The product
A daily account that reconciles itself
CRA Sentinel takes the readings an attendant already writes down, prices them at the price that applied, and tells an owner in one figure whether the money adds up.
Every screen
Nine things, and nothing else
A forecourt is run by people with their hands full. The console is kept to what a station owner can name.
Today
Expected, accounted and the difference for every station, with a trend behind it and the payment split beside it.
Daily accounts
Every shift, newest first. Open one to enter meters, record what came in, log what went out and close it.
Stations & pumps
The forecourt as the system sees it: stations, pumps, nozzles, and which fuel each nozzle dispenses.
Expenses
Filterable, exportable, with receipts attached and a clear line between money that came out of the takings and money that did not.
Discrepancies
Every meter that did not continue, with both readings, who entered them, the explanation and the decision.
Audit trail
Append-only and hash-chained, exportable as CSV, verified on every read.
Team
Owners, station managers and attendants — each seeing only the stations they are assigned to.
Reports
Daily, by shift, by station, by product, by attendant, by payment method, plus shortages and discrepancies. Each one exports.
Settings
Currency, timezone, tolerances, and what a meter mismatch does to a shift that is trying to close.
Roles
An attendant's screen is four items long
Hiding what somebody cannot do is a kindness. Refusing it is a control — and the server refuses it regardless of what the browser shows.
- Owner — every station, every figure. Creates stations, adds people, changes prices, manages the subscription.
- Station manager — the stations they are assigned to. Approves discrepancies, finalizes and reopens shifts, reviews expenses.
- Attendant — enters readings, records payments and expenses, submits the shift. Cannot finalize it, and cannot see another station.
- A manager or attendant with no station assigned sees nothing. That is the correct answer and never what anyone intends, so at least one assignment is required.
Locking
A finalized shift is finalized
A figure that can be quietly edited is not a record.
- Finalizing locks the shift. Readings, payments, expenses and adjustments all refuse to change.
- Reopening it is a manager's decision and needs a reason, which goes into the audit trail.
- Once a shift has been finalized at least once, every later change to a figure needs its own reason too.
- Both values are kept. “Cash changed from ₦800,000 to ₦820,000 by a manager, because a POS transaction was entered as cash” is one row a report renders.
What CRA Sentinel will not do
CRA Sentinel reports the difference it measures and records who entered every figure. A difference is not by itself evidence of theft, and what it means remains a judgement for the owner.