Business identity
1Origin Inc, a Delaware corporation, formed 15 August 2026. Registered office in Newark, DE. Incorporator Moses Kelley. An EIN is recorded when the IRS issues one. The runtime constant is Operator::ONEORIGIN.
1Origin Inc
FCRA is a runtime property.
There is no CRA registration. The statute attaches because 1Origin assembles consumer reports. FcraStanding::Runtime is the standing. A pull is an ordered firewall in origin-apiIf a gate fails, Origin does not disclose and does not score-for-lender. commit_pull always writes FileAccessed or AccessRefused on that subject's Root Ledger. ComplianceReport::inspect is a dry-run checklist and does not append.
Safeguards
Provenance is required. The ledger is append-only and signed. Medical never scores — Origin policy at ScorableFacts, uncited. Inquiries never score. Detection does not start the clock. SafeguardsHold checks those type rules.
Retention and preemption
Federal §605 periods come from rules/federal.yaml. rules/states/ ships empty. A missing state uses federal. 15 U.S.C. §1681t(b)(1)(E), in effect 30 September 1996: a state may shorten a period; it may not lengthen one. The §605(a)(2) statute-of-limitations floor may lengthen that one item. Origin does not pick the longer of two periods.
GL1 and regulator ingress
GL1 (origin-law) is a typed ISA. Verify remains the gate; the file fold remains disclosure. origin-regulator admits signed programs from onboarded bodies. Ingress listens on loopback; a public bind requires ORIGIN_INGRESS_PUBLIC=1. The compiled state table ships empty; an admitted overlay can shorten a federal period.
What a pull actually runs
Seven steps. Each box is true of this runtime.
Purpose is FCRA §604. Consent is an Origin grant. A freeze is §605A or §605B already on the file. An active-duty alert is cited and rides with the score; it is not a freeze. SCRA is a cited flag, not a rate engine. Origin does not invent state reporting shaders, and does not stamp TILA article numbers on residual income.
Step 1
Permissible purpose
FCRA §604. Purpose is a PermissiblePurpose value locked to the grant. Tenant screening cannot emit a mortgage score. Marketing is not a purpose Origin can state.
Step 2
Active consent
Origin consent grant: recipient, purpose, allow-list, expiry. No active grant, no pull. Not a data-fiduciary statute.
Step 3
Freeze and alerts
A §605A freeze or a §605B identity-theft block already on the file blocks new third-party access. A §605A active-duty or fraud alert is disclosed with the score and is not a freeze. SCRA is a cited flag (50 U.S.C. 3937 / 3919), not an APR rewrite.
Step 4
Fold the file
The disclosed file is OriginFile::project_as_of plus the consent scope. Federal periods come from federal.yaml. The state table ships empty; a missing state uses federal §605. A state may shorten; it may not lengthen. Medical stays out of the lender view because Classification is derived. Unverifiable and orphan collections are already held out of the fold.
Step 5
Score and packet
Scoring reads ScorableFacts only. Medical exclusion is Origin policy at that chokepoint, uncited. Inquiries are structurally absent. Reason codes carry ORIG-… identities and, where one exists, a 12 CFR 1002 Appendix C Form C-1 phrase. origin-fairness measures disparity on a supplied cohort over the published four-weight grid; it does not feed the score and it is not a search over every possible model.
Step 6
Decision receipt
A deciding purpose is incomplete until DecisionRecorded. Adverse-action copy is the score's principal reasons, already produced. Origin does not stamp TILA article numbers on residual-income or DTI flags.
Step 7
Access entry
commit_pull always writes FileAccessed or AccessRefused on this subject's Root Ledger in the same transaction. inspect is a dry-run checklist and does not append. Neither fact is a lender disclosure of the other consumer.
Manual and bureau agreements
Employees do not invent balances or file disputes. Bureaus exchange tapes under a form of agreement that forbids pay-to-play and does not copy a bureau score. The pack lives in docs/fcra.