SwiftLane Freight is a fictional carrier and logistics company — one of ten we ran end to end through the live Bylaw system. Fictional company, real run, and deliberately scrappy: five thin documents for an operation that has grown faster than its paperwork. If your fleet is ahead of your filing cabinet, read on.

SwiftLane moves freight: trucks, drivers, terminals, a brokerage desk, and the safety and customs obligations that ride along with every load. It came in scrappy — five governing documents covering the essentials and leaving much of the operation governed by habit and tribal knowledge. That is the normal state of a carrier that has been busy hauling, and it is also a liability that stays invisible until a DOT audit, a customer’s vendor review, or an incident turns the spotlight on.

What SwiftLane wants is to keep the fleet rolling, keep its safety scores clean, win and keep shipper contracts, and grow lanes without importing risk it cannot see. What stands in the way is that a logistics company carries regulated-industry obligations on a startup’s documentation, and the gap shows exactly when someone with authority asks to see the proof.

What a logistics company is actually being asked

SwiftLane sits under a dense, physical-world rulebook. The FMCSA and DOT govern driver hours, vehicle maintenance, drug-and-alcohol programs, and the CSA safety scores that shippers check before they award freight. The ELD mandate dictates how hours-of-service data is captured and retained. Hazmat moves bring PHMSA rules. Cross-border freight brings customs and CTPAT supply-chain-security expectations. Cargo liability and insurance impose their own recordkeeping. Shipper contracts increasingly carry security and data riders of their own. And the EU AI Act is not far off for a modern carrier: route-optimization, dynamic-pricing, and especially driver-monitoring AI carry oversight and logging duties, with worker-monitoring uses drawing particular scrutiny.

Every one of those asks “can you prove it operated” — and for a five-document carrier with no continuous record, the honest start-of-run answer was “not yet.” That is exactly why SwiftLane belonged in the fleet: to show what the system does with a regulated operation that is under-documented for its risk.

Where the cracks were

Five documents meant fewer contradictions and more silence, and the engine surfaced both. It flagged 76 items of orphan data — a high count for so few documents, the signature of an operation running on undocumented practice — and a set of direct conflicts where the same rule appeared two ways. The louder finding was absence: whole control areas a carrier is assumed to operate — maintenance verification, hours-of-service review, driver-qualification files — with no documented rule to govern. The system named each gap in plain language and routed it for a decision rather than inventing a control nobody adopted. Of forty-two issues raised, twenty-seven were ruled and recorded.

How Bylaw stepped in

We ran the office at SwiftLane’s scale. The five documents were cleaned into atomic statements, fitted to the governed template, and mapped to 30 live controls — modest and honest. Each is a plain sentence with one operator, one expected value, and the live signal it reads. Contradictions went to the Ruling Guide; nothing mapped across an unresolved conflict; nothing went live without three signatures. The early evidence index came in at 49 — a true picture of a young operation’s proof, not a flattering one, and a baseline that climbs the moment the record runs. SwiftLane left the run with a sequenced list of the controls to document next to clear a DOT review or a shipper’s qualification, with the evidence for what it already had already accumulating. Bylaw held none of SwiftLane’s data.

Forty-five percent proven is not a flattering number, and that is the point. It is true, it is written down where the team can act on it, and it is the honest starting line a fast-growing carrier has never actually had.

Testing tomorrow before it arrives

A growing carrier’s future is new lanes, new states, and new technology, so the Simulation Lab earned its keep. We ran the five territory packs against SwiftLane’s controls and an EU-expansion shock test setting the EU AI Act and GDPR against driver-monitoring and routing AI it will plausibly adopt. Each run returned a ledger of conflicts and ripple counts that doubles as a roadmap: here is what breaks if you open that corridor or turn on that telematics feature before these controls exist. We also connected partners — the shape of a shipper and a customs broker — with evidence-scoped keys, running partner-versus-company simulations where only evidence crossed. Across its sessions SwiftLane ran twelve simulations and exercised an M&A diligence scenario both ways.

Proven, not asserted

Every action passed through the single audited door and chained to the one before it; SwiftLane’s workspace built past 170 chained audit records by the reporting session, verifying end to end, with exports held at the locked gate. The three independent audits re-checked it with the rest of the fleet and found no fabrication — including the unflattering pass rate, which a system that fabricated would have quietly raised.

If this were your operation

If your fleet has outrun your paperwork, the fix is not a panicked binder before the next audit — it is an embedded office that turns the gap into a sequenced plan and starts proving the controls you do run today. Hiring that function in-house is out of reach for most carriers; embedding it through Bylaw is not, and it arrives fluent in FMCSA, hazmat, customs, and the EU AI Act’s line on driver monitoring. SwiftLane is fictional so we could show the honest version — gaps and all. The fastest way to see your own starting line is a governance review.

What crossed, and what never did

It is worth being precise about how the evidence for SwiftLane was collected, because it is the whole difference between Bylaw and the tools that ask for your data. Bylaw never logged in and pulled records. It dispatched worker packets — small, single-purpose, read-only instructions — to the transportation-management system, the ELD and telematics platform, the identity provider, and the cloud, each asking one question and returning one structured verdict: the operator, the expected value, the observed value, and a content hash. The reasoning happened on the other side of a wall, in a sealed engine reached with a key SwiftLane controlled, working only over configuration and event state.

Between SwiftLane’s environment and anything that left it sat the edge wall, which rejected every name, email, and identifier before it could cross — to us, to a partner, or into the audit trail. What crossed was proof: statuses, timestamps, and hashes. What never crossed was content — no manifest, no driver record, no customer data. That is not a promise; it is the architecture, and it is why a worst case for Bylaw could never become a data breach for SwiftLane or its customers. The record is defensible precisely because it contains evidence of operation and nothing an attacker would want.

Why this matters now

The reason to do this now, rather than after the next audit, is that proof cannot be reconstructed backward. You cannot retroactively show that a control operated last quarter if no one was recording it; the evidence either accrued or it did not. A continuous record is the one compliance asset that is strictly more valuable the earlier it starts, because it compounds — every day it runs, it proves a longer period.

The deadline pressure is real and specific. The EU AI Act’s high-risk obligations are phasing into force through 2026, and for a carrier the exposure is concrete the moment route-optimization or driver-monitoring AI is in play: logging across the system’s lifetime, demonstrable human oversight, and post-market monitoring — all of them evidence duties, not policy statements. Add the frameworks already on the table and the enterprise buyers who enforce them faster than any regulator, and the company that started keeping the record is simply ready, while the one that waited is assembling screenshots against a clock. That is the whole argument for starting before you are asked.

Where SwiftLane goes from here

The run did not end with a verdict; it ended with a roadmap. SwiftLane left with a sequenced list of the controls to document and prove next, in priority order: the maintenance-verification discipline a DOT review examines first, the hours-of-service review the ELD mandate assumes, the driver-qualification files a shipper’s carrier-onboarding team checks before it awards freight, the hazmat handling rules that carry their own recordkeeping weight. Each gap the engine named is now an item with an owner and a system where its evidence will be read, which turns “we run on habit” into a concrete plan a small operations team can actually execute.

And the order matters as much as the list. Because the dependency map is live, SwiftLane can see which control to write first so that a downstream one does not break — that documenting the maintenance program cleanly is what makes the safety-score story defensible, that the driver-qualification file feeds three different shipper questionnaires at once. The work is sequenced to compound.

From here, every day the record runs, SwiftLane proves a longer stretch of safe, compliant operation — the history a CSA review, an insurer, or a shipper’s qualification actually wants to see. The carrier that started keeping the record walks into its next DOT audit or its next big shipper contract able to show the period, not a moment. The one that waited is still pulling logs against a clock. For an operation that has grown faster than its paperwork, that is the difference between growth that is provable and growth that is fragile — and it is the entire reason to start the record now rather than after the next inspection forces the issue.

There is a quieter benefit, too: insurability. Cargo and liability underwriters increasingly price a carrier’s safety and compliance posture, and a continuous record of maintenance verification, hours-of-service review, and incident readiness is exactly the evidence that earns better terms at renewal. The same record that satisfies a DOT auditor and a shipper’s qualification team also sits in front of an underwriter — three audiences, one source of proof, no extra scramble. For a freight company running on thin margins, turning compliance from a cost center into a lever on insurance pricing is not a side effect; it is real money on the bottom line, and it is only available to the carrier that kept the record.

And none of it requires SwiftLane to become a compliance company. It requires the office to run quietly underneath the operation — so the people moving freight keep moving it, while the proof that the operation is safe and compliant takes care of itself and is ready the moment anyone with authority asks to see it.

We’re ready to step in.

Every figure in this study came from the live system, run against a company built to look like a real one. The fastest way to see where your own proof stands — strong, fragile, and missing — is a structured governance review. No data required; findings in weeks, and yours to keep whatever you decide.

Brandon JunkinFounder, Bylaw Evidence

Brandon spent years alongside hundreds of mid-market companies at GoDaddy and watched the same story on repeat: good teams unable to prove the good work they did, governance buried under tools that demanded data and returned screenshots. He founded Bylaw Evidence to be the guide those teams were missing — someone who maps the rules, keeps the record, and has the answer ready when the auditor asks. BA in Philosophy of Law, Politics and Ethics, Arizona State University; ARM candidate.