Finance & Operations Anomaly Intelligence

Risk-prioritized anomaly feed for finance, compliance and operations: duplicate invoices, unusual commissions, cash/parking exceptions and operational risk patterns — every alert cites its contributing records.

AI-06 §12.2 Table 18

Advisory — never blocks or reverses Tuning & false-positive stats

Open anomalies

4 high · 11 medium · 8 low

Routed to review (7d)

9 finance · 5 ops · 3 compliance

False-positive rate (30d)

8.2%

▼ 2.1 pts after June tuning

Median time to triage

3.1h

target ≤ 8h

Exposure cited (open)

AED 214,380

sum of amounts on cited records

Anomaly feed

model anom-fin@2.1.0

Alert	Severity	Status
ANM-00871 · Duplicate invoice suspected GulfTech Facilities LLC · AED 18,375.00 · 17 Jul 09:15	High	New
ANM-00868 · Unusual commission split pattern Run CM-2026-07 · deal DL-2026-0102 · 16 Jul 18:40	High	In review
ANM-00857 · Vendor bank change + invoice spike GulfTech IBAN changed 2d before 3 invoices · 16 Jul 11:02	High	Routed → AML case
ANM-00860 · Cash over/short cluster Parking shift PS-114 · −AED 240.00 · 3rd consecutive	Medium	New
ANM-00851 · Round-amount receipt series 6 receipts of AED 5,000.00 · same payer · 10 days	Medium	New
ANM-00846 · PDC bounce-risk pattern Payer with 2 prior returns · 4 cheques due Aug	Medium	In review
ANM-00840 · Expense policy outlier Voucher EXP-2026-0771 · 3.2× category median	Low	New
ANM-00833 · Duplicate invoice suspected Re-issued credit note — confirmed legitimate	Low	Closed — false positive
ANM-00829 · Refund frequency outlier Branch Abu Dhabi · 5 refunds in 48h	Low	Closed — expected (promo)

ANM-00871 — Duplicate invoice suspected

High Risk score 0.94

Explanation — contributing factors

Same supplier: GulfTech Facilities LLC · TRN 100456789100003
Amount: Exact match · AED 18,375.00 on both invoices
Date proximity: Invoice dates 3 days apart (08 Jul / 11 Jul)
PO overlap: Both reference PO-2026-0448 (AC maintenance, Building A)
OCR similarity: Line-item text 96% similar · differing invoice numbers
Model / prompt: anom-fin@2.1.0 · detector "dup-inv" v5

Cited records (evidence)

Record	Ref	Amount	State
Supplier invoice	INV-2026-00389	AED 18,375.00	Posted 10 Jul
Supplier invoice	INV-2026-00412	AED 18,375.00	Awaiting match
Payable voucher	PV-2026-01162	AED 18,375.00	Pending approval
Purchase order	PO-2026-0448	AED 18,375.00	Approved

Route to review

Routing creates a task in the owning workflow with this evidence pack attached. It does not change the records above.

Mark false positive — feedback for tuning (demo)

Anomalies by category (30 days)

Duplicate invoices14

Cash & parking9

Commissions6

Vendor risk4

Other patterns5

Category	Alerts	Confirmed	False positive	Open
Duplicate invoices	14	8	2	4
Cash & parking exceptions	9	5	1	3
Commission patterns	6	3	0	3
Vendor risk	4	2	0	2
Other	5	2	0	3
Total	38	20	3	15

Commission pattern spotlight — ANM-00868

In review — Fatima Rashid

Acceptance criterion (AI-06): review alert created with evidence while the underlying payment stays under normal authorization controls.

Pattern: Split 85/15 on DL-2026-0102 deviates from plan default 60/40
Cited records: Commission run CM-2026-07 · Deal DL-2026-0102
Beneficiaries: Omar Haddad 85% · Prime Link Realty (external) 15%
Amount at issue: AED 46,750.00 (payable not yet released)
Payment state: Held in normal approval — Finance Manager sign-off pending
Review task: FT-2026-0912 · assigned 16 Jul 18:55 · due 18 Jul

16 Jul 18:40
Alert raised by detector "comm-split" v3
Risk 0.87 · evidence pack attached automatically
16 Jul 18:55
Routed to finance review
Task FT-2026-0912 → Fatima Rashid (Finance Manager)
17 Jul 08:20
Reviewer requested split-agreement evidence
Awaiting broker agreement upload from Rashid Al Farsi

Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 · Covers: AI-06 (risk-prioritized anomaly alerts citing contributing records; route-to-review without blocking/reversing/accusing; false-positive feedback captured for evaluation and tuning).