- Most distribution losses are process leaks, not dramatic theft — and every leak survives on the absence of a record.
- The pattern behind every fix is the same: verify at the point of action, record append-only, separate the roles that touch money.
- You don't need heroics to run tight; you need the same boring rules applied every day with a machine keeping score.
Ask a struggling distributor what went wrong and you'll hear about the economy, the roads, the season. All real. But sit with the books — where books exist — and a quieter story appears: dozens of small leaks, each too minor to fight on the day it happened, compounding into the number that closes businesses. We know the list intimately, because we've spent five years closing it, leak by leak, in our own operation.
The seven leaks
- Ghost visits — routes 'covered' from a parked bus. Fix: visits that only count within 20 metres of the outlet, with the order captured on the spot.
- Convenient write-offs — 'damaged' and 'expired' as labels for stock that left by the side door. Fix: write-offs need photos, categorised reasons and a second signature.
- Unmatched payments — money in the bank nobody can tie to an invoice, aging into disputes. Fix: every payment entered with a reference, matched daily, by someone who didn't record the sale.
- Silent credit — goods released on trust, remembered differently by both sides. Fix: credit exists only inside the system, against a limit, visible to management daily.
- Expiry drift — stock picked by convenience until short-dated cartons surprise everyone. Fix: FEFO enforced at picking, not discovered at stocktake.
- Fuel without arithmetic — vehicles that consume like trucks twice their size. Fix: fuel logged per vehicle per route, and the outliers explain themselves.
- Reports nobody trusts — month-ends assembled from memory and argument. Fix: reports that are VIEWS of records made at the moment of action, not reconstructions after it.
The pattern behind every fix
Notice what repeats. Verify at the point of action — location, photo, timestamp — because evidence collected later is negotiation, not evidence. Record append-only — corrections go forward, history never silently rewrites — so tampering is detectable instead of deniable. And separate the roles that touch money, so no single person can create, approve and reconcile the same transaction. None of this needs genius. It needs software that refuses shortcuts politely, every single day.
We built COJUDE OS for our own survival, not as a product. But the lesson travels even without the software: pick any ONE leak from the list and close it this month with whatever tools you have — a notebook rule, a second signature, a daily matching hour. The leak you close first funds the discipline that closes the rest. Five years and zero payment fraud later, we can testify: boring compounds beautifully.
