Tx-Rails for Supermarkets
A cryptographic audit substrate for the entire farm-to-shelf-to-shopper chain — primary producers, processors, brand owners, 3PLs, retailers, regulators, ACCC / FCA / FTC investigators, and the shopper at the checkout — without forcing any of them onto a single platform.
A modern supermarket is the most contested trust environment in everyday commerce. A single jar of pasta sauce traces back through a brand-owner co-packer, a tomato-paste importer, a Mediterranean grower co-operative, a 3PL cold-chain operator, a regional DC, a state-level distribution run, a store-level replenishment cycle, a price-promotion engine, a self-checkout terminal, and a shopper-loyalty event — touching 20+ organisations, half a dozen regulators, and at least three jurisdictions before the shopper picks it up. Every handover is an audit obligation. Every price tag is a consumer-law obligation. Every “free-range” or “MSC-certified” claim is an ACCC / CMA / FTC obligation. Every cold-chain temperature is a public-health obligation.
The pain is structural. ACCC investigations into misleading-discount pricing at the major Australian chains depend on the supermarkets’ own records being honest; modern-slavery disclosures depend on tier-3 suppliers being honest; food-recall response times depend on every batch and pallet being honest. Each link in the chain has both the means and the incentive to be less than fully honest about its own data — and the only reason the system works at all is that catastrophic failures are rare enough to be absorbed when they happen.
Tx-Rails removes “trust me” from the chain. It sits underneath the existing systems — POS, WMS, TMS, ERP, supplier-portal, recall-management, payroll — and produces a cryptographic, jurisdiction-independent audit trail for every event a counterparty, regulator, journalist, or shopper would otherwise have to take on faith.
The 54 federations
A small grower co-operative, a Tier-1 retailer’s category team, a Mediterranean tomato-paste importer, a 3PL cold-chain operator, the ACCC, and a class-action plaintiff’s lawyer — they do not belong on the same database. Each domain gets its own sovereign federation, with its own member set, its own data scope, its own cross-checks — interoperating through Tx-Rails’ shared underlay.
Governance + cross-cutting commercial
tx-rails-supermarket-meta-federation— the top-level governance federation. Member admission, role assignments, network-policy changes, dispute escalations across the 54 federations.tx-rails-supermarket-audit-compliance— independent auditors, assurance providers, ESG raters. Cryptographic verification of any claim sourced from the underlay, without privileged access to the auditee’s primary systems.tx-rails-supermarket-legal-governance— board resolutions, regulatory correspondence, statutory filings, dispute records. The audit trail behind every “we acted in accordance with our duties” assertion.tx-rails-supermarket-risk-compliance— exposure, credit limits, anti-bribery + sanctions screening, modern-slavery-act due diligence, prudential capital.tx-rails-supermarket-insurance— physical-asset, business-interruption, product-liability, recall, cyber, supply-chain disruption. Claims triggered against verified telemetry rather than claimant assertion.tx-rails-supermarket-identity-kyc— counterparty identity, beneficial-ownership, sanctions screening. The provenance behind a tier-3 supplier disclosure.tx-rails-supermarket-payments— settlements across the chain (supplier payments, terms compliance under the Grocery Codes, shopper refunds, loyalty redemptions, freight payments). Payment events bound to commercial events, no reconciliation drift.tx-rails-supermarket-finance-accounting— general ledger, inventory valuation, COGS calculations, intercompany pricing, statutory reporting. The audit trail behind every financial-statement assertion.
Core retail operations
tx-rails-supermarket-retail-ops— store operations. Open / close, rosters, shrink events, store-level KPIs, manager-override transactions, end-of-day reconciliation.tx-rails-supermarket-pos— point-of-sale + self-checkout terminals. Every transaction line, every void, every override, every coupon application, every tender event — the receipt the shopper threw away, captured immutably.tx-rails-supermarket-ecommerce— online ordering, click-and-collect, home delivery. Order placement, substitution events, picking accuracy, delivery confirmation, customer-rating events.tx-rails-supermarket-loyalty-coupons— loyalty-program enrolment, points accrual + redemption, coupon issuance + clearing. Transparent + tamper-evident — the defence against “we changed the points scheme retroactively” class actions.tx-rails-supermarket-pricing-promotions— every price change at every shelf, every promotion start + end, every “was / now” claim. The structural fix for ACCC / CMA / FTC investigations into misleading-discount pricing — every shelf-edge label has a verifiable price history.tx-rails-supermarket-customer-service— complaints, refunds, exchanges, escalations, ombudsman referrals. The audit trail behind every “we handled this complaint appropriately” assertion.
Merchandising + buying
tx-rails-supermarket-category-management— range reviews, planogram changes, listing + delisting decisions, supplier-funded promotions. The audit trail behind Grocery-Code compliance.tx-rails-supermarket-procurement— supplier contracts, framework agreements, purchase orders, goods-receipt, supplier-performance records.tx-rails-supermarket-supplier-onboarding— onboarding evidence (audits, certifications, ethical-sourcing declarations, financial-stability checks). Every certification with provenance, not a black-box pass/fail.
Inventory + supply + logistics
tx-rails-supermarket-demand-forecasting— forecast versions + accuracy metrics. The audit trail behind range + replenishment decisions.tx-rails-supermarket-inventory-replenishment— DC + store inventory positions, replenishment orders, stockout events, out-of-stock measurement.tx-rails-supermarket-warehousing-dc— distribution-centre operations. Inbound + outbound movements, putaway + picking events, cycle-count adjustments, damage records.tx-rails-supermarket-cold-chain— temperature integrity across the chain. Reefer + freezer telemetry from supplier dock to store shelf, breach events, corrective actions. The audit trail that defends every Listeria + Salmonella + Campylobacter investigation.tx-rails-supermarket-linehaul-transport— primary freight (supplier → DC, DC → DC). Loads, manifests, transit-time SLAs, driver-behaviour events.tx-rails-supermarket-last-mile— DC → store + DC → shopper. Routing decisions, delivery confirmation, driver-vehicle events, missed-delivery records.tx-rails-supermarket-imports-customs— import documentation, customs declarations, biosecurity inspections, country-of-origin attestations. The provenance defence behind every “Australian made” or “British” or “Origin EU” label.tx-rails-supermarket-returns-reverse-logistics— returns from store + shopper, reasons codes, refurbishment, donation, disposal. The audit trail behind returns-fraud investigations.tx-rails-supermarket-waste-recycling— food waste, packaging waste, recycling streams. The evidence layer behind Scope-3 waste disclosures + packaging-recovery-organisation reporting.
Suppliers — PRIMARY (production)
tx-rails-supermarket-suppliers-primary-agriculture-produce— fruit + vegetable growers. Crop records, pesticide + herbicide applications, harvest events, on-farm food-safety audits (HARPS / GLOBALG.A.P. / Red Tractor). The provenance behind every “Australian grown” or “Spanish tomatoes” label.tx-rails-supermarket-suppliers-primary-livestock-meat— beef, lamb, pork, poultry producers. Animal-identification records, husbandry events, veterinary treatments, slaughter records, traceability through processing.tx-rails-supermarket-suppliers-primary-dairy-eggs— dairy farms, egg producers. Milk-collection records, somatic-cell counts, mastitis treatments, “free range” stocking-density evidence + outdoor-access records — the structural fix for ACCC free-range-egg investigations.tx-rails-supermarket-suppliers-primary-fisheries-seafood— wild-catch + aquaculture producers. Catch records, vessel positions, MSC / ASC / FOS certification chain-of-custody, “sustainably sourced” claim provenance.tx-rails-supermarket-suppliers-primary-grains-horticulture— broadacre + horticulture producers. Variety, treatment history, harvest records, GMO / non-GMO segregation.
Suppliers — SECONDARY (manufacturing + CPG)
tx-rails-supermarket-suppliers-secondary-processed-foods— processed-food manufacturers. Ingredient traceability, batch records, allergen-segregation evidence, HACCP records.tx-rails-supermarket-suppliers-secondary-beverages— soft-drink, juice, alcohol manufacturers. Batch records, container-deposit-scheme accounting.tx-rails-supermarket-suppliers-secondary-bakery-confectionery— bakery + confectionery manufacturers. Batch records, allergen segregation, supply-chain cocoa / palm-oil provenance.tx-rails-supermarket-suppliers-secondary-household-nonfood— household + personal goods manufacturers. Batch records, REACH / ingredient-disclosure compliance.tx-rails-supermarket-suppliers-secondary-health-beauty— health + beauty manufacturers. Batch records, cosmetic-ingredient compliance, GMP audits, regulated-product evidence.tx-rails-supermarket-suppliers-secondary-private-label-mfg— private-label co-packers. The supplier tier with the greatest reputational risk — provenance audit for every Coles-brand / Tesco-Everyday / Walmart-Great-Value SKU.
Suppliers — TERTIARY (services)
tx-rails-supermarket-suppliers-tertiary-3pl-logistics— third-party logistics providers. Transit records, cold-chain evidence, driver compliance.tx-rails-supermarket-suppliers-tertiary-cleaning-security— cleaning + security contractors. Roster records, shift evidence, modern-slavery-act compliance + minimum-wage attestation — the supplier tier with the highest underpayment-risk exposure.tx-rails-supermarket-suppliers-tertiary-facilities-maintenance— facilities-maintenance contractors. Work orders, completion evidence, safety records.tx-rails-supermarket-suppliers-tertiary-it-services— IT services + software vendors. SLAs, incident records, change-management evidence, security-assurance attestation.tx-rails-supermarket-suppliers-tertiary-marketing-media— agencies, media-buying, influencer partnerships. Spend records, performance evidence, disclosure-compliance evidence.tx-rails-supermarket-suppliers-tertiary-financial-services— banks, payment processors, insurers, financiers.
Quality + safety + regulators
tx-rails-supermarket-quality-safety— quality-management events across stores, DCs, suppliers. Audit results, deviation records, corrective-action evidence, customer-complaint root cause.tx-rails-supermarket-product-recall-traceability— batch-level traceability from farm to store to shopper. Hours-not-days recall response — every affected SKU, every batch, every store, every loyalty member who bought it, identifiable cryptographically.tx-rails-supermarket-food-regulators— FSANZ, FSA, FDA, EFSA, state-level health departments. A read-window into the underlay scoped to each authority’s statutory remit — no separate compliance-submission system.
Tech / infrastructure + corporate services
tx-rails-supermarket-iot-telemetry— store + DC + supplier-site telemetry. Refrigeration, lighting, HVAC, energy meters, security cameras (event metadata), checkout-queue sensors. Equipment provenance + calibration evidence.tx-rails-supermarket-weather-geo— meteorological data feeding demand forecasts, sustainability claims, parametric-insurance triggers, store-comfort + energy decisions.tx-rails-supermarket-oems-maintenance— OEM service records for refrigeration, checkout, materials-handling, store-fit equipment. Scheduled / predictive / corrective maintenance.tx-rails-supermarket-cybersec-soc— security operations centre events spanning corporate IT + OT (refrigeration, checkout, building-management). PCI-DSS evidence, intrusion attempts, ransomware indicators, anomalous traffic.tx-rails-supermarket-data-analytics— analytics models that drive operational decisions (forecast, replenishment, pricing, range, customer segmentation). Model versions, training-data provenance, prediction records, override events.tx-rails-supermarket-realestate-facilities— property portfolio, lease events, fit-out projects, capex programme. The audit trail behind property-revaluation + lease-accounting.tx-rails-supermarket-workforce-hr— roster, time + attendance, payroll, superannuation, certifications, training. The structural fix for underpayment scandals — every shift bound cryptographically to the pay event it generated.tx-rails-supermarket-marketing-brand— campaigns, claims, channel spend, attribution records. The evidence behind every “sustainability journey” disclosure.
What the underlay guarantees
Every event written to any of these 54 federations carries the same four properties, enforced cryptographically rather than contractually:
- Tamper-evidence at the row level. Every record is bound into a Merkle slab. Slab roots anchor to Hedera Consensus Service every 24 blocks, giving you a public, jurisdiction-independent timestamp that you can verify with a single hash and no privileged access. Critical when the dispute is over what a shelf-edge price was three months ago, or what a cold-chain probe read three weeks ago.
- Multi-tenant isolation by
entnum. Each member organisation operates within its own enterprise number. A grower co-operative, a brand-owner co-packer, a 3PL, a Tier-1 retailer, and a state food regulator all share a federation but no shared-credentials path — the trust boundary is enforced at the gateway, not at the database. - 149 cross-checks per transaction. Tx-Rails’ ChubbyChecker audit subsystem runs 129 integrity verifications on every transaction and every block, on independent BFT replicas with no shared failure domain with the workload nodes. If a compromised server count exceeds the BFT threshold, the audit mesh detonates the network rather than silently producing incorrect outputs.
- No data sovereignty give-up. Each federation’s data stays in the jurisdiction it was generated in. Cross-jurisdictional verifiability comes from the Merkle anchor on Hedera, not from data movement. A Spanish grower, a Singaporean 3PL, an Australian retailer, and an Australian food regulator verify the same chain of custody on the same audit trail without any of them moving the underlying data.
How you integrate
Tx-Rails is a substrate, not a replacement. You connect to the federations your organisation belongs to via one of four modes:
The four modes
| Mode | What customer does | Metadata fidelity | Use case |
|---|---|---|---|
| A. Hash-only | Nothing; tx-rails computes row-hash from CDC | 22 / 31 fields, no semantic intent | Low-stakes flows where the audit just needs “this row existed at time T” |
| B. CDC observation | Adds Debezium / equivalent to their DB; nothing in the app | 25–27 / 31 (CRUD intent from CDC; user/role IF the customer’s table has audit columns) | Mid-stakes flows; most existing apps that already write created_by / modified_by to their rows |
| C. Gateway-mediated | Routes API traffic through the tx-rails gateway; app unchanged | 30 / 31 (gateway sees the HTTP method, the JWT, the body — derives semantic intent from path + verb) | High-value flows; new app deployments where touching the network edge is cheap |
| D. SDK / atomic dual-write | App calls tx-rails alongside its own DB write | 31 / 31 with explicit semantic intent | The very-high-value flows where the customer wants explicit REVERSAL / CORRECTION / RESTATEMENT tagging |
A small grower can run Hash-only against its on-farm system, a Tier-1 retailer can run Atomic dual-write through its POS + WMS + pricing stack, and a food regulator can run CDC-observer across every operator in its jurisdiction — all interoperable on the same underlay.
What this unlocks
- Shelf-edge pricing investigations that can’t be defended away. Every “was / now” claim, every promotion start and end, every shelf-edge label change is bound to a Hedera-anchored timestamp. The structural fix for the misleading-discount cases the ACCC has been running against the major Australian chains.
- Hours-not-days product recalls. A Listeria-positive batch is identifiable to every store that received it, every shelf it landed on, every loyalty member who bought it, every shopper-app push notification that needs to fire — in minutes, not days.
- Free-range, MSC, fair-trade, organic claims that survive forensic challenge. Every certification claim is bound to a chain-of-custody from the producer through every handover. The structural fix for ACCC / CMA free-range-egg + sustainable-seafood investigations.
- Modern-slavery + underpayment evidence the regulator can verify continuously. Every shift, every payslip, every supplier-tier-3 attestation captured immutably + Hedera-anchored. The structural fix for the Coles + Woolworths + Tesco + Walmart underpayment scandals — and a credible defence for the operators who are paying correctly.
- Cold-chain claims that defend insurance + class-action proceedings. Temperature integrity from supplier dock through every handover to the store-shelf chiller, captured immutably. A reefer-failure claim, a foodborne-illness suit, a recall-trigger investigation — all settled against an audit trail the insurer + plaintiff + defendant all see the same.
- Grocery-Code compliance the supplier can hold the retailer to. Every category-management decision, every supplier-funded promotion, every range-review outcome captured immutably. The structural fix for the supplier-retailer asymmetry the Australian Grocery Code Mandatory Reform is intended to address.
- Loyalty program transparency. Points accrual + redemption rules captured at the time they applied, not the version the retailer wishes had applied. No more retroactive scheme changes.
Where we are
Tx-Rails is shipping today as the underlay for a UK housing pilot and an Australian R&D programme; the tx-rails-supermarket-* federations above are the production-target taxonomy for the grocery-retail vertical. Charter-member discussions are open with primary producers, co-packers, 3PLs, Tier-1 retailers, and state + national food regulators in AU, UK, and EU. If your organisation is one of those — or a competition / consumer regulator looking for cryptographic visibility into the operators you oversee — we want to hear from you.
Contact:john@itotchaincloud.com.au
Tx-Rails — Built by IT/OT Chain & Cloud Australia (ITOTCCA). Sydney · London.