Approve supplier invoices only when the AP agent is inside wallet policy.
Vicera checks the AP agent, supplier, invoice resource, institution-approved Sharia/compliance policy, AED wallet thresholds, maker-checker approval, and audit receipt before an invoice payment request can move downstream.
- Invoice scope
- AP Assistant can request invoice.review and payment.request only for inv_2026_0042.
- Approval rule
- AED 12,000 exceeds AED 5,000 and is held for AP Manager.
- Audit result
- Requires approval: Amount exceeds approval threshold of AED 5,000.
Invoice approval packet
AP Assistant to vendor_utility_works
- Mandate
- mnd_ap_invoice_payments / active until 2026-12-31
- Request
- payment.request / AED 12,000 / inv_2026_0042
- Supplier
- vendor_utility_works checked against vendor_utility_works
- Invoice
- invoice inv_2026_0042 checked against inv_2026_0042
- AED limits
- AED 5,000 approval threshold / AED 25,000 maximum exposure
- Checker
- AP Manager / Payment approver / Approval actor is distinct from the requesting agent.
Supplier
vendor_utility_works
Counterparty scope is evaluated before approval routing.
Invoice
inv_2026_0042
Resource scope blocks payment requests against unapproved invoices.
Threshold
AED 5,000
AED 12,000 returns requires approval before execution.
Maximum
AED 25,000
Requests above the hard mandate maximum are denied, not routed as exceptions.
Invoice approval authority is narrower than payment intent.
The page data comes from the same local demo fixture and presenter facts used by the authorization proof route, with institution-approved Sharia/compliance policy enforced before money moves.
Supplier scope
Only approved suppliers can continue.
vendor_utility_works must match the mandate counterparty scope before the AP agent receives any invoice payment authority.
Out-of-scope supplier requests return denied with a reviewer-readable reason.
Invoice resource
The invoice id is part of authority.
inv_2026_0042 is the approved invoice resource. A payment request for another invoice is blocked before approval routing.
Resource mismatch scenarios retain the attempted invoice id in the decision record.
AED thresholds
Small invoices can clear, exceptions pause.
AED invoice payments under AED 5,000 can auto-clear; AED 12,000 requires a checker.
AED 25,000 remains the non-routable maximum exposure.
Maker-checker
The AP agent cannot approve itself.
AP Assistant requests the invoice payment; AP Manager supplies distinct payment approval evidence.
AP Assistant (Requesting AP agent) → AP Manager (Payment approver)
Denial states
Invalid invoice requests fail closed.
Wrong supplier, wrong invoice, non-AED currency, missing approver, and self-approval requests stop before ERP or payment execution.
Each denial keeps the policy reason and request metadata for review.
Revocation
Authority withdrawal is visible.
A revoked mandate denies otherwise-valid supplier and invoice requests without treating them as approval exceptions.
Revoked authority stays attached to the authorization outcome and audit record.
The approval path stays inspectable from request to audit event.
evt_1kfm8zr · 2026-05-27T09:30:00.000Z
AP agent requests approval
AP Assistant submits payment.request for AED 12,000 on inv_2026_0042.
req_inv_2026_0042_payment
Mandate scope is checked
Vicera verifies vendor_utility_works, inv_2026_0042, AED currency, active authority, expiry, and amount controls.
mnd_ap_invoice_payments
Checker evidence is evaluated
AED 12,000 exceeds the threshold, so AP Manager must be distinct and active before the request can continue.
Approval actor is distinct from the requesting agent.
Audit event is recorded
The decision event stores agent, mandate, supplier, invoice, amount, approval result, policy reason, and timestamp evidence.
evt_1kfm8zr · 2026-05-27T09:30:00.000Z
Approval, denial, and revocation states use the same decision vocabulary.
Threshold exceptions pause for a distinct payment approver before execution can continue.
AED 2,400 utility invoice
Amount is within the auto-approval threshold.
Mandate, supplier scope, amount limit, and audit event recorded.
AED 12,000 supplier payment
Amount exceeds approval threshold of AED 5,000.
AP Assistant (Requesting AP agent) → AP Manager (Payment approver) · Approval actor is distinct from the requesting agent.
Payment to an unapproved counterparty
Counterparty is not allowed by this mandate.
AP Assistant (Requesting AP agent) → no approver required · No threshold exception approval is required.
Payment against unapproved invoice inv_2026_0999
inv_2026_0999 is outside inv_2026_0042 scope: Resource is not allowed by this mandate.
Invoice resource scope is checked before approval routing, so only explicitly authorized invoices can proceed.
USD payment against AED-only mandate
USD blocked by AED-only mandate: Currency USD is not allowed by this mandate.
Currency scope is checked before threshold approval routing, preserving mandate denomination boundaries.
AED 32,000 above mandate maximum
AED 32,000 exceeds AED 25,000 maximum: Amount exceeds mandate maximum of AED 25,000.
Hard maximum exposure is checked before exception routing, so oversized requests fail closed.
Previously valid AP payment request
Mandate is revoked.
AP Assistant (Requesting AP agent) → no approver required · No threshold exception approval is required.
AED 12,000 threshold exception
AP Assistant cannot approve its own request: Requester cannot approve its own threshold exception.
AP Assistant (Requesting AP agent) → AP Assistant (Requesting AP agent) · Requester cannot approve its own threshold exception.
What reviewers can inspect after the invoice decision.
Vicera keeps the AP agent request, wallet authority state, supplier and invoice scope, AED threshold result, institution-approved Sharia/compliance policy, maker-checker evidence, and policy reason together before money moves.
- Audit event
- evt_1kfm8zr
- Occurred
- 2026-05-27T09:30:00.000Z
- Authority
- active mandate / mnd_ap_invoice_payments
- Approval
- approved / final approver distinct: true
- Reason
- Amount exceeds approval threshold of AED 5,000.