All posts

Month-end cannot go down

The night the close pipe has to hold.

The night the pipe has to hold

Month-end is when every quiet integration becomes loud. Journals post. Inventory locks. Revenue recognition runs. A retry that was “fine on Tuesday” creates a duplicate on Friday night.

We already wrote about the last mile after the demo, and about the connective layer between the tools you already run. That post is the wiring. This one is the night the wiring has to hold.

Why close exposes the integration

During the month, a missed sync is annoying. At close, a missed or double-posted write is a stop-the-line event.

Close concentrates load, exceptions, and time pressure onto the same paths:

  • Idempotent journal posting, or you invent correcting entries by hand
  • Vendor maintenance windows that ignore your calendar
  • Observability that names which entity is blocked, not “sync failed”
  • A human who owns the blast radius when the vendor is down

The SERP is full of faster-close playbooks and ERP-connector product pages. This is not that. The claim is architectural. If close depends on a connector you do not run, month-end is a vendor maintenance window.

Idempotent writes and a named owner when the vendor is down.

What “cannot go down” requires

“Cannot go down” is not a wish. It is a short list of properties the path must have before you trust it with the close.

  • Retries that do not invent money. Same request, same result. Duplicate posts are a close failure, not a success with cleanup later.
  • A clear owner of the write. One system posts the journal. Everyone else reads or proposes.
  • Visibility that names the stuck entity. Order, invoice, warehouse, entity ID. A red badge with no noun is not on-call.
  • A failure mode that degrades. Queue, hold, alert. Do not silently skip the period.

Custom software that earns its keep on close is often that path: the owned connector, the idempotency key, the alert that pages the right person. Consulting is how you decide which flows are commodity and which ones must not fail on the last day of the month.

A spreadsheet fallback is not a plan

Someone will say the close can fall back to a workbook if the connector dies. That is how the unofficial tracker becomes the system again.

A fallback is only a plan if it is rehearsed, owned, and known to finish before the audit clock. If the workbook only exists in one person’s head, you do not have a fallback. You have a hope.

Who is on the hook when the vendor is down

If you cannot answer that before close week, you will answer it in Slack at 11pm.

Name the owner. Name the vendor status page you trust. Name the write that must never double. Then put those rules in software this company can run when the person who built the zap is on holiday.

If close already depends on a pipe you do not control, talk to us about the reliability of that path, not another dashboard.

Questions

Why does close expose the integration?

Because load, exceptions, and deadline land on the same night. A sync that was “good enough” mid-month becomes a stop-the-line event when journals and inventory must post once, correctly.

What does “cannot go down” require technically?

Idempotent writes, a single write owner, observability that names the blocked entity, and a degrade path that alerts instead of skipping. Uptime slides are not enough.

Is a spreadsheet fallback a plan?

Only if it is rehearsed, owned, and known to finish on time. A private workbook is not a close plan.

Who is on the hook when the vendor is down?

Someone at this company, with a named path and a named write rule. If the answer is “the zap,” you do not have an owner.