Auditor evidence pack

Supplier review at log

Procurement & Source-to-Pay · Supplier Performance & Risk · line PR7A · Continuous Risk Monitoring. more

Chain verified

Every record links to the one before it and hashes to its stored value. 5 records were re-hashed on this page load, in order, starting from the genesis value. Nothing was read from a cached verdict.

hash = sha256(prevHash + "|" + JSON{seq, unitRef, actor, action, outcome, occurredAt})

Records

Append-only, sequenced

Agent actions

Taken by software

Human actions

Taken by a named person

Refusals

Blocked by the authority register

Corrections

Later record supersedes an earlier one

Legal hold

Held

HOLD-003

The unit

What the work was, and where it sits

Reference

PR7A-1024

Subject

Rafael Rhodes

Requested by

Beatriz Nakamura

Value

$13k

Materiality

low

Currently held by

S2P spine (gbs)

Sub-function owner

Director, Supplier Risk

Orchestrator

Supplier Risk Orchestrator

Every action, in order

Actor, authority, versions in force, and the hash link to the record before it

Performance Scorecard AgentgbsCleared

Cleared ingest signals

2026-08-18 05:23:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction DEAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

ledger-write@t7, document-fetch@t9

in 4e5839d7...bf2cd7out 4047441f...076713artifact ART-PR7A-1003-1 genesis → 1d6b8a99...774e44

Performance Scorecard AgentgbsCleared

Cleared score risk

2026-08-18 06:06:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction DEAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

ledger-write@t7, document-fetch@t9

in 760f1107...bae31fout f8a860e0...062801artifact ART-PR7A-1003-2 1d6b8a99...774e44 → 02c1eb80...47742b

Concentration Risk AgenttaskCleared

Cleared detect deterioration

2026-08-18 06:50:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction DEAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

document-fetch@t9, read-only-lookup@t12

in 29fc9a75...ec7117out 5fe35767...4e0b91artifact ART-PR7A-1003-3 02c1eb80...47742b → 5bf3c8da...099059

Director, Supplier Riskaccountable-ownerCleared

Cleared alert owner

2026-08-18 07:33:00ZAuthority PR7-AUTH-H1 · cap $25,000Jurisdiction DEAutonomy A0Retention PROC-7YLegal hold HOLD-003

Model

human@n-a

Prompt

human@n-a

Policy

supplier-onboarding@v6

Tools

none

in bb8cac5f...178a4cout 821a157c...e20a2bartifact ART-PR7A-1003-4 5bf3c8da...099059 → 33c32f4a...b8007d

Performance Scorecard AgentgbsIn progress

Holding at log

2026-08-18 08:17:00ZAuthority PR7-AUTH-A1 · cap $25,000Jurisdiction DEAutonomy A3Retention PROC-7YLegal hold HOLD-003

Model

[email protected]

Prompt

task-execution@p21

Policy

supplier-onboarding@v6

Tools

ledger-write@t7, document-fetch@t9

in 37693901...1e810fout 67a1a025...bf1600artifact ART-PR7A-1003-5 33c32f4a...b8007d → db9ce87c...8926a3

Authority relied on

Who was allowed to do this, up to what value, in which jurisdictions

PR7-AUTH-A1ActiveSupplier Risk Orchestrator

Any unit on a supplier performance & risk line where every intake check passed, the policy in force is current, and the value sits inside the cap below.

Cap $250,000US · UK · DE · SG · AU · FR · BRDelegated from Director, Supplier RiskExpires 2027-02-06

PR7-AUTH-H1ActiveDirector, Supplier Risk

Anything the agent grant refuses, plus any override of an agent outcome. more

Cap $2,000,000US · UK · DE · SG · AU · FR · BRDelegated from Procurement & Source-to-Pay leadershipExpires 2027-04-27

Versions in force

Exactly what was running when these actions were taken

Kind	Identifier	Version	Status	Owner
model	extract-lite	2.9	current	Platform model council
policy	supplier-onboarding	v6	current	Chief procurement officer
prompt	task-execution	p21	current	Shared service engineering
toolset	ledger-write	t7	current	Finance systems
toolset	read-only-lookup	t12	current	Platform engineering
toolset	document-fetch	t9	current	Shared service engineering

Gates on this line

The control points this unit had to clear

Alert owner

Held for a named human when the unit exceeds the supplier review decision envelope, when confidence falls below the floor, or when a policy clause is engaged.

Approver: Director, Supplier Risk · not reached

Records schedule and holds

How long this evidence must be kept, and whether it is frozen

PROC-7Y7 years

Supplier and contract evidence

Contract limitation periods and public-sector supplier audit rights.

Deleted at seven years from contract expiry, not from record creation.

HOLD-003active

Supplier dispute — award challenge

An unsuccessful supplier has challenged an award on process grounds. more

Custodian Head of Commercial Law · requested by Chief Procurement Officer

What this pack proves, and what it does not

Read this before you rely on it

It does prove

Every action carries a named actor, an actor kind, and a timestamp.
Every action names the authority grant that permitted it and the cap that grant carries.
Every action stamps the model, prompt, policy and tool versions in force at that moment.
Corrections are additive. A later record supersedes an earlier one and says why more
The chain is re-hashed live on this page, so a single altered field is detected immediately.

It does not prove

It is not tamper-proof against an attacker with write access to the store, who could rewrite the whole chain from genesis. more
The evidence in this demonstration is modeled from a simulated estate, not captured from production systems.
Identity here is the actor name recorded on the action. more