Sanbuk - Accounts Payable Agent with an Operator Console and Approval Gates

Dashboard, task inbox, task detail with the run timeline, approvals and vendor change detail. Every one of the 28 demo tasks opens its own source email and run timeline.

A clean three-way match up to AED 25,000 posts on its own. Above that it waits for an AP clerk up to AED 100,000, an AP lead up to AED 500,000 and the finance controller beyond, and any variance within tolerance needs a clerk.

The agent can prepare a bank change but has no tool to apply it. A person calls back on a number already on file, a second approver from a different team signs off, and the first payment to the new account is held.

17 invoices and credit notes, 15 vendors across the UAE, India, China and Turkey, 13 approvals, 5 vendor changes, 7 playbooks and 11 staff users.

Matches That Rarely Pass First Time

Short deliveries, price changes missing from the PO and invoices without a PO number broke the three-way match on about a third of invoices. Ghafline's own tolerance is 2% or AED 500 per line, whichever is lower, with no tolerance on quantity.

UAE Tax Invoice Rules

Input VAT can generally be recovered only with a valid tax invoice: supplier and recipient TRNs, the words Tax Invoice, VAT per line and total VAT in AED even on foreign currency invoices. Overseas services fall under the reverse charge, which the agent flags rather than decides.

Bank Change Fraud

Business email compromise is the main fraud risk in AP. A look-alike domain, an urgent tone and a new bank abroad had already slipped through once, so no setting or email could be allowed to change bank details.

Emails Are Untrusted Input

Vendor emails and attachments go straight to a language model. Following the OWASP Top 10 for LLM Applications, text such as "ignore previous checks" must never change the agent's permissions, gates or playbook.