{"manifest":{"system":"PayProof AI","version":"0.1.0","exported_at":"2026-10-25T02:08:34.517012","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","case_number":"XXE-1","audit_chain_integrity":"VALID","dossier_sha256":"2e1c1becaa57e91b366e815c49046803b38847b1089005c6951f2e6bcb7ed1d2"},"case":{"id":"56a70c1b-f161-41a7-8762-c33a3b111105","case_number":"XXE-1","vendor_id":null,"vendor_name":"xxe","invoice_reference":"xxe","amount":"1","currency":"USD","state":"REVIEW_READY","created_by":"admin","created_at":"2026-10-25T02:08:33.647194Z","updated_at":"2026-10-25T02:08:34.517012","rule_version":"2026-09-19.1"},"evidence_objects":[{"id":"aa633dee-02c0-4688-a1a0-a80afffd26f0","filename":"xxe.eml","mime_type":"application/octet-stream","type":"EMAIL_EML","sha256":"0c43bf7db56b327323e92736fbe868480368a9156cbb0d0eb3d49cb88367f447","byte_size":144,"ingested_at":"2026-10-25T02:08:33.982304+00:00"}],"normalized_fields":[{"id":"c9887a46-e0eb-4c3b-b674-8dca6842d053","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","name":"sender_domain","raw_value":"b.com","normalized_value":"b.com","evidence_id":"aa633dee-02c0-4688-a1a0-a80afffd26f0","extraction_method":"parser","source_locator":"eml:From"},{"id":"dc81d840-25d9-4cf1-9aca-1fb6215423fa","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","name":"email_body","raw_value":"<?xml version=\"1.0\"?>\n<!DOCTYPE x [<!ENTITY e SYSTEM \"file:///etc/passwd\">]>\n<x>&e;</x>","normalized_value":"<?xml version=\"1.0\"?>\n<!DOCTYPE x [<!ENTITY e SYSTEM \"file:///etc/passwd\">]>\n<x>&e;</x>","evidence_id":"aa633dee-02c0-4688-a1a0-a80afffd26f0","extraction_method":"parser","source_locator":"eml:body"}],"findings":[{"id":"60fbd844-d109-4bbf-bbcd-c137b4f71b88","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","rule_id":"BENEFICIARY_001_NEW_ACCOUNT","severity":"info","status":"not_applicable","title":"No Beneficiary Account Extracted","explanation":"No bank account or IBAN was extracted from uploaded invoice or email evidence.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:08:34.330725Z"},{"id":"7ec8d627-cdde-4550-8a9f-96ef1e9b7d6a","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","rule_id":"INVOICE_001_DUPLICATE","severity":"low","status":"pass","title":"Invoice Reference Unique","explanation":"Invoice reference 'xxe' does not match any previously paid invoices in vendor history.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:08:34.330755Z"},{"id":"d08f8036-c33e-49fa-a10e-537a56a11906","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","rule_id":"PO_001_MISMATCH","severity":"medium","status":"unknown","title":"No Associated Purchase Order Found","explanation":"No purchase order was attached or linked to this payment case for three-way matching.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:08:34.330769Z"},{"id":"c74964e4-d39e-4886-8d5b-3263cff979b2","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","rule_id":"AMOUNT_001_OUTLIER","severity":"info","status":"unknown","title":"Insufficient Payment History for Outlier Detection","explanation":"Only 0 prior payments recorded for vendor; minimum 3 required for statistical baseline.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:08:34.330781Z"},{"id":"febfa4b3-9313-4798-a06c-eb83ff21a47b","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","rule_id":"EVIDENCE_001_MISSING_BASELINE","severity":"high","status":"fail","title":"Missing Verified Vendor Baseline","explanation":"No verified vendor baseline or trusted banking records exist in the system for this payee.","evidence_ids":[],"origin":"deterministic","metadata":{},"created_at":"2026-10-25T02:08:34.330793Z"}],"decision":{"id":"de041706-8173-4f34-92cf-ea50e8de9261","case_id":"56a70c1b-f161-41a7-8762-c33a3b111105","state":"REVIEW_REQUIRED","reason_codes":["VENDOR_NOT_ONBOARDED"],"required_actions":["Onboard vendor into Vendor Master and establish banking baseline"],"ai_summary":"Automated verification flagged 1 critical discrepancies. Primary risk: Missing Verified Vendor Baseline. Please review findings before approval. (NIM inference unavailable or timed out; running in deterministic mode).","ai_confidence":"deterministic","ai_intent_analysis":{"requests_payment_detail_change":false,"claimed_new_beneficiary":null,"claims_prior_approval":false,"claimed_approver":null,"urgency_level":"normal","supporting_quotes":[],"uncertainties":["NIM inference unavailable or timed out"]},"ai_contradictions":[],"generated_at":"2026-10-25T02:08:34.338525Z","rule_version":"2026-09-19.1"},"verification_callback":null,"audit_trail":[{"id":"f7ec66ed-80e1-42bd-8d33-1ddc9b0a3eb6","actor":"admin","role":"Admin","event_type":"CASE_CREATED","timestamp":"2026-10-25T02:08:33.654639+00:00","payload":{"case_number":"XXE-1","amount":"1","currency":"USD"},"prev_hash":"d8cd272769e1b6c903f7e7610a98a98ae1fe0e1cd3a0919e902e0913dedc228a","hash":"1121a2a259ae51754d4c631ffc8ef780c968be824b8652a07e410e90765fd66b"},{"id":"8f7b1ac6-2af7-455e-87a8-1d25379e0b5b","actor":"analyst","role":"Analyst","event_type":"EVIDENCE_INGESTED","timestamp":"2026-10-25T02:08:34.004097+00:00","payload":{"filename":"xxe.eml","type":"EMAIL_EML","sha256":"0c43bf7db56b327323e92736fbe868480368a9156cbb0d0eb3d49cb88367f447"},"prev_hash":"1121a2a259ae51754d4c631ffc8ef780c968be824b8652a07e410e90765fd66b","hash":"02472d5e405a30935c158d946d907a634e5aee5431821db98996ffdf8b6d334b"},{"id":"39963d22-3ac3-4667-b99f-b2c26b2c762c","actor":"analyst","role":"Analyst","event_type":"ANALYSIS_COMPLETED","timestamp":"2026-10-25T02:08:34.524222+00:00","payload":{"decision":"REVIEW_REQUIRED","reasons":["VENDOR_NOT_ONBOARDED"],"findings_count":5,"ai_model":"deterministic_fallback"},"prev_hash":"02472d5e405a30935c158d946d907a634e5aee5431821db98996ffdf8b6d334b","hash":"d5c7215fab676830732de79064d1a07492131fa64b711b9cecc9c1f11d5a55de"}]}