Steward Agent blast-radius intelligence
← Back to findings
Agent access certification

InvoiceBot

Creates vendor records and routes supplier invoices for payment processing.

Risk tier critical 1 verified finding
Identityinvoice_bot
Owner
Maya Chen, Finance Operations
Review state
pending
Effective accessDirect + delegated
  • approve_payment direct grant
  • create_vendor direct grant
Granted vs. NeededLLM-assisted signal

Declared need

  • adds supplier or payee to vendor master
  • authorizes queued payments for release

Concrete grant gap

No tool-ID-level gap was asserted. Treat capability inferences as review context, not a fact.

Cited findings

Why this card needs attention

critical risk 54/100 Segregation of duties Deterministic check

Critical fraud path: create vendor and approve payment

InvoiceBot possesses both the create_vendor and approve_payment tool grants, giving a single automated agent the ability to add new vendors and subsequently authorize payments to those vendors. This concentration of authority creates a direct fraud pathway that could be exploited to generate fictitious vendors and approve unauthorized disbursements, potentially resulting in material financial loss and SOX compliance violations across the entire accounts‑payable function.

Recommended actionImplement segregation of duties by revoking either the create_vendor or approve_payment grant from InvoiceBot, enforce dual‑approval controls for vendor creation and payment authorization, and add continuous monitoring to detect any instance where a single entity performs both actions.
Evidence agentinvoice_bot toolapprove_payment toolcreate_vendor
Control frameworks context, not certification NIST SP 800-53 Rev. 5 · AC-5 Separation of Duties SOC 2 Trust Services Criteria (2017) · CC6.3 Access modification and segregation of duties ISO/IEC 27001:2022 · A.5.15 Access control ISO/IEC 27001:2022 · A.5.18 Access rights SOX ITGC · SoD Segregation of duties over financial processes EU AI Act (Regulation (EU) 2024/1689) · Art. 14 Human oversight
SOX ITGC — segregation of duties (vendor creation versus payment approval)