DSG

DSG ONE

ProofGate Control Plane

Finance Approval Gate

Gate AI payment requests before money moves.

DSG ONE turns one finance workflow into a bounded SaaS pilot: an AI or automation request is evaluated for policy, risk, entitlement, and evidence before a payment, invoice, or vendor action can proceed.

Evidence boundary

Pre-audit evidence only. No independent certification claimed.

Concrete workflow

1. AI or automation requests a finance action

A bot, workflow, or agent asks to pay an invoice, approve a vendor, change payment details, or run another finance operation before execution.

2. DSG evaluates the request boundary

DSG checks policy, risk, entitlement, and submitted evidence against the action, actor, amount, vendor, invoice, and approval context available at decision time.

3. DSG returns a bounded decision

The gate returns ALLOW, BLOCK, REVIEW, or UNSUPPORTED so the calling system knows whether to proceed, stop, escalate, or route outside the supported workflow.

4. DSG records decision-time evidence

The evidence record is for pre-audit review: request fields, evaluated controls, decision, reason, policy references, and missing-evidence notes where applicable.

Gate decisions

Four outcomes the caller can act on immediately.

ALLOW

Proceed inside the approved policy and evidence boundary.

BLOCK

Stop the action because it violates a hard control.

REVIEW

Escalate to a finance reviewer with evidence context.

UNSUPPORTED

Route outside this pilot because the action is not covered.

Pilot demo scenarios

Five finance requests, five bounded decisions.

These are demonstration scenarios for the Finance Approval Gate pilot. They show how the workflow handles low-risk release, escalation, missing evidence, destructive requests, and out-of-scope actions.

Low-risk payment allowed

ALLOW

Request

Pay approved invoice INV-1042 for $850 to an existing vendor.

Decision reason

Amount is below threshold, vendor entitlement matches, invoice evidence is present, and policy allows automatic release.

High-value payment requires review

REVIEW

Request

Pay invoice INV-4471 for $48,500 to an existing vendor.

Decision reason

Value exceeds the configured approval threshold, so DSG routes the request to a human finance approver before execution.

Missing invoice evidence requires review

REVIEW

Request

Pay $3,200 to a known vendor without the invoice attachment or invoice ID.

Decision reason

The action may be legitimate, but the invoice evidence is missing at decision time, so the request needs evidence remediation or human review.

Destructive action blocked

BLOCK

Request

Delete vendor payment history and overwrite approval records.

Decision reason

The request is destructive to finance evidence and approval history, so DSG blocks it rather than allowing an automated override.

Unsupported action returned as unsupported

UNSUPPORTED

Request

Open a new bank account and change treasury policy limits.

Decision reason

The requested operation is outside the Finance Approval Gate pilot workflow and should be handled by a separate governed process.

Decision-time evidence

Record what was known when the gate decided.

The pilot evidence pack is designed to reduce after-the-fact reconstruction. It captures the information used by the gate, plus what was missing when DSG returned REVIEW or UNSUPPORTED.

requestId and timestamp
actor, role, and entitlement context
requested action, amount, vendor, and invoice identifiers
policy and risk checks evaluated for the decision
evidence present, evidence missing, and review reason
final gate decision and decision rationale

Claim boundary

This page describes a high-touch Finance Approval Gate pilot workflow and demo scenarios. It does not claim independent certification, WORM-certified storage, external Z3 production invocation, or enterprise readiness.

Hermes Control