Govern delegated agents from issuance through expiry and revocation.
Vicera keeps AP agent authority inspectable across lifecycle state, mandate scope, checker requirements, revocation or expiry, and the evidence reviewers need before changing delegated access.
- Lifecycle status
- AP Assistant is active; mandate mnd_ap_invoice_payments is active from 2026-05-27 until 2026-12-31.
- Authority boundary
- invoice.review / payment.request is limited to vendor_utility_works, inv_2026_0042, AED, and configured AED thresholds.
- Review evidence
- Requires approval: Amount exceeds approval threshold of AED 5,000.
Governance packet
AP Assistant delegated authority
- Agent
- AP Assistant / Requesting AP agent / active
- Issuer
- Finance Controller / Mandate issuer
- Mandate
- mnd_ap_invoice_payments / issued 2026-05-27 / expires 2026-12-31
- Scope
- invoice.review / payment.request / vendor_utility_works / inv_2026_0042 / AED
- Checker
- AED 12,000 above AED 5,000 routes to AP Manager (Payment approver).
- Evidence
- evt_1kfm8zr · 2026-05-27T09:30:00.000Z
Agent status
active
Suspended agents lose delegated authority before scope or approval checks can grant action.
Mandate scope
1 supplier / 1 invoice
Actions, supplier, invoice resource, currency, and amount limits define the authority boundary.
Checker threshold
AED 5,000
Above-threshold requests require an active, eligible, distinct checker.
Authority window
2026-12-31
Revoked or expired mandates deny otherwise-valid requests instead of routing exceptions.
Delegated authority is live only inside lifecycle, scope, and checker boundaries.
The page data comes from the same local demo fixture and presenter facts used by the authorization proof route.
Lifecycle status
Agent and mandate state are checked first.
AP Assistant can act only while the agent is active and mandate mnd_ap_invoice_payments remains active.
Suspended-agent, revoked, and expired scenarios fail before payment execution.
Authority scope
Delegation is bounded to exact actions and objects.
invoice.review / payment.request is constrained to vendor_utility_works, invoice inv_2026_0042, AED, and configured AED exposure limits.
Unsupported action, supplier mismatch, invoice mismatch, currency mismatch, and limit-denial outcomes stay separate for review.
Maker-checker
The requesting agent cannot bless its own exception.
AP Assistant requests authority use; AP Manager must be active, eligible, and distinct when the request crosses the checker threshold.
AP Assistant (Requesting AP agent) → AP Manager (Payment approver)
Revocation and expiry
Authority withdrawal takes effect at decision time.
A mandate issued on 2026-05-27 expires on 2026-12-31; revoked or expired authority blocks matching requests without creating a checker workaround.
The governance record preserves whether authority was active, revoked, expired, or attached to a suspended agent.
Boundary changes
Reviewers see why scope needs to change.
A request outside vendor_utility_works, inv_2026_0042, AED, or AED 25,000 maximum exposure is denied with the exact failed boundary.
Denied outcomes distinguish lifecycle problems from scope problems and checker problems.
Evidence review
Every governance decision leaves a review packet.
Vicera records the agent, issuer, mandate, request, lifecycle state, scope result, checker evidence, policy reason, and timestamp together.
evt_1kfm8zr · 2026-05-27T09:30:00.000Z
Governance stays inspectable from issuance to review, expiry, or revocation.
evt_1kfm8zr · 2026-05-27T09:30:00.000Z
Issue delegated authority
Finance Controller delegates invoice.review / payment.request to AP Assistant for vendor_utility_works and inv_2026_0042.
mnd_ap_invoice_payments
Check lifecycle state
Vicera verifies agent status active, mandate status active, issue date 2026-05-27, and expiry 2026-12-31.
mandate.active
Enforce scope and checker
AED 12,000 is checked against supplier, invoice, currency, amount, and maker-checker controls before authority can be used.
Approval actor is distinct from the requesting agent.
Review or revoke with evidence
Reviewers can use the audit packet to keep, narrow, expire, or revoke delegated authority without losing decision context.
evt_1kfm8zr
Lifecycle, scope, checker, revocation, and expiry outcomes share one decision vocabulary.
Threshold exceptions pause for a distinct payment approver before execution can continue.
AED 2,400 utility invoice
Amount is within the auto-approval threshold.
Mandate, supplier scope, amount limit, and audit event recorded.
AED 12,000 supplier payment
Amount exceeds approval threshold of AED 5,000.
AP Assistant (Requesting AP agent) → AP Manager (Payment approver) · Approval actor is distinct from the requesting agent.
treasury.wire.create outside invoice/payment mandate
treasury.wire.create is outside invoice.review / payment.request scope: Action is not allowed by this mandate.
Action scope is checked before otherwise-valid invoice, supplier, currency, and amount evidence can authorize execution.
Payment to an unapproved counterparty
Counterparty is not allowed by this mandate.
AP Assistant (Requesting AP agent) → no approver required · No threshold exception approval is required.
Payment against unapproved invoice inv_2026_0999
inv_2026_0999 is outside inv_2026_0042 scope: Resource is not allowed by this mandate.
Invoice resource scope is checked before approval routing, so only explicitly authorized invoices can proceed.
USD payment against AED-only mandate
USD blocked by AED-only mandate: Currency USD is not allowed by this mandate.
Currency scope is checked before threshold approval routing, preserving mandate denomination boundaries.
AED 32,000 above mandate maximum
AED 32,000 exceeds AED 25,000 maximum: Amount exceeds mandate maximum of AED 25,000.
Hard maximum exposure is checked before exception routing, so oversized requests fail closed.
AED 12,000 payment with inactive approver
Suspended AP Manager is suspended: Approval actor is not active.
Approver status is checked at the maker-checker gate before a threshold exception can proceed.
AED 12,000 payment with non-payment approver
Procurement Reviewer has Procurement reviewer: Approval actor lacks required role payment.approver.
Approver role is checked at the maker-checker gate so only payment-authorized reviewers can release threshold exceptions.
Previously valid AP payment request
Mandate is revoked.
AP Assistant (Requesting AP agent) → no approver required · No threshold exception approval is required.
Payment after mandate expiry
Mandate is expired.
AP Assistant (Requesting AP agent) → no approver required · No threshold exception approval is required.
Payment requested by suspended AP agent
Agent status suspended: Agent is not active.
Agent status is checked before mandate scope, amount, or approval routing can grant authority.
AED 12,000 payment without approver
No approver attached: Threshold exception requires a distinct approver.
AP Assistant (Requesting AP agent) → missing required approver · Threshold exception requires a distinct approver.
AED 12,000 threshold exception
AP Assistant cannot approve its own request: Requester cannot approve its own threshold exception.
AP Assistant (Requesting AP agent) → AP Assistant (Requesting AP agent) · Requester cannot approve its own threshold exception.
What reviewers can inspect before changing agent authority.
Vicera keeps the delegated agent, issuer, mandate state, authority scope, checker result, revocation or expiry posture, and policy reason together for evidence review.
- Audit event
- evt_1kfm8zr
- Occurred
- 2026-05-27T09:30:00.000Z
- Agent
- AP Assistant / Requesting AP agent / active
- Authority
- active mandate / issued 2026-05-27 / expires 2026-12-31 / mnd_ap_invoice_payments
- Scope
- invoice.review / payment.request / vendor_utility_works / inv_2026_0042 / AED
- Approval
- approved / final approver distinct: true
- Reason
- Amount exceeds approval threshold of AED 5,000.