Page 07 — HITL Interfaces

What humans
actually see.

Three rendered Human-in-the-Loop queue interfaces — one per agent. Each panel shows the exact information a finance controller sees before making a consequential decision: ML evidence, SHAP attribution, comparable history, and a clear action surface. EU AI Act Article 13 transparency embedded in the interface, not the documentation.

HITL-IC-01Group Controller Queue
HITL-TR-01Treasury Manager Queue
HITL-AP-01AP Lead Exception Queue
Art. 13EU AI Act · Transparency Obligation
ImmutableAudit Record · Tamper-Evident
System Overview

Three agents.
Three decision surfaces.

IC RECON AGENT FSM-01 · Isolation Forest+LSTM TREASURY AGENT FSM-02 · Temporal Fusion Transformer AP EXCEPTION AGENT FSM-03 · XGBoost + BERT classifier HITL ROUTER — Firestore · hitl_id generated · status: PENDING Write Guard blocks all ERP / bank API calls until status → APPROVED WRITE GUARD HTTP 403 if hitl_id absent / PENDING AUDIT LOG tamper-evident · AE Ledger HITL-IC-01 Group Controller Queue SLA: 4 hours HITL-TR-01 Treasury Manager Queue SLA: 2 hours HITL-AP-01 AP Lead Exception Queue SLA: 8 hours approve · override · escalate approve sweep · modify · reject approve · reject · query supplier hitl_id status → APPROVED · Write Guard clears · ERP / bank API call proceeds · decision logged to AE Audit Ledger
Fig 01 — System-level HITL flow: agent → Firestore router → three specialised decision queues → Write Guard enforcement → Audit Ledger

Each HITL interface is purpose-built for its approver role. The Group Controller sees intercompany entity graphs and SHAP attribution for anomaly flags. The Treasury Manager sees liquidity forecasts with confidence bands and proposed FX sweep details. The AP Lead sees invoice-to-PO variance calculations and supplier history.

All three interfaces share a structural obligation under EU AI Act Article 13: the model's explanation precedes the action surface. The controller cannot approve before seeing the evidence. The audit record of what they saw — and what they chose — is immutable and cannot be deleted even by a system administrator.

SLA timers are live. On breach, the pending action is escalated automatically to the CFO or Finance Director and blocked from the payment or settlement run until resolved.

3
HITL checkpoints · one per agent FSM
4h / 2h / 8h
SLA windows · IC · Treasury · AP
Art. 13
EU AI Act transparency · explanation before action
0
bypass paths · Write Guard enforces at API layer
HITL-IC-01
HITL-IC-01
Group Controller Queue
Intercompany Reconciliation Agent · FSM-01
Triggered on every ML-flagged IC mismatch — no confidence threshold bypasses HITL.
Approver role: Group Controller (jurisdiction-appropriate, per-entity)
SLA · 4 Hours
Isolation Forest + LSTM
SHAP Attribution
SAP Write Guard
SAP BAPI ingest DE+NL journal entries Entity graph match Veldtmann DE ↔ NL Anomaly flagged score: 0.89 · NL missing hitl_id generated status: PENDING · 4h SLA HITL-IC-01 queue Art. 13 panel shown first Controller reviews SHAP · history · mismatch DECISION APPROVE CORRECTION hitl_id → APPROVED · SAP journal write OVERRIDE reason logged · hitl_id → OVERRIDDEN ESCALATE CFO + Compliance Lead notified SLA BREACH PagerDuty · correction blocked AUDIT LOG hitl_id · decision · operator · timestamp All paths emit immutable audit events: hitl_review_opened · controller_action · hitl_id_issued · sap_write_validated · journal_ref
Fig 02 — HITL-IC-01 decision flow: SAP ingest → anomaly flag → HITL queue → controller decision (approve / override / escalate) → Write Guard → Audit Ledger
HITL-IC-01 — Group Controller Queue — Veldtmann IC Mismatch
SLA 3:47:12 remaining
EU AI Act Art. 13 — Explanation Provided
The following AI-generated analysis must be reviewed before any action is taken. The model's reasoning, confidence score, and top influencing features are disclosed below. This explanation is logged and cannot be modified after display.
Case Metadata
Case ID IC-2026-04-1847
Agent FSM-01 · IC Recon
Created 2026-04-07 09:14 UTC
SLA Deadline 2026-04-07 13:14 UTC
Assignee K. Brandt · Group Controller DE
ML Anomaly Score
Anomaly Score
0.89
High — above 0.80 review threshold
Model Isolation Forest + LSTM ensemble
Model version v2.4.1 · 2026-02-18
Escalation on SLA Breach
SLA breach at T+0
→
CFO notified
→
Group Compliance Lead
Correction blocked from payment run until decision recorded. PagerDuty P2 alert triggered.
Immutable audit record
This review session (hitl_id: IC-2026-04-1847) is logged to the AE tamper-evident ledger. The explanation shown, the action taken, the operator ID, and the timestamp cannot be modified or deleted — including by system administrators.
IC Mismatch Detail
DE Entity (Source)
Veldtmann GmbH
Amount posted€87,400.00
DocumentSS-2026-DE-11423
Posting date2026-04-14
StatusPOSTED
NL Entity (Counterpart)
Veldtmann BV
Amount expected€87,400.00
DocumentMISSING
Check date2026-04-16
StatusNOT POSTED (Day 16)
Invoice typeShared services recharge
Transfer pricing refTP-2026-EU-014 · Shared services agreement
Amount vs TP agreement+12.0% above agreed rate (threshold: 5%)
SHAP Attribution — Top Features
entity_pair_history
+0.41
This entity pair has 3 prior mismatches this year — highest recurrence in portfolio
amount_vs_agreement
+0.28
Invoice €87,400 is 12% above TP agreement rate — 2.4× the 5% auto-approve threshold
posting_timing
+0.14
DE posted day 14; NL counterpart not posted by day 16 — 2-day gap exceeds peer median
Comparable Prior Mismatches — Veldtmann DE/NL
Case ID Date Amount Type Root Cause Status
IC-2026-01-0392 2026-01-19 €62,100 Shared services NL posting delay — ERP batch failure Resolved
IC-2026-02-0711 2026-02-08 €94,500 Shared services TP rate disagreement — manual correction Resolved
IC-2026-03-1204 2026-03-22 €51,200 Recharge NL approver absence — SLA breach escalated Resolved
IC-2026-04-1847 2026-04-07 €87,400 Shared services NL entry missing · amount +12% TP Pending
HITL-TR-01
HITL-TR-01
Treasury Manager Queue
Cash & Treasury Agent · FSM-02
Triggered when: forecast confidence < 0.75 OR proposed FX hedge notional > €500,000.
Approver role: Treasury Manager
SLA · 2 Hours
Temporal Fusion Transformer
Confidence Band · 7-Day
Bank API Write Guard
Banking APIs balance feeds · MT942 TFT Forecast 7-day · confidence: 0.71 EUR gap: €2.1M NL entity · day 5 · conf <0.75 Propose IC sweep DE→NL €2.1M · hitl_id pending HITL-TR-01 Treasury Manager · 2h SLA Manager decision Art. 13 panel shown first APPROVE SWEEP Bank API call with hitl_id MODIFY AMOUNT revised amount · new hitl_id REJECT proposal cancelled · reason logged SLA BREACH hedge cancelled · CFO + Head of Risk AUDIT LOG hitl_id · manager · timestamp · ref hitl_review_opened · manager_action · hitl_id_issued · bank_api_call_validated · hedge_confirmation_ref
Fig 03 — HITL-TR-01 decision flow: TFT forecast → liquidity gap detection → proposed IC sweep → HITL queue → manager decision → Bank API Write Guard
HITL-TR-01 — Treasury Manager Queue — EUR Liquidity Gap · NL Entity
SLA 1:22:44 remaining
EU AI Act Art. 13 — Explanation Provided
The 7-day cash forecast and proposed intercompany sweep below were generated by the Temporal Fusion Transformer model (v3.1.0). Model confidence is 0.71 — below the 0.75 autonomous execution threshold. This explanation is logged and cannot be modified.
Case Metadata
Case IDTR-2026-04-0934
AgentFSM-02 · Treasury
TriggerConfidence 0.71 < 0.75
Created2026-04-07 11:02 UTC
SLA Deadline2026-04-07 13:02 UTC
AssigneeM. Hoffmann · Treasury Mgr
Model Confidence
TFT Confidence
0.71
Below 0.75 threshold — HITL required
Proposed Sweep Details
FromVeldtmann GmbH (DE)
ToVeldtmann BV (NL)
Amount€2,100,000
DE surplus€4,800,000
Value date2026-04-12 (Day 5)
BankING Business · NL account
Escalation on SLA Breach
SLA breach
→
CFO alerted
→
Head of Risk
Proposed hedge instruction cancelled. Treasury ops team alerted for manual execution decision.
Immutable audit record
Session hitl_id: TR-2026-04-0934 logged to AE tamper-evident ledger. The forecast, proposed sweep, action taken, operator ID, and timestamp are permanently recorded.
7-Day EUR Cash Forecast — NL Entity (Veldtmann BV)
EUR Liquidity · NL Entity · Day 1–7 · Model: TFT v3.1.0
€5M €2.5M €0 -€2M D1 D2 D3 D4 D5 ⚠ D6 D7 −€2.1M gap below floor threshold projected post-sweep TFT forecast post-sweep confidence band
Forecast · TFT v3.1.0
Confidence band · ±1σ
Post-sweep projection
Gap event · Day 5
FX Exposure Summary — Open Positions
CHF
Long €3,240,000 · avg 0.9412
CAD
Long €1,880,000 · avg 1.4755
IC sweep does not close CHF or CAD positions. FX hedge decisions remain separate HITL gate if notional exceeds €500,000.
HITL-AP-01
HITL-AP-01
AP Lead Exception Queue
AP Exception Agent · FSM-03
Triggered on: PO_MISMATCH · PRICE_VARIANCE · MISSING_CC · DUPLICATE exception classifications.
Approver role: AP Lead
SLA · 8 Hours
XGBoost + BERT Classifier
PRICE_VARIANCE Exception
ERP Write Guard
Invoice ingest Schulz Metallverarbeitung PO matching 3-way match · PO-2026-0441 PRICE_VARIANCE 10.3% · exceeds 5% threshold hitl_id pending payment run blocked HITL-AP-01 AP Lead queue · 8h SLA AP Lead reviews Art. 13 panel · variance APPROVE INVOICE ERP post · hitl_id → APPROVED REJECT vendor notified · reason logged QUERY SUPPLIER price confirmation · hold payment SLA BREACH Finance Director · vendor hold AUDIT LOG hitl_id · ap_lead · exception_class hitl_review_opened · ap_lead_action · exception_class · hitl_id_issued · erp_write_validated · resolution_type
Fig 04 — HITL-AP-01 decision flow: invoice ingest → 3-way PO match → PRICE_VARIANCE classification → exception queue → AP Lead decision → ERP Write Guard
HITL-AP-01 — AP Lead Exception Queue — Schulz Metallverarbeitung · PRICE_VARIANCE
SLA 6:14:38 remaining
EU AI Act Art. 13 — Explanation Provided
The PRICE_VARIANCE exception below was classified by the AP Exception Agent (XGBoost + BERT, v1.8.2). The variance calculation, PO comparison, and supplier history must be reviewed before approving or rejecting. This disclosure is logged immutably.
Case Metadata
Case IDAP-2026-04-5521
AgentFSM-03 · AP Exception
Exception typePRICE_VARIANCE
Created2026-04-07 07:48 UTC
SLA Deadline2026-04-07 15:48 UTC
AssigneeL. van Dijk · AP Lead NL
Supplier
NameSchulz Metallverarbeitung GmbH
Vendor IDV-DE-00471
CountryDE · Düsseldorf
Payment termsNet 30 · SEPA
Prior variances2 this year
Escalation on SLA Breach
SLA breach
→
Finance Director
Exception invoice placed in escalation queue. Payment run blocked for Schulz Metallverarbeitung until decision recorded.
Immutable audit record
Session hitl_id: AP-2026-04-5521 logged to AE tamper-evident ledger. Exception class, explanation shown, action taken, operator ID, and timestamp permanently recorded.
Price Variance · Exception Trigger
Invoice Price / Unit
€342.00
PO Price / Unit
€310.00
Variance %
+10.3%
10.3% variance exceeds auto-approve threshold of 5.0%. Manual review required. Full invoice value: €34,200 (100 units × €342). PO total authorised: €31,000.
Invoice
Invoice No.INV-S-2026-0892
Invoice date2026-04-05
Total€34,200.00
Units100 × Precision bracket M-44
Unit price€342.00
VAT19% DE · €6,498.00
Payment due2026-05-05
Purchase Order
PO NumberPO-2026-0441
PO date2026-03-18
PO total€31,000.00
Units authorised100 × Precision bracket M-44
Unit price€310.00
Authorised byR. Müller · Procurement
DeliveryConfirmed · 2026-04-04
Supplier History — Schulz Metallverarbeitung GmbH · Price Variances
Invoice No. Date PO Ref PO Unit Price Invoice Unit Price Variance Resolution
INV-S-2026-0243 2026-02-11 PO-2026-0188 €298.00 €314.00 +5.4% Approved by AP Lead
INV-S-2026-0581 2026-03-19 PO-2026-0317 €302.00 €329.00 +8.9% Rejected · Supplier reissued
INV-S-2026-0892 2026-04-05 PO-2026-0441 €310.00 €342.00 +10.3% Pending — This review
Variance trend: +5.4% → +8.9% → +10.3%. Escalating pattern — 3rd consecutive price increase above agreement. Recommend query to supplier before approval.
AE Platform Integration
AE · Audit Ledger · tamper-evident HITL records AE · Identity · IAP role-gating per HITL role AE · Data Governance · state lineage AE · Strategy Dashboard · HITL SLA KPIs EU AI Act · Art. 13 · explanation before action EU AI Act · Annex III · high-risk AI conformance