How a finance agent can prepare exceptions without owning the ledger.
A reference design for a supervised agent that gathers evidence, matches transactions, drafts exception explanations, and prepares close work for an authorized finance reviewer.
A finance-exception and close agent is a supervised system that gathers ledger and source evidence, identifies or triages mismatches, prepares a recommended disposition, and routes material decisions and posting authority to an authorized human.
The operating problem and workflow boundary.
Controllers, finance operations leaders, accounting teams, and security owners evaluating exception handling, reconciliation preparation, AP/AR review, and close coordination.
Before state
- Exceptions arrive through spreadsheets, email, ERP queues, and bank or payment portals.
- Reviewers recreate the evidence trail manually and lose time on low-risk preparation.
- Close checklists make ownership visible, but rationale and supporting documents are fragmented.
- A generic automation may post a suggestion without preserving the approver, source, or policy basis.
Defined workflow
The modeled agent collects evidence from approved systems, normalizes the exception, checks it against configured policies and prior treatment, produces a cited recommendation with confidence and materiality metadata, and routes the final decision and any posting to an authorized human.
A supervised production workflow.
Each step states what the system can touch and where a person retains authority.
- 01
Collect and normalize the exception
Ingest approved transaction, invoice, bank, payment, or close-checklist data and create a case with stable identifiers.
- System boundary
- Read-only access to approved finance systems and document stores.
- Human gate
- Stop when identity, period, entity, or source completeness is unresolved.
- 02
Match evidence and classify the reason
Compare fields and supporting documents against deterministic rules, configured tolerance, and prior approved treatments.
- System boundary
- No ledger write access during investigation.
- Human gate
- Escalate material, novel, contradictory, or policy-sensitive cases.
- 03
Prepare a cited recommendation
Draft a clear exception summary, supporting sources, proposed next step, confidence, and items that need reviewer judgment.
- System boundary
- Draft workspace or finance work queue only.
- Human gate
- Reviewer approves, edits, rejects, or asks for more evidence.
- 04
Authorize and record the disposition
An authorized person performs or approves any posting, payment, reconciliation adjustment, or close signoff. The system records the decision trail.
- System boundary
- Segregated duties and least-privilege write path.
- Human gate
- Human authorization is mandatory for material actions and ledger changes.
What must be true before production.
Controls are requirements to validate, implement, test, and approve. They are not certifications.
Segregation of duties
RequirementThe agent cannot independently create, approve, and post a material finance action.
ImplementationSeparate read, draft, approval, and posting permissions. Bind approval to an authorized human identity.
Evidence retainedRole mapping, approval record, posting record, and policy version.
Evidence-backed recommendations
RequirementEvery recommendation cites the transaction and supporting evidence it used.
ImplementationCase-level source links, field-level provenance where feasible, and a visible “evidence missing” state.
Evidence retainedSource IDs, document versions, extracted fields, prompt/tool trace, and reviewer decision.
Materiality and confidence gate
RequirementLow-confidence, material, novel, or contradictory cases route to a human without a suggested autonomous disposition.
ImplementationConfigurable thresholds, exception classes, and mandatory reviewer queue.
Evidence retainedThreshold configuration, route reason, reviewer disposition, and override rationale.
Period and data integrity
RequirementThe agent must respect close period, entity boundary, source freshness, and immutable case IDs.
ImplementationRead snapshots, run timestamps, period locks, reconciliation to source counts, and idempotent operations.
Evidence retainedSnapshot ID, source reconciliation, run ID, and change log.
How a future result becomes defensible.
The same metric definition must be used before and after launch, with attribution limits kept visible.
What is modeled, contextual, or still unproven.
No customer result should be published until a client-approved evidence pack supports it.
Exception taxonomy and materiality policy
Define exception categories, tolerance, materiality, required evidence, approver role, and prohibited actions with the client controller.
Required before any automated recommendation is trusted.Historical evaluation pack
Assemble de-identified historical cases with documented final dispositions to test matching, evidence selection, escalation, and recommendation quality.
Keep cases separated by period, entity, and exception type.Accounting-control context
The relevant proof is a retained evidence trail, proper authorization, and repeatable review, not an unqualified claim of accounting accuracy or compliance.
AICPA ↗Prepare the work, keep financial authority with people.
The safest early scope removes the evidence-gathering and exception-preparation load while leaving material judgment and ledger authority with an authorized reviewer. That creates a measurable workflow without pretending the agent is the controller.
- Read and assemble evidence before proposing anything.
- Expose uncertainty and contradictory evidence instead of smoothing it over.
- Separate draft, approval, and posting permissions.
Close speed is not the success metric by itself.
A faster close that produces undocumented adjustments or hidden rework is not a win. The proof layer includes evidence completeness, correct routing, override rate, and the ability to reconstruct a decision during review.
- Track reviewer edits and overrides by exception type.
- QA source selection and rationale, not just final disposition.
- Keep audit evidence tied to immutable case and run IDs.
Questions about this modeled case.
Is this a real Gaper finance case study?+
Can an AI agent post journal entries or payments?+
How should finance teams measure the result?+
Is this accounting advice?+
Map a finance exception workflow
Start with one exception class, its evidence rules, and its approval boundary.