Owl One / Applications / Supermarket operations
Store floor, back office and head office on one identity — no store is the soft edge.
How the work runs
In a retail group the weakest store sets the security of the group. Putting every site on one identity model removes the idea of a soft branch entirely.
Staff act under their own identity on shared hardware, so an action on the floor has a name attached.
Each store’s office works on the same records head office reads, at the moment it happens.
Group views are built from store records rather than from what each store remembered to send.
No store can reach another. A compromise at one site does not become a route into the group.
In production
Client names are withheld. What each operation does is not — each one is a working sample of this sector, built and run on our own system rather than secured after the fact.
Store floor, back office and head office on one identity. Group figures are store figures, and no store becomes the soft edge of the group.
Lateral movement between sites removed.
We will show the workflow on a working system, and show that the server behind it cannot be found from outside.