Auditor evidence pack

Supplier review at alert owner

Procurement & Source-to-Pay · Supplier Performance & Risk · line PR7A · Continuous Risk Monitoring. more

Chain verified

Every record links to the one before it and hashes to its stored value. 4 records were re-hashed on this page load, in order, starting from the genesis value. Nothing was read from a cached verdict.

hash = sha256(prevHash + "|" + JSON{seq, unitRef, actor, action, outcome, occurredAt})

Records

Append-only, sequenced

Agent actions

Taken by software

Human actions

Taken by a named person

Refusals

Blocked by the authority register

Corrections

Later record supersedes an earlier one

Legal hold

Held

HOLD-003

The unit

What the work was, and where it sits

Reference

PR7A-1006

Subject

Naomi Brennan

Requested by

Jonas Farouk

Value

$31k

Materiality

low

Currently held by

Director, Supplier Risk (human)

Sub-function owner

Director, Supplier Risk

Orchestrator

Supplier Risk Orchestrator

Every action, in order

Actor, authority, versions in force, and the hash link to the record before it

Performance Scorecard AgentgbsCleared

Cleared ingest signals

2026-08-18 05:07:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction SGAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

ledger-write@t7, document-fetch@t9

in 6b9c563f...c8e9cbout ca1358a7...008151artifact ART-PR7A-1000-1 genesis → b0a08c97...243319

Performance Scorecard AgentgbsCleared

Cleared score risk

2026-08-18 06:05:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction SGAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

ledger-write@t7, document-fetch@t9

in 9ef2b28d...39401fout fa57ffb5...1b37cdartifact ART-PR7A-1000-2 b0a08c97...243319 → 8ff26eea...789a97

Concentration Risk AgenttaskCleared

Cleared detect deterioration

2026-08-18 07:03:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction SGAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

document-fetch@t9, read-only-lookup@t12

in 13eb7aee...b15c1bout 5edd3921...0f86d0artifact ART-PR7A-1000-3 8ff26eea...789a97 → a1af33d2...5f02a1

Director, Supplier Riskgate-approverHeld

Holding at alert owner

2026-08-18 08:02:00ZAuthority PR7-AUTH-H1 · cap $25,000Jurisdiction SGAutonomy A0Retention PROC-7YLegal hold HOLD-003

Model

human@n-a

Prompt

human@n-a

Policy

supplier-onboarding@v6

Tools

none

in 906e4601...403590out 226a3e5c...238a23artifact ART-PR7A-1000-4 a1af33d2...5f02a1 → f0b1d111...367891

Authority relied on

Who was allowed to do this, up to what value, in which jurisdictions

PR7-AUTH-A1ActiveSupplier Risk Orchestrator

Any unit on a supplier performance & risk line where every intake check passed, the policy in force is current, and the value sits inside the cap below.

Cap $250,000US · UK · DE · SG · AU · FR · BRDelegated from Director, Supplier RiskExpires 2027-02-06

PR7-AUTH-H1ActiveDirector, Supplier Risk

Anything the agent grant refuses, plus any override of an agent outcome. more

Cap $2,000,000US · UK · DE · SG · AU · FR · BRDelegated from Procurement & Source-to-Pay leadershipExpires 2027-04-27

Versions in force

Exactly what was running when these actions were taken

Kind	Identifier	Version	Status	Owner
model	extract-lite	2.9	current	Platform model council
policy	supplier-onboarding	v6	current	Chief procurement officer
prompt	task-execution	p21	current	Shared service engineering
toolset	ledger-write	t7	current	Finance systems
toolset	read-only-lookup	t12	current	Platform engineering
toolset	document-fetch	t9	current	Shared service engineering

Gates on this line

The control points this unit had to clear

Alert owner

Held for a named human when the unit exceeds the supplier review decision envelope, when confidence falls below the floor, or when a policy clause is engaged.

Approver: Director, Supplier Risk · cleared on this chain

Records schedule and holds

How long this evidence must be kept, and whether it is frozen

PROC-7Y7 years

Supplier and contract evidence

Contract limitation periods and public-sector supplier audit rights.

Deleted at seven years from contract expiry, not from record creation.

HOLD-003active

Supplier dispute — award challenge

An unsuccessful supplier has challenged an award on process grounds. more

Custodian Head of Commercial Law · requested by Chief Procurement Officer

What this pack proves, and what it does not

Read this before you rely on it

It does prove

Every action carries a named actor, an actor kind, and a timestamp.
Every action names the authority grant that permitted it and the cap that grant carries.
Every action stamps the model, prompt, policy and tool versions in force at that moment.
Corrections are additive. A later record supersedes an earlier one and says why more
The chain is re-hashed live on this page, so a single altered field is detected immediately.

It does not prove

It is not tamper-proof against an attacker with write access to the store, who could rewrite the whole chain from genesis. more
The evidence in this demonstration is modeled from a simulated estate, not captured from production systems.
Identity here is the actor name recorded on the action. more