Seven governing rules
Purpose limitationEvery data class maps to an approved operational purpose.
Affirmative authorityThe providing party must have authority.
Data minimizationPrefer derived need over unrestricted raw feeds.
FreshnessSafety-critical observations expire and fail closed.
ProvenanceRetain source, device, times and transformation version.
Separation from controlRead access never implies command authority.
RevocationConnections and scopes are independently disable-able.
Access depends on the job.
| Class | Permitted use | Boundary |
|---|---|---|
| Vehicle energy state | Range and charging need | Assigned fleet and mission |
| Location | Matching and authorized arrival | Precision minimized by stage |
| Mobile asset state | Capacity and readiness | Owner and matched mission |
| Commercial meter | Billable delivered energy | Contract parties |
| Vehicle receipt telemetry | Corroboration and variance | Never silently replaces billing meter |
| Diagnostic evidence | Authorized service escalation | Repair order and entitlement |
Keep decisions reproducible—not every signal forever.
Each mission preserves the normalized decision snapshot, policy versions, approvals and evidence needed to explain the outcome. Raw high-volume telemetry belongs in a separately governed time-series tier with shorter purpose-specific retention.
Telemetry becomes useful when qualified humans can act.
InstantMegawatt connects a detected need or fault to technicians, manufacturer information, parts evidence, site context and an auditable return-to-service decision. AI may organize authorized evidence and suggest next checks; it cannot turn community advice into an approved repair procedure.
No partner receives general access to competitor operations, unrelated vehicle history, unrestricted raw location, operator margins or manufacturer-confidential diagnostics.