The EOS operator manual
Everything after setup. Written for the person who will actually use it on a Tuesday morning.
The daily loop
Open the workspace. The list is contested figures, newest first, each with the two values, the two sources, and the evidence chain that produced them. Pick one. Read the chain. Decide, or route it to the named authority for that domain. The decision is recorded with your name, the time, and the evidence as it stood.
What each status means
Contested: two sources disagree and nobody has decided. Routed: it is with a named person. Decided: someone with authority chose, and the choice is recorded. Outcome: what actually happened afterward, recorded later. EOS never moves a finding from contested to decided on its own.
Weekly
Read the decisions from the week as a list. Two questions: did any decision take longer than it should have, and did any of them turn out wrong. Both answers belong in the outcome field, including the uncomfortable one.
Monthly
Export the workspace. It is one JSON file and it takes a second. Keep it wherever you keep your own records. This is not a backup we are asking you to make; it is proof that the data is yours and leaves cleanly.
Adding a person
Up to 10 named people in an assessment and 25 in a pilot; in the commercial term, every employee on your roster. Invite them by email and role in the organization console; they sign in with the work email on your roster and join, with no consumer identity check. A person not on your roster cannot join, even with a forwarded invitation. External parties (a supplier, a consultant, an account manager) are invited one by one with their own work email. Roles are owner, admin, buyer, controller and member, and an organization always keeps at least one owner. Single sign-on (SAML 2.0 or OpenID Connect) and SCIM provisioning from your identity provider are set up in the same console. A person who only needs to see evidence still needs a named account, because evidence with no name attached is not evidence.
Adding a connector
The assessment reads two systems of record and a pilot up to four; after that, the systems are the ones your agreement names. A connection is declared in the organization console: what it carries, its time zone and currency, how fresh it must stay, and the Secret Manager reference of its credential where one is needed. A connection beyond your scope is a conversation, not an upgrade button, because that is usually where scoping and tenancy questions start.
When a figure is wrong
Mark it. A finding marked wrong stays in the record with the reason, and the rule that produced it is shown so it can be argued with. Nothing is silently deleted; that is the whole discipline.
When the term ends
There is no minimum term: you end it at any time, for any reason, with thirty days written notice. Your export stays available for 90 days after the end date, and a deletion certificate follows within 30 days of your written instruction. The exit terms carry the rest.
Getting help
founder@assetshopenterprise.com. Include the finding id if it is about a specific figure. There is no ticket system to learn.