DRG 003
SHEET 01 / 08
SCALE NTS
ISSUED 26.04.2026
REV A · REVIEWER-READY
// SHEET 01 OF 08 DRG-003 · SYSTEM ARCHITECTURE · REV A
exhibit b system architecture surface not operational rollout
blackmenta.com/how · preview phase · 2026 · operating entity pending Q4 2026
B system datum · coordination layer · operational time
$man blackmenta.system

an operating system for the space between the tools

what we coordinate
events in flight
interface boundary
what we don’t replace
stripe · eventbrite · excel
// 2026 → bm.os.v0 Payment rails move money. Ticketing sells admission. Staffing tools track hours.
None of them know the whole event.
DIM: 9 objects · 5-step loop · 0 customer funds · 1 wall
layercoordination
scope9 objects
custodynone
first proofCH festival
operatorQ4 2026

One model that knows the event, the venue, the crew, the shift, the ticket, the payout, the artefact and the settlement state — and makes them agree in operational time.

The system BlackMenta references is a full-stack coordination layer for live events. It does not replace payment rails, ticketing, staffing tools or accounting. It coordinates the operational truth across them, in compressed time. This page is the architecture brief — drawn before the operating entity incorporates, by design.

← back to home · BlackMenta Ltd · holding entity № 16988667 · operator pending
not a payment rail not ticketing not agency software not spreadsheet theatre
not custodial not a payment processor not a marketplace not yet operational
layer typecoordination
replacesnothing existing
connects5 tool classes
first proofmid-size CH festival
checksum 9 objects · 5-step loop · 2 entities · 1 wall · pilot scoped
BM / SYSTEM SPEC ingest → coordinate → attest → settle → report
01 · architecture before product 02 · coordination before replacement 03 · operational time, not 30-day reconciliation 04 · receipts, not narrative
// EX.X · NEGATIVE PERIMETER What the system is not.
not universal replacement does not replace every rail, ticketing system, accounting tool or crew app — coordinates the operating truth across them.
not fake decentralisation no vague blockchain language. no retail-facing token theatre. operational responsibility is named, not hidden.
not a financial promotion this page is system architecture. it is not an invitation, offer, token sale or retail investment communication.
not instant scale first deployment is deliberately narrow. if the pilot does not reduce coordination overhead, the architecture is wrong.
not custodial customer funds stay with payment service providers. this system never holds money on behalf of users.
not yet operational this brief is drawn before the operating entity incorporates. spec only — Q4 2026 onwards.
// operating-system test

Four criteria. If any fails, the architecture is wrong.

shared truth · operational time · accountability · interoperability
OS.01
shared truth

One event, one model

One event object connects venue, crew, ticketing, payouts, sponsorship, compliance and reporting. If the same event exists as six different spreadsheets, the system has failed.

OS.02
operational time

State changes when the event happens

Not 30 days later when PDF invoices are reconciled. Shift end, ticket scan, payout eligibility and exception flags should be near-real-time objects.

OS.03
accountability

Every action leaves an artefact

Who did what, when, under which obligation, with which counterparty. Receipts are not decoration; they are the operating surface.

OS.04
interoperability

Coordinates, doesn’t replace

Stripe, ticketing tools, staffing systems and ledgers can remain components. The layer coordinates the space between them.

// SHEET 02 OF 08 · DEFINITION

What “operating system” means here.

REF 02.X · CATEGORY DEFINITION · NOT METAPHOR

The phrase “operating system” is overused. In this category, it has a narrow meaning — coordination layer, shared truth, operational time. The four-part test is on Sheet 01 above; this sheet states the category boundary.

reffieldvaluespec
// 02.1 · CATEGORY
02.1.01
Category
Live-event coordination layer
SYSTEM
02.1.02
Surface
Object model · 9 entities
SHARED TRUTH
02.1.03
Time domain
Operational, near real-time
NOT MONTHLY
// 02.2 · POSITION
02.2.01
Replaces
No tool category
COORDINATES
02.2.02
Sits between
payments · ticketing · staffing · ledgers
5 CLASSES
02.2.03
Custody scope
None
PSP HANDLES
// 02.3 · STATUS
02.3.01
Build status
Spec only
NOT BUILT
02.3.02
Operator
Q4 2026
PENDING
02.3.03
First proof
Mid-size Swiss festival
PILOT SPEC
// SHEET 03 OF 08 · OBJECT MODEL

Nine objects the system has to understand.

REF 03.X · 9 OBJECTS · EVENT GRAPH

A true live-event operating system is not a nicer CRM. It is an object model where each operational fact attaches to the right event, person, counterparty, timestamp and settlement state.

OBJ 01
// event

The event

The master object. Date, location, capacity, stakeholders, contractual perimeter, operational state and proof requirements all hang from here. Every other object references it.

HOLDS: contractual perimeter
OBJ 02
// venue

The venue

The physical constraint layer. Access windows, zones, load-in, safety rules, insurance and local compliance obligations. Defines what is operationally possible at this site.

HOLDS: physical constraints
OBJ 03
// crew

The crew

Verified workers. Roles, credentials, availability, attendance, shift proof, payout state and dispute trace. The named, accountable layer between event and execution.

HOLDS: verified identities
OBJ 04
// shift

The shift

The atomic work unit. Scheduled time, actual time, approval, exception, rate, payout trigger and compliance evidence. The receipt of work done, machine-readable.

HOLDS: work atom
OBJ 05
// ticket

The ticket

Demand, attendance and revenue signals. Not just admission — a reconciliation input for the event ledger and a settlement trigger for downstream parties.

HOLDS: demand signal
OBJ 06
// payout

The payout

Money movement is downstream of proof. Approved shift, verified counterparty, prefunded pool, settlement rule. The system never holds funds — PSPs do — but it conditions release.

HOLDS: release condition
OBJ 07
// artefact

The compliance artefact

Contracts, waivers, invoices, worker documentation, risk acknowledgements and audit logs — tied to the event object, not loose in someone’s inbox.

HOLDS: evidence chain
OBJ 08
// exception

The exception

Late arrival, role mismatch, safety issue, payment hold, dispute or missing credential — visible before it becomes a crisis. First-class object, not a footer field.

HOLDS: early warning
OBJ 09
// sponsor

The sponsor deliverable

Brand exposure terms, activation windows, attribution counts and sponsor-side proof. The piece of the event that funds parts of it — modelled, not improvised.

HOLDS: deliverable proof
// SHEET 04 OF 08 · TOOL DIFF

Not replacing tools. Replacing the space between them.

REF 04.X · 5 TOOL CLASSES · COORDINATION GAP

Each tool class below is good at what it does. None of them know the whole event. The gap between them is the only place this system sits.

ref existing tool class what it solves what remains uncoordinated
T.01 payment rails Stripe, Adyen, Square move money between accounts do not know what an event is, who finished a shift, or which proof should release funds
T.02 ticketing Eventbrite, DICE, Ticketmaster sell or manage admission generally end at the turnstile — crew, settlement and compliance live elsewhere
T.03 staffing SaaS Crew tools schedule people, capture hours, coordinate dispatch rarely own prefunded payout, ticketing reconciliation or whole-event compliance artefacts
T.04 agency software Booking and contract tools produce documents, terms, counterparty views contract-facing, not the live operational truth during build, show and strike
T.05 actual incumbent Excel, WhatsApp, email, PDFs and bank transfers run much of it flexible, but fragment truth and delay settlement exactly when pressure is highest
Architectural rule: if the design replaces any of these classes, it is the wrong design. The system reads, coordinates and references — never overrides.
// SHEET 05 OF 08 · FLOW

The operational loop. Five phases.

REF 05.X · ingest → coordinate → attest → settle → report

The system runs one loop per event. Each phase has explicit inputs, outputs and exit conditions — no implicit waiting on email confirmations.

// the loop
F.01
ingest
Event, venue, crew, vendor, ticketing and funding facts enter the model as structured records — not email attachments.
INPUT
F.02
coordinate
Roles, shifts, access windows, approvals and obligations are made visible to the actors who need them, when they need them.
SHARED
F.03
attest
Work, exceptions, scan counts, approvals and compliance checks become timestamped artefacts — the receipt layer of the event.
PROOF
F.04
settle
Prefunded or rule-based payouts move only when the relevant proof state is complete. The system never holds funds; it conditions their release.
RELEASE
F.05
report
The same ledger creates reviewer, operator, venue, sponsor and compliance views — without rebuilding the truth after the event.
VIEWS
// SHEET 06 OF 08 · BOUNDARY

Two companies. One wall.

REF 06.X · ENTITY DIAGRAM · LICENCE FLOW

The separation is structural, not cosmetic. The holding owns and licenses intellectual property. The operating entity conducts business, holds customer relationships and bears operational risk.

NODE A
holding entity

BlackMenta Ltd

UK · London · company № 16988667
  • Owns trademarks
  • Licenses IP to operator
  • Holds reserves
  • Conducts no operations itself
licence royalty
NODE B
operating entity

Operating Entity

Separate jurisdiction · incorporation track Q4 2026
  • Conducts regulated activity
  • Holds customer relationships
  • Raises capital through formal DD
  • Bears operational risk
FLOW: A → B TYPE: licence · royalty WALL: structural · not cosmetic CUSTOMER FUNDS: never on A

The wall is also restated on /home · Sheet 03. Same wall, different page; both pages tell the same truth.

// SHEET 07 OF 08 · PILOT

First proof: a mid-size Swiss festival.

REF 07.X · PILOT SPEC · TARGET TBD

Small enough to fail safely. Concrete enough to prove the thesis. The first deployment proves coordination, not vanity scale — one event, end-to-end, with all nine objects in flight at once.

P.01
scale

5k–15k attendees

Enough operational complexity to matter. Crew, vendors, ticketing reconciliation, sponsor deliverables, exceptions in real time. Not so large that the first failure becomes a public crisis.

single event
P.02
geography

Switzerland

Specific jurisdiction, specific operator legal frame, specific payment rails and ticketing partners. The first proof should not be jurisdiction-portable on day one — it should be deeply local.

target TBD
P.03
scope

End-to-end · single event

All nine objects exercised in one operational loop. Artist, venue, crew, promoter, attendee, sponsor — one ledger, one reconciliation surface, one set of receipts at the end.

9 objects
P.04
proof test

Reduced coordination overhead

If the operator and venue do not spend less time chasing facts after the event than they would have without the system, the architecture is wrong and must be rebuilt. There is no other proof.

single test

Detailed brief is gated.

This page is the public sketch. Object-model schema, integration patterns, settlement rules and pilot spec are released progressively via auth.blackmenta.com — to engineers, festivals, counsel and reviewers who name a route.

▶ Request architecture preview
01IdentifyEngineer, festival, counsel, reviewer.
02RouteArchitecture, pilot, boundary or capital lane.
03DiscloseObject model, then loop, then pilot spec.
no lane fits? → hello@blackmenta.com
// NOTES · DRG-003 · GENERAL

Notes.

  1. N.01 This is an architecture brief, not a roadmap. Object model, loop, and pilot spec are subject to change before architecture lock (Q3 2026). → see Sheet 02 · 02.3
  2. N.02 The system never holds customer funds. Money moves through licensed PSPs; the system conditions release based on proof state. → see Sheet 03 · OBJ 06
  3. N.03 Tools listed by name (Stripe, Eventbrite, etc.) are illustrative of category, not exclusive partnerships. → see Sheet 04 · tool diff
  4. N.04 Pilot target is mid-size Swiss festival, specific operator pending. Geography may extend, but never before pilot proves coordination. → see Sheet 07 · P.02
  5. N.05 Architecture questions: hello@blackmenta.com. Answered within five business days.
// END OF NOTES · NTS · UNLESS OTHERWISE SPECIFIED DRG-003 · REV A
// SIG.01 · DRAWN BY System Architect Architecture · Object model
2026-Q1 · internal
// SIG.02 · CHECKED Counsel of Record CASP · Boundary · IP
2026-Q2 · engaged
// SIG.03 · OWNER BlackMenta Ltd № 16988667 · IP Holding
2026 · public sketch
// SIG.04 · STATUS As-built · Rev A Pre-architecture-lock
lock target Q3 2026
// DRAFTING STANDARD · BS 8888 SPIRIT · NTS SPEC ONLY · NOT BUILT · NO LIVE TRAFFIC
// end of drawing 003 · 8 sheets
/how · system architecture · 2026
DRG-003 REV A · 8 SHEETS · NTS · SPEC ONLY · PILOT SCOPED