Relay
It asks, a person decides, it hears back. No rewrite.
Your billing software asks first
It asks
Raise Acme Ltd's credit limit from 5,000 to 20,000.
Your rule
A rule says a person approves this first.
Your rule: a credit limit over 10,000 needs an admin's yes.
The answer
A person approved it.
Ana Lima, admin, at 10:04. Its permit is for exactly this, used once, within 15 minutes.
Your software says it did it. Receipt RCP 7K2M9Q.
Your ERP, billing system or script asks Relay first. Your rules answer, and where they say a person decides, nothing happens until one does.
A yes gives a permit for the exact thing asked, used once, within 15 minutes. Change one number and it no longer fits.
Each request gets a short code, like RCP 7K2M9Q. Where the old system can take it back, the sidecar writes it there with one line about what happened. Anyone in your workspace can look it up.
If the link to the old system stops, it says what happened in one sentence, and the one thing to do. It picks up again by itself only when that's safe.
Before a risky step, it tells Relay what it wants to do, with the exact details.
Your rules answer most asks at once. The rest wait for a person, who answers from the dashboard, or from their phone once they turn on notifications.
It does the step with its permit and reports done, failed or unknown. Unknown asks a person: did this happen?
Put the sidecar next to it. It talks to your old software too: it reads what the system does, asks Relay, and writes the answer back where the system can see it. Nothing to rewrite, and no prompt to write. Cadreen never connects in to it, and a restart never loses or repeats an action.
Only what asks first: it can't stop software that doesn't. Software you can't change can ask through the sidecar wherever it writes a request before it acts: a row in a request table, a dropped file, or a call to the sidecar's local address. Everything else the sidecar can watch and record, but not stop.
Software that can call a web address asks Relay directly. For older systems there's a small program, the sidecar, that runs next to them. One command pairs it with a one-time code, so nobody copies keys by hand. It's one program, for Linux and Windows or as a Docker image, on the download page at cadreen.com/download/relay-sidecar.
Yes, by watching only. Point it at Postgres, SQLite, MySQL or SQL Server and it reads what the database does without changing anything. It refuses a login that could write, and names the privilege. Table and column names leave your network only if you allow it.
It ties the old system's record to Cadreen's. Anyone in your workspace can look up a code, like RCP 7K2M9Q, and see the whole record: what was asked, who said yes, and what happened.
It reports unknown, and a person is asked: did this happen? Nothing is marked done until someone knows.
Anything that can call a web address, with a key from your workspace. The Relay docs say exactly what's connected today.
Your software asks, your rules answer, and a person decides the rest.