GPS, fleet maintenance, lot custody, encrypted evidence, timekeeping, billing, training, state-law reference, and law-enforcement notice logs into one system — with a tamper-evident, hash-chained audit throughout. The point is efficiency: with everything in one place, your agents, dispatchers, and lot staff spend their time working cases — not chasing paperwork or proving who did what. It's a controlled production pilot.

Open Repo Runner → See the roles

8role types, strictly scoped

hash-chainedappend-only audit (UPDATE blocked)

90-daylegal-hold reviews built in

AES-256-GCMencrypted evidence & backups

Cases, crews, lots, and compliance in one console — with visibility strictly scoped to each role.

The problem

Recovery work is a compliance minefield run on spreadsheets.

Repossession companies juggle field agents, lots, lenders, and law enforcement — under real legal obligations around consumer notice, retention, and chain of custody. Most run it on a patchwork of spreadsheets and phone calls, where nobody can prove who saw what, when, or that a record wasn't altered after the fact.

Repo Runner makes the case the system of record: every role sees exactly what it's entitled to, and every sensitive action lands in a hash-chained audit that can't be quietly edited.

Compliance designed in

Append-only audit — a DB trigger blocks UPDATE
Hash-chained rows (previous_hash / hash)
30-day retention + 90-day legal-hold reviews
Law enforcement sees status only — no GPS, no messaging

Capabilities

Assignment to release — with a role for everyone.

🔁

Case lifecycle

A recovery-case state machine carries a case from assignment through custody, release, and billing.

🗺

Assignment-enforced routing

Ordered field stops that an agent can only act on when assigned.

📍

Live duty dispatch

A live dispatch map with deliberate on-duty GPS capture — location while working, not always.

🚗

Fleet & lot custody

Fleet maintenance and lot custody/release tracking, with AES-256-GCM-encrypted evidence uploads.

👁

Role-scoped visibility

An agent sees only assigned cases; a client only their own; law enforcement sees status only — no GPS or messaging.

⏱

Timekeeping & billing

Timekeeping and billing, with Intuit/QuickBooks OAuth integration wired in.

📚

Governance & training

Training modules, state-law reference governance, and law-enforcement notice logs.

🔎

Retention & export

30-day retention, 90-day legal-hold reviews, self-service export, and global search.

🔗

Shared platform services

Consumes ASL central auth, Files, Messaging, and Tickets — plus an installable PWA with an offline page.

loopback 18641single Node process, node:sqlite WAL

per-orgorganization_id everywhere, no cross-tenant read

Turnstile+ optional Keycloak TOTP/passkey login

37 testssecurity-boundaries, state-machine, retention, audit

Candid about pilot state. Repo Runner documents its own gaps honestly — the pilot org holds zero cases so far, QuickBooks billing isn't connected in production yet, and it names two known wiring gaps outright. The compliance backbone — hash-chained append-only audit, retention, legal hold, and law-enforcement-scoped views — is designed in, not bolted on. (Despite the name, this is a recovery-operations product, not a developer or CI tool.)

Make the case defensible.

Role-scoped access, encrypted evidence, and a hash-chained audit from assignment to release — purpose-built for recovery operations.

Open Repo Runner →