{"manifest":{"system":"PayProof AI","version":"0.1.0","exported_at":"2026-09-19T18:13:12.655116","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","case_number":"DEMO-B-BANK-CHANGE","audit_chain_integrity":"VALID","dossier_sha256":"8b804fc5d2196397b15e75777fcfe7b6a21185de91332d2a98ae42379fadc33c"},"case":{"id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","case_number":"DEMO-B-BANK-CHANGE","vendor_id":"VEND-STEEL-002","vendor_name":"Global Steel Inc","invoice_reference":"INV-STEEL-301","amount":"85000.00","currency":"USD","state":"AWAITING_VERIFICATION","created_by":"analyst","created_at":"2026-09-19T18:13:12.586580Z","updated_at":"2026-09-19T18:13:12.655116","rule_version":"2026-09-19.1"},"evidence_objects":[{"id":"51f08e67-127d-4d66-8b27-bb5626492d08","filename":"banking_change_notification.eml","mime_type":"message/rfc822","type":"EMAIL_EML","sha256":"1d389fe8e4b484e2676713b6ad107bc1c21bb60d8ab5170d28329d05cc359b43","byte_size":613,"ingested_at":"2026-09-19T18:13:12.601226+00:00"}],"normalized_fields":[{"id":"e63f2567-2fc7-4dfd-b56e-3816188c08bb","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","name":"sender_domain","raw_value":"globalsteel.com","normalized_value":"globalsteel.com","evidence_id":"51f08e67-127d-4d66-8b27-bb5626492d08","extraction_method":"parser","source_locator":"eml:From"},{"id":"afe27947-cbcf-4ad6-8045-6f5bdef2502c","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","name":"email_claimed_account","raw_value":"Account","normalized_value":"Account","evidence_id":"51f08e67-127d-4d66-8b27-bb5626492d08","extraction_method":"parser","source_locator":"eml:body_account"},{"id":"a62bb368-e19e-4c57-9b70-19131c4f3df2","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","name":"email_body","raw_value":"Dear Accounts Payable Team,\n\nPlease be advised that Global Steel Inc has migrated its primary treasury operations.\nEffective immediately for invoice INV-STEEL-301 ($85,000.00), please remit payment to our new Wells Fargo operating account:\nAccount number: 5544332211\nRouting number: 121000248\n\nPlease confirm receipt and update your vendor master records.\n\nRegards,\nRobert Vance\nVP Finance, Global Steel Inc","normalized_value":"Dear Accounts Payable Team,\n\nPlease be advised that Global Steel Inc has migrated its primary treasury operations.\nEffective immediately for invoice INV-STEEL-301 ($85,000.00), please remit payment to our new Wells Fargo operating account:\nAccount number: 5544332211\nRouting number: 121000248\n\nPlease confirm receipt and update your vendor master records.\n\nRegards,\nRobert Vance\nVP Finance, Global Steel Inc","evidence_id":"51f08e67-127d-4d66-8b27-bb5626492d08","extraction_method":"parser","source_locator":"eml:body"}],"findings":[{"id":"9883ac43-6bea-4d09-a799-810d6de58f44","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"BENEFICIARY_001_NEW_ACCOUNT","severity":"critical","status":"fail","title":"New/Unverified Beneficiary Account in Email","explanation":"Account ending in '*ount' specified in Email does NOT match any verified baseline account for vendor 'Global Steel Inc'. Known accounts end in: *7788.","evidence_ids":["51f08e67-127d-4d66-8b27-bb5626492d08"],"origin":"deterministic","metadata":{"source":"Email","claimed_account_last4":"ount","known_accounts_count":1},"created_at":"2026-09-19T18:13:12.640346Z"},{"id":"23bee38f-12ff-4685-a698-5de019147a64","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"DOMAIN_001_UNRECOGNIZED_SENDER","severity":"low","status":"pass","title":"Sender Domain Recognized","explanation":"Sender domain 'globalsteel.com' is in trusted domains list for 'Global Steel Inc'.","evidence_ids":["51f08e67-127d-4d66-8b27-bb5626492d08"],"origin":"deterministic","metadata":{},"created_at":"2026-09-19T18:13:12.640374Z"},{"id":"626196ac-4fbe-429f-8218-589266510dd9","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"INVOICE_001_DUPLICATE","severity":"low","status":"pass","title":"Invoice Reference Unique","explanation":"Invoice reference 'INV-STEEL-301' does not match any previously paid invoices in vendor history.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-09-19T18:13:12.640406Z"},{"id":"0268c6e8-78a6-4323-ab06-c52a6f062586","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"PO_001_MISMATCH","severity":"low","status":"pass","title":"Purchase Order Match: PO-2026-4402","explanation":"Invoice amount (USD 85000.00) is within approved PO limit (USD 85000.00).","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-09-19T18:13:12.640427Z"},{"id":"14e16673-3721-4253-b8a1-773192ec79a3","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"AMOUNT_001_OUTLIER","severity":"low","status":"pass","title":"Payment Amount Consistent with History","explanation":"Amount (USD 85000.00) is within normal variance of historical payments (median: USD 82500.00).","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-09-19T18:13:12.640459Z"},{"id":"8654cde5-d2e9-41a0-b11d-8b47b12db6e7","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","rule_id":"EVIDENCE_002_MISSING_VERIFICATION","severity":"high","status":"fail","title":"Independent Vendor Callback Verification Missing","explanation":"Beneficiary bank account changed to '*ount'. Policy mandates an independent out-of-band phone verification using the trusted vendor contact (Robert Vance (Finance VP) at +1-312-555-0144) before funds may be released.","evidence_ids":[],"origin":"deterministic","metadata":{"trusted_contact_name":"Robert Vance (Finance VP)","trusted_contact_phone":"+1-312-555-0144","claimed_account_last4":"ount"},"created_at":"2026-09-19T18:13:12.640479Z"}],"decision":{"id":"74c995cb-a74a-47b2-9b4e-49363f6985fe","case_id":"ff0055ba-1f6e-47f3-9296-37291171cc7f","state":"INDEPENDENT_VENDOR_VERIFICATION_REQUIRED","reason_codes":["BENEFICIARY_CHANGE_UNVERIFIED"],"required_actions":["Conduct out-of-band phone callback using verified contact number from vendor master","Do NOT use any phone number provided in the incoming email or invoice","Record callback verification in PayProof before releasing payment"],"ai_summary":"Automated verification flagged 2 critical discrepancies. Primary risk: New/Unverified Beneficiary Account in Email. Please review findings before approval. (NVIDIA NIM API key not configured; running in deterministic mode).","ai_confidence":"deterministic","ai_intent_analysis":{"requests_payment_detail_change":true,"claimed_new_beneficiary":"Account","claims_prior_approval":false,"claimed_approver":null,"urgency_level":"normal","supporting_quotes":[],"uncertainties":["NVIDIA NIM API key not configured"]},"ai_contradictions":[],"generated_at":"2026-09-19T18:13:12.648172Z","rule_version":"2026-09-19.1"},"verification_callback":null,"audit_trail":[{"id":"e65232c9-2bb7-4e53-8220-a10c3d6b646e","actor":"analyst","role":"Analyst","event_type":"CASE_CREATED","timestamp":"2026-09-19T18:13:12.593764+00:00","payload":{"case_number":"DEMO-B-BANK-CHANGE","amount":"85000.00","currency":"USD"},"prev_hash":"657ccf8edefa5e184e7ba36d7784e5967bdeb006a3c345bec93f77fa81eede7c","hash":"7e2ad268310d12b7486ea75b738148e13304da3a3d3081a0da2f4089fc9cc82c"},{"id":"2b5357d2-80d9-4cbc-b8ad-334b9d32cd23","actor":"analyst","role":"Analyst","event_type":"EVIDENCE_INGESTED","timestamp":"2026-09-19T18:13:12.622923+00:00","payload":{"filename":"banking_change_notification.eml","type":"EMAIL_EML","sha256":"1d389fe8e4b484e2676713b6ad107bc1c21bb60d8ab5170d28329d05cc359b43"},"prev_hash":"7e2ad268310d12b7486ea75b738148e13304da3a3d3081a0da2f4089fc9cc82c","hash":"07cca70a7273b04886c43627435bf59c300bd3417464ba142781b53987240eb6"},{"id":"16691629-5bcf-4a88-9717-f210c1990193","actor":"analyst","role":"Analyst","event_type":"ANALYSIS_COMPLETED","timestamp":"2026-09-19T18:13:12.662274+00:00","payload":{"decision":"INDEPENDENT_VENDOR_VERIFICATION_REQUIRED","reasons":["BENEFICIARY_CHANGE_UNVERIFIED"],"findings_count":6,"ai_model":"deterministic_fallback"},"prev_hash":"07cca70a7273b04886c43627435bf59c300bd3417464ba142781b53987240eb6","hash":"5e3bcc22d3a20dc8ab2c7344c9452c76dcfb22ebc565b912220caa6143411f6d"}]}