InnerPort Waste · field layer

The driver job → record loop.

One pickup, end to end: a dispatched job, the driver's four-step capture in the field, and the sealed entry it writes to the operational record. This is what makes a serviced pickup defensible — and it's why the record can say “left the facility intact,” which a manifest alone can't.

Phase A

Dispatched — the driver opens their route

A provider dispatching to its own subcontractor — not a marketplace bidding a job. The driver sees the route, container, and scanner; never customer billing (Field Agent role).

7:58▰▰▰ 5G ◗

rw Driver

Field Agent · EcoHazMat

Assigned job · 1 of 4 today

Site #006 — Pueblo Lab

jobjob_2026_06_8812A

facilityRocky Mountain Cannabis

containerIPW-DRUM-992

typeTier 4 · hazmat

window8:00–12:00

● Pending pickup

Start pickup →

No billing, pricing, or customer financials visible to drivers.

Phase B

Four steps in the field — each one captures evidence

Geofence → seal photo → QR scan → weight + confirm. Every step writes a piece of the chain of custody. The seal photo is the anchor: it proves the container left unbroken.

8:06◗

rw Driver

Step 1 of 4 · Verify seal

Photograph the seal

Geofence matched · at facility

SEAL #CO-MED-009811

img → sha256:e3b0c442…2b855

Seal intact · Next

Proves the container was unbroken before pickup.

8:07◗

rw Driver

Step 2 of 4 · Scan container

Scan the QR plate

✓ IPW-DRUM-992 matched

metrc tag…001922

job matchvalid

Unlock entry

Etched plate ties the physical drum to the job.

8:09◗

rw Driver

Step 3 of 4 · Log weight

Read the certified scale

440.0

lbs · verified

⚙State rules · CO — within 55-gal drum limits. Engine reads the job's state; a Chicago job applies IL rules.

Confirm weight

Render ratios & limits are per-state config — never hardcoded.

8:10◗

rw Driver

Step 4 of 4 · Finalize

Confirm collection

seal✓ photo + hash

container✓ IPW-DRUM-992

weight✓ 440.0 lbs

geofence✓ matched

Confirm collection

Signs the payload with the driver token, writes the record, and texts the facility manager.

⚑ exact custody wording → counsel

Phase C

The sealed entry it writes to the record

The capture becomes one append-only block in the Audit Vault — and surfaces on the operator's timeline as a serviced pickup, in the same sealed format as anything they logged themselves.

app.wasteos.com / record / GV-2406 · serviced pickup

Scheduled pickup completed SERVICED · INNERPORT WASTE 🔒 Sealed · block 14209

licenseeRocky Mountain Cannabis (403R-X0021)

carrierEcoHazMat Solutions (406-HAZ0019)

containerIPW-DRUM-992 · 55-gal steel

weight440.0 lbs (scale-verified)

seal#CO-MED-009811 · photo hashed

geofence✓ matched at pickup

Audit Vault · append-only blockFIELD_CUSTODY_TRANSFER

"block_index": 14209,
"previous_block_hash": "sha256:8f23c11b…99a01f",
"physical_evidence": {
  "seal_integrity_image_hash": "sha256:e3b0c442…2b855",
  "reported_weight_lbs": 440.0
},
"internal_accounting_trigger": {
  "cost_attribution_category": "TIER_4_HAZMAT_PULL",
  "accounts_payable_liability_generated": true,
  "accrued_subcontractor_debt_usd": 80.00
},
"signature": "MEQCIDU8yW…Valid_Driver_Token"

⛓ chained to block 14208 via previous_block_hash — alter one block and the chain breaks. Append-only, not a slogan.

💵 The pay trigger is an AP entry, not a money move. Sealing this block flips accounts_payable_liability_generated → true and accrues $80 owed to EcoHazMat — settled in InnerPort's normal Friday vendor batch from operating funds. No customer cash is swept or split. “No scan, no pay” stays; money transmission doesn't (A-037 / A-040).

who is the source of truth?

InnerPort Waste — owns

The chain-of-custody record

The logs, hashes, photos, and signatures licensees use to defend their data in an audit.

Licensee + disposal facility — own

The legal destruction

Metrc and the permitted facility remain the sole legal source of truth for the destruction itself (V-004).

Illustrative — IDs, hashes, weights, and the $80 figure are placeholders. Built per A-036/A-037/A-040: provider-to-subcontractor dispatch (not marketplace); AP liability (not banking split); evidence as content-addressable hashes in an append-only vault. Open items flagged for counsel: the exact legal characterization of “custody” at scan time (driver vs. subcontractor entity vs. licensee), and per-state render/payload rules (the engine reads the job's state — the Colorado values shown are not universal). InnerPort records and preserves; it does not certify physical destruction.