The distribution operating system for hotels.

Distribution rules are policy, captured per booking — not a vendor configuration.

Rules are scoped, revocable, and enforced before any booking decision.

Every booking carries the governance decision that authorized it; lineage is queryable per booking.

Governance, inventory, and cancellation decisions are captured to an append-only audit.

Hotels — not Escapra — decide which partners may sell, at what rate plans, on what terms.

Partner authorization is scoped per rate plan, segment, geography, and date range.

Tokens are bound to scope; they cannot exceed what the hotel authorized.

Revocation is immediate and audit-logged; in-flight bookings honor their existing terms.

Every booking is revalidated against the hotel's source of truth before confirmation.

If the rate has changed, the partner receives 409 PRICE_CHANGED and must explicitly re-accept.

Stale inventory is blocked, not booked. Out-of-order ingest is rejected.

When capability degrades, the platform fails closed rather than book unsafely.

Each booking carries its commission rule and distribution chain — lineage end-to-end.

Settlement is atomic and idempotent; statements, settlements, and payments reconcile as a read.

Wallet movement is transactional, pessimistically-locked, and idempotency-keyed.

Settlement audit is append-only — history is never updated.

Append-only capture of governance, inventory, cancellation, and settlement decisions.

Operational incidents are deduped (by source, category, entity, correlation), classified, and queryable.

Alerting is config-driven and never throws into business flow.

Read-only ops APIs expose governance, inventory decisions, and cancellation per booking.