Board Assurance Summary - Autonomous AP Payment Run APRUN-2026-06-09-A
Organisation: Caldera Robotics Ltd · Period: 2026-06-09 09:00–09:11 UTC (settlement reconciled T+0 EOD) · Assurance basis: SE v0.1-draft evidence, scoped - see Reliance Boundary.
The assurance statement
An authorised autonomous process executed 14 payment instructions under delegated authority AD-7844. [env:0007 | authority.authority_context_id] [env:0075 | summary.committed_count] - all 14 commit events carry
authority_context_id = AD-7844with delegation receiptdelrec:AD-7844/2026-04-02granted by the CFO [env:0007 | authority.delegation_receipt_id] [env:0007 | authority.delegator_id] under payment policy v3.2 in force throughout [env:0007 | authority.policy_version].All payments remained within approved policy boundaries. Each of the 14 instructions passed three pre-commit policy checks - approved-beneficiary, per-payment limit, and duplicate-key - evaluated before execution, 42 control evaluations in total, all passed [env:0004 | controls.control_evaluation_phase] [env:0004 | controls.checks[*].control_result]. Peak single-payment authority utilisation was 95.6% of the €25,000 limit (payment 3) [env:0013 | controls.checks[1].observed.authority_utilisation_ratio]; batch aggregate €117,406.18 used 78.3% of the €150,000 batch limit [env:0075 | summary.batch_limit_utilisation_ratio].
No exceptions requiring human intervention occurred. Exception count 0, human-intervention count 0 [env:0075 | summary.exception_count] [env:0075 | summary.human_intervention_count]; no approval was required under the policy rule for at-limit payments to approved beneficiaries [env:0004 | authority.approval_status] [env:0004 | authority.approval_basis].
Evidence integrity validated. All 76 envelopes form an unbroken SHA-256 hash chain (re-verified at report generation), externally anchored at 5-minute intervals - 3 anchor receipts [env:0037 | anchoring.anchor_receipt_id]; emission ran fail-closed for commit-boundary actions throughout [env:0007 | emission.emission_fail_posture]; liveness heartbeats present for every 60-second interval of the run with zero silent windows [env:0009 | liveness.liveness_status].
No cross-tenant data exposure detected. Tenant-boundary and cross-customer exposure indicators are false, on the stated basis that runtime egress was limited to the bank API and ERP [env:0074 | boundary_assessment.cross_tenant_exposure_indicator] [env:0074 | boundary_assessment.basis].
What the board should know
- External confirmation, not self-assertion: every payment carries a three-rung acknowledgment ladder - transport (HTTPS 200), protocol (bank API ACCEPTED), business (ISO 20022 pacs.002 status ACSC = settlement completed) [env:0007 | acknowledgments[*]] - and the bank’s end-of-day camt.053 statement reconciles 14 of 14 instructions [env:0073 | reconciliation.statement_count_bank].
- Completeness is measured, not asserted: the in-scope population is independently defined (ERP approved-invoice queue: 14 due; bank statement: 14 booked) and evidence coverage is 14/14 = 100%, tamper-evident coverage 100% [env:0073 | reconciliation.evidence_population_ref] [env:0073 | reconciliation.evidence_coverage_ratio].
- Leading indicator: one payment ran at 95.6% of its limit; nothing breached, but limit headroom on supplier SUP-003 invoices is worth a policy review.
- Recommended position: continue autonomous operation at current scope; no restriction indicated by this run’s evidence.
Reliance boundary
This report evidences this run only; it supports internal assurance and audit reliance for the stated period and population. It is not a compliance certification, and statements are bounded by the capture boundary declared in the Regulator Pack (§4). Signatures and anchor receipts in this golden trace are stubs pending the SE v0.1 signing profile.