Builds an adjust operation: the operator's manual correction for cases no ordinary
operation covers, such as closing a reconciliation gap. It moves one account by the signed
amount — negative corrects downward — with the offsetting entry posted to OPENING_EQUITY
so the books stay balanced; revenue and trust are untouched. Operator-only: the handler
refuses even a system caller, and the required reason is stored on the posting's metadata
and hashed into the tamper-evident chain. The amount must be CREDIT and non-zero (the one
operation whose amount may be negative). It has no rejected path; a retry under the same
idempotencyKey returns the earlier correction as duplicate rather than posting twice.
Builds an
adjustoperation: the operator's manual correction for cases no ordinary operation covers, such as closing a reconciliation gap. It moves one account by the signedamount— negative corrects downward — with the offsetting entry posted toOPENING_EQUITYso the books stay balanced; revenue and trust are untouched. Operator-only: the handler refuses even asystemcaller, and the requiredreasonis stored on the posting's metadata and hashed into the tamper-evident chain. The amount must beCREDITand non-zero (the one operation whose amount may be negative). It has no rejected path; a retry under the sameidempotencyKeyreturns the earlier correction asduplicaterather than posting twice.