Dispatch software that enforces the way your crews actually work.

The rules the contract enforces

These are written as Intent Specification Language (ISL) invariants, compiled directly into PostgreSQL storage constraints and API permissions. Break one and the operation is refused at the engine boundary.

domain FieldDispatchSystem {
  entity Technician {
    id: UUID
    name: String
    certifications: List[Certification]
    is_active: Boolean
  }

  entity WorkOrder {
    id: UUID
    window_start: Timestamp
    window_end: Timestamp
    assigned_tech_id: UUID -> Technician
    signoff_photo_id: Optional[AssetUUID]
    status: Enum[Assigned, EnRoute, OnSite, Completed]
  }

  policy DispatchInvariants {
    invariant R01_NoCloseWithoutPhotoSignoff:
      forall w in WorkOrder:
        (w.status == Completed) implies (w.signoff_photo_id != null)

    invariant R02_NoOverlappingCrewDispatches:
      forall w1, w2 in WorkOrder:
        (w1.id != w2.id && w1.assigned_tech_id == w2.assigned_tech_id) implies
        (w1.window_end <= w2.window_start || w2.window_end <= w1.window_start)
  }
}

• R01 A job cannot close without sign-off The lead technician’s photo sign-off is a strict precondition of the completion transition. An unsigned job stays open no matter who presses the button.
• R02 Crews cannot be double-booked Two jobs whose windows overlap cannot hold the same crew. The second write is refused with the conflicting job ID and schedule conflict named.
• R03 Overdue safety checks escalate automatically A routine equipment check past its due date escalates to the operations director automatically, recorded as an immutable audit event.
• R04 Only dispatch reassigns active crews Technicians can update their job checklist and arrival state. Moving work between crews belongs to the dispatcher role alone.

What ShipGate checks before this launches

Dispatch is where a missed rule turns into a truck at the wrong address or an uncertified technician on a high-voltage roof. ShipGate sits outside the generation loop and tries to break the application before you rely on it.

Frequently Asked Questions