{"manifest":{"system":"PayProof AI","version":"0.1.0","exported_at":"2026-10-25T02:15:30.286434","case_id":"19214d17-8528-4b1a-9133-2392af33f535","case_number":"SSRF-1","audit_chain_integrity":"VALID","dossier_sha256":"55880efd4a6a59c4815e3d2dd0dd27de55fc0a6f2d83d1af23cc4e9bbbbd5c10"},"case":{"id":"19214d17-8528-4b1a-9133-2392af33f535","case_number":"SSRF-1","vendor_id":null,"vendor_name":"ssrf","invoice_reference":"ssrf","amount":"1","currency":"USD","state":"REVIEW_READY","created_by":"admin","created_at":"2026-10-25T02:15:29.408713Z","updated_at":"2026-10-25T02:15:30.286434","rule_version":"2026-09-19.1"},"evidence_objects":[{"id":"ecda8fef-084f-4443-bdc8-af0593c707c2","filename":"ssrf.eml","mime_type":"application/octet-stream","type":"EMAIL_EML","sha256":"9e12658b60a956b2c732a6a4c36cd6b4d5b49c1f7fcda669ebbe350666244fbc","byte_size":344,"ingested_at":"2026-10-25T02:15:29.744352+00:00"}],"normalized_fields":[{"id":"cca8f585-f9ae-4192-9008-ef467ac71f66","case_id":"19214d17-8528-4b1a-9133-2392af33f535","name":"sender_domain","raw_value":"b.com","normalized_value":"b.com","evidence_id":"ecda8fef-084f-4443-bdc8-af0593c707c2","extraction_method":"parser","source_locator":"eml:From"},{"id":"c979591c-da8e-4a43-9b89-62b8bd2624e9","case_id":"19214d17-8528-4b1a-9133-2392af33f535","name":"email_body","raw_value":"\n![](\"http://dbemc836d9tq09bpnjn0cssjuofwsfsxj.oast.live/id13202-img\")
\nx\nhttp://169.254.169.254/latest/meta-data/\nhttp://169.254.169.254/latest/meta-data/iam/security-credentials/\n","normalized_value":"\n\nx\nhttp://169.254.169.254/latest/meta-data/\nhttp://169.254.169.254/latest/meta-data/iam/security-credentials/\n","evidence_id":"ecda8fef-084f-4443-bdc8-af0593c707c2","extraction_method":"parser","source_locator":"eml:body"}],"findings":[{"id":"965403ef-e40b-4f1b-a3ca-ceeea92d2658","case_id":"19214d17-8528-4b1a-9133-2392af33f535","rule_id":"BENEFICIARY_001_NEW_ACCOUNT","severity":"info","status":"not_applicable","title":"No Beneficiary Account Extracted","explanation":"No bank account or IBAN was extracted from uploaded invoice or email evidence.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:15:30.109277Z"},{"id":"fd1a9e3a-94cb-4e0a-a491-bf32f0b08567","case_id":"19214d17-8528-4b1a-9133-2392af33f535","rule_id":"INVOICE_001_DUPLICATE","severity":"low","status":"pass","title":"Invoice Reference Unique","explanation":"Invoice reference 'ssrf' does not match any previously paid invoices in vendor history.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:15:30.109309Z"},{"id":"57adfd7e-4626-4284-bd81-adeb060b2e01","case_id":"19214d17-8528-4b1a-9133-2392af33f535","rule_id":"PO_001_MISMATCH","severity":"medium","status":"unknown","title":"No Associated Purchase Order Found","explanation":"No purchase order was attached or linked to this payment case for three-way matching.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:15:30.109323Z"},{"id":"6bcb7e22-bc18-439b-96ec-3fd6a579987f","case_id":"19214d17-8528-4b1a-9133-2392af33f535","rule_id":"AMOUNT_001_OUTLIER","severity":"info","status":"unknown","title":"Insufficient Payment History for Outlier Detection","explanation":"Only 0 prior payments recorded for vendor; minimum 3 required for statistical baseline.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:15:30.109336Z"},{"id":"688cccef-316a-45b1-bb62-981a33c54558","case_id":"19214d17-8528-4b1a-9133-2392af33f535","rule_id":"EVIDENCE_001_MISSING_BASELINE","severity":"high","status":"fail","title":"Missing Verified Vendor Baseline","explanation":"No verified vendor baseline or trusted banking records exist in the system for this payee.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:15:30.109348Z"}],"decision":{"id":"e4e69a5c-954c-4fa9-aa81-5a9d643871c6","case_id":"19214d17-8528-4b1a-9133-2392af33f535","state":"REVIEW_REQUIRED","reason_codes":["VENDOR_NOT_ONBOARDED"],"required_actions":["Onboard vendor into Vendor Master and establish banking baseline"],"ai_summary":"Automated verification flagged 1 critical discrepancies. Primary risk: Missing Verified Vendor Baseline. Please review findings before approval. (NIM inference unavailable or timed out; running in deterministic mode).","ai_confidence":"deterministic","ai_intent_analysis":{"requests_payment_detail_change":false,"claimed_new_beneficiary":null,"claims_prior_approval":false,"claimed_approver":null,"urgency_level":"normal","supporting_quotes":[],"uncertainties":["NIM inference unavailable or timed out"]},"ai_contradictions":[],"generated_at":"2026-10-25T02:15:30.116135Z","rule_version":"2026-09-19.1"},"verification_callback":null,"audit_trail":[{"id":"09dffd74-6a40-4d3f-81a8-0eb9206f9025","actor":"admin","role":"Admin","event_type":"CASE_CREATED","timestamp":"2026-10-25T02:15:29.416328+00:00","payload":{"case_number":"SSRF-1","amount":"1","currency":"USD"},"prev_hash":"4eb48cf6ed4384bdfc4986c6772f7df620b06a89a42a29428133de35e0671f4e","hash":"24efc7c989a6df881064d527d41f22824310c67ccd0b8f9d9d3e513d5e3d02ba"},{"id":"c6448892-1e55-41b5-bffe-a87e0d7fb875","actor":"admin","role":"Admin","event_type":"EVIDENCE_INGESTED","timestamp":"2026-10-25T02:15:29.765565+00:00","payload":{"filename":"ssrf.eml","type":"EMAIL_EML","sha256":"9e12658b60a956b2c732a6a4c36cd6b4d5b49c1f7fcda669ebbe350666244fbc"},"prev_hash":"24efc7c989a6df881064d527d41f22824310c67ccd0b8f9d9d3e513d5e3d02ba","hash":"0954aa9244fad788e897e6d4254e1498db660fde77fb05e9f5084c246391b1bd"},{"id":"94b4281a-4053-4335-80ef-d52f3b487890","actor":"admin","role":"Admin","event_type":"ANALYSIS_COMPLETED","timestamp":"2026-10-25T02:15:30.293062+00:00","payload":{"decision":"REVIEW_REQUIRED","reasons":["VENDOR_NOT_ONBOARDED"],"findings_count":5,"ai_model":"deterministic_fallback"},"prev_hash":"0954aa9244fad788e897e6d4254e1498db660fde77fb05e9f5084c246391b1bd","hash":"23f92550cd8db0cc7c94364ea143b709fa69fb699faabbf7f488353ba6dfc184"}]}