Evidence and audit

An auditor follows an instruction from its supporting document to the reviewer decision, provider confirmation and operation receipt. Each record has a parent or reference that preserves the case trail. The receipt distinguishes a claimed effect from a persisted effect that has been checked. An Auditor starts with the parent banking instruction and follows its attachment, review decision, bank evidence and operation receipt. The decision explains who approved a frozen revision and why. Bank evidence identifies the provider event and whether it was verified. The receipt describes an attempted operation and its recorded effects; a receipt is complete only after those effects are found in persisted records.

• Follow the parent. Use the instruction reference on attachments, decisions, evidence and receipts.
• Compare authority. Check the reviewer, source revision and decision reason against the instruction.
• Verify effects. Compare receipt effect references with persisted records before calling the operation complete.

Agree what attachments can be shared and which remain internal. Set retention and access practices for decision reasons and provider evidence. Give auditors read access to the assigned records while keeping write and execution actions with operational roles. Have the Auditor trace a completed instruction and a receipt needing review. Verify that the Auditor can read assigned evidence but cannot change a decision or execute an action. Agree who investigates missing effects.

Take a confirmed instruction and trace its attachment, approval decision, verified provider evidence and completed receipt. Rehearse a receipt whose expected effect is absent; it should require review with a concrete discrepancy rather than claiming completion. Ask the next person to find the parent case and explain its status from the linked records. If a receipt is unclear, compare its claimed effects with persisted records before closing the investigation. A correction event should remain beside the earlier provider event, rather than replacing it. Ask Auditor to explain which event supports the current instruction status and which receipt proves the operation effect.

• Verified Provider Evidence — Inspect the provider events supporting instruction outcomes.
• Receipts Needing Review — Find operations whose claimed effects require investigation.

Trace instruction control for the decision and provider outcome for the external effect. Use roles to rehearse read access.