Policies

Every uploaded invoice passes these deterministic checks. A clean invoice under €500 from an established supplier settles straight through; anything flagged — and every first invoice from a new supplier — waits for a World-verified human.

Arithmetic

critical

Line items must sum to the subtotal; VAT must equal rate × subtotal; subtotal + VAT must equal the total (±2 cents rounding).

IBAN checksum

critical

The payee IBAN must pass its ISO 13616 mod-97 checksum. A typo or fabricated account fails structurally.

Supplier baseline

critical

The first settled invoice establishes the supplier’s account. A later invoice naming a different IBAN is blocked — the classic redirection fraud.

Duplicates

critical

The identical document is refused outright; a re-used invoice number from the same supplier is blocked.

Readability

warning

Fields the AI could not read reliably are flagged for human eyes rather than silently trusted.

Amount anomaly

warning

A total more than 3× the supplier’s historical average is flagged.

What approval means

Approving a blocked invoice is a World proof-of-personhood bound to that exact payment’s digest — not a role, not a password. One approval settles at most one payment, and a deliberately approved account change becomes the supplier’s new baseline.