Ledger-grade correctness

Loyalty points are liabilities. LoyaltyGrid treats them like a financial system — append-only history, derived balances, exact arithmetic, and reconciliation you can defend in audit.

Principles we do not compromise

Balances are materialized views. The ledger is the source of truth. Every mutation is idempotent, audited, and tenant-scoped.

  • Append-only ledger

    Value is never edited in place. Credits and debits are immutable entries; corrections are new compensating lines with full audit context.

  • Exact integer math

    No floating point for points, miles, or currency equivalents. What you earn, burn, and expire is exact — at any scale.

  • Idempotent mutations

    Retries from mobile apps, billing files, or batch jobs cannot double-credit or double-spend. Idempotency keys are first-class on every write.

  • FIFO expiry

    Per-lot expiry with first-in-first-out burn order. No silent balance drift when points age out of the program.

Conservation & reconciliation

Sum of ledger entries equals materialized balance. Drift is detectable, not discoverable months later in a spreadsheet.

  • Derived balances

    Displayed balances are computed from ledger history — never authoritative rows you edit by hand.

  • Reconciliation tooling

    Your team can detect and investigate divergence between ledger sums and materialized views before it becomes a member dispute.

  • Audit trail

    Every value-changing action records who, what, when, and which tenant — tamper-evident and never silently deletable.