User's manual — UER Delegation of Authority

1. What this hub is

The Delegation of Authority hub (doa.uerllc.com) is the register of record for every authority that United Engineering Hydrocarbon Technology LLC (UER) lends to a person: shareholder representative designations, internal signature authorities, and powers of attorney for external use.

Why it exists. The JVA principle is that two directors sign. To keep the company workable in practice, the shareholders delegate to the governance framework the power to issue limited authorities — limited in scope, in value, and in time. Those delegations are written instruments; they work externally when issued in writing and authorized for external use. This register is where they live, so that anyone — a bank, a counterparty, a shareholder — can verify who may sign for what, until when, and up to which amount.

2. The four rules

Rule	Meaning in this hub
Written, or it does not exist	No entry in the register, no authority. Verbal arrangements are not recognized.
Limited in scope, value, and time	Every delegation carries a verbatim scope, an optional value cap (OMR), and a validity window. An entry with no end date is not possible.
My signature, my responsibility	Whoever signs under a delegation is expected to have read and understood the instrument. The register records who holds what — accountability follows the name.
Four eyes at the top	Raising, suspending, revoking, and archiving entries is restricted to owner/editor roles; the diary shows who changed what and when.

3. Signing in

The hub sits behind Cloudflare Access (zero trust): enter your email address, receive a one-time PIN, enter it. Your identity on every action is the PIN-verified email — typed names are display labels only. The owner receives a sign-in alert on the first visit from each browser. A valid sign-in that the application does not know (no row under Admin) is refused and alerts the owner.

4. Kinds of delegation

Kind	Use
`shareholder`	Designation of a shareholder's representative — one living, named natural person per shareholder. There can be only one active per shareholder (the Highlander rule, section 6).
`internal`	Internal signature authority, e.g. a project or contract manager who may sign within a defined scope and value cap.
`poa`	Power of attorney intended for use outside the company (banks, authorities, counterparties). Must be flagged authorized for external use.

5. The lifecycle

Status	Meaning	Possible next steps
`Issued`	Raised in the register, not yet in force.	Activate · Revoke
`Active`	In force within its validity window.	Suspend · Revoke
`Suspended`	Temporarily out of force; a named delegate holds the authority meanwhile.	Reactivate · Revoke
`Expired`	Validity window has passed (the register sweeps this automatically).	Archive
`Revoked`	Withdrawn before expiry.	Archive
`Archived`	Closed file, kept for the record. Owner only.	—

Suspension needs a delegate. Suspending an entry requires naming a registered person who holds the authority for the suspension period, plus a reason (leave, travel, illness). Reactivating clears the delegate. This is how the "assigns his role when unavailable" principle is executed in practice.

Original filed. Every entry carries a wet-original checkbox. A delegation that works on paper must have its signed original on file; the register flags Active or Suspended entries whose original is still open in red on the main board.

6. The Highlander rule

There can be only one. The register refuses a second active entry with the same holder and the same title — in particular, a shareholder has exactly one designated representative at any time. If the representative is unavailable, the entry is suspended and a delegate is named; a second, parallel full authority for the same shareholder is not possible.

7. The bank extract

/extract.html shows only entries that are Active and authorized for external use — nothing else. It is the page to hand to a bank or counterparty. If a name is not on the extract, that person holds no externally usable authority as of the timestamp on the page.

8. Roles and clearance

Role	May do
`viewer`	Read the register, entries, and the extract.
`editor`	Additionally raise delegations and run lifecycle transitions.
`owner`	Additionally manage people (Admin), archive entries, and set the original-filed flag.

Clearance levels (1–5) follow the house access matrix; the register shows each person only what their clearance covers.

9. The diary

Every transition is written to an append-only diary on the entry page: from status, to status, by whom (PIN-verified email), when, and why. The diary cannot be edited or deleted — it is the audit trail behind "written, limited, provable."