---
type: concept
tags: [parking, security, anti-fraud, offline-first]
sources: [parking-system-architecture]
updated: 2026-06-14
---

# Reconciliation

**The real anti-fraud control.** Comparing local records against **an authority the operator
cannot alter**. This is what remote sync *really is* — a fraud-control mechanism, not just a
backup. (See [[parking-system-architecture]] §3.)

## Reconciliation when offline

[[offline-first]] does not mean no reconciliation — it means **deferred, intermittent**: a
manager visiting weekly with a USB stick, a phone hotspot once a day, a monthly export. Any of
these provides a path to compare local records against something outside the operator's reach.

## If it truly is "never, by anyone"

Only design for that if it's genuinely true. The network-free fallback controls are:

- the signed, hash-chained log ([[append-only-event-chain]]),
- physically **pre-numbered ticket stock**,
- **end-of-shift signed Z-reports**,
- **CCTV/LPR footage** as an independent record (see [[lpr-camera]]).

Establishing *some* periodic reconciliation channel is [[open-questions]] #4.