One ministry, one instance, zero joins
AnHarga is what the ministry doctrine looks like as a shipped product: a KPDN-only deployment fed by consented merchants and an accountable crowd, isolated from every other agency by construction rather than promise.
The air-gap is the product
A ministry product, not a platform tenant
AnHarga is sold, contracted and deployed to KPDN alone — its own instance, its own brand, its own data boundary. The ministry-fiefdom doctrine applied as architecture: no other agency can read a single row.
The engine is shared; nothing else is
Receipt verification, k-anonymization and cohort flooring run on the same internal engine as every Antrex product. That reuse is invisible to buyers by design — institutions sign with a product, never with a platform.
Zero cross-ministry joins
There is no foreign key from a AnHarga sighting to a AnTIE corridor or a AnBanjir council instance. Not prohibited by contract — absent by construction. That sentence is what makes the tender pass legal review.
Four edges, each one consented
The index is only as honest as its supply network: merchants opt in, the crowd is accountable, reputation is pseudonymous, and the public gets to see what it built.
AnKedai — the consented merchant floor
Opt-in AnKedai outlets publish floored price bands for listed items: the ground-truth layer that cross-checks crowd sightings without a single individual receipt crossing over. Merchants revoke per store, per week.
Supply side of the index, harvested as a by-product of bookkeeping.
The crowd — shoppers as sensors
Shelf-tag and receipt photos from four million ordinary shops, resolved against the merchant feed and cohort floors. Contributors see the public dashboard they build; that visibility is the retention mechanic, not a payout.
Density no officer-rotation programme can buy.
AnVerified — the civic trust layer
AnVerified keeps contributors accountable without naming them: pairwise pseudonyms make a serial fabricator recognisable to the model while remaining invisible as a person. Reputation without a profile.
The spine product, used exactly as designed.
The public dashboard — transparency as gravity
The same index KPDN licenses ships openly as the consumer price radar. Citizens reading the fair band today are the ones photographing shelves tomorrow — the reciprocity loop that makes the network self-reinforcing.
Open data is the growth engine, licensed depth is the revenue.
The refusals written into schema
One instance, one signatory
Finance wants a cost-of-living cut? That is a separate deployment with its own contract and its own vault. Nothing AnHarga holds propagates to another ministry because nothing is allowed to be shared.
Portfolio primitives, not portfolio data
AnHarga reuses the ledger engine, the k-anonymizer and the offline sync layer — code, never rows. The only outbound data path is the one KPDN publishes.
The merchant feed that grounds this index is the same ledger kedai keep for themselves. See the supply side.
Ready to build something intelligent?
Let's engineer your next product — from idea to launch.