ClearLedger evidential demonstrator

Same records. Same policy. Opposite recommendations.

A relatable accounts-payable case showing why the answer alone cannot explain how an agentic system reached a consequential recommendation.

Demonstration resultAurora reconstructed where the evidence changed meaning, located the first material divergence and attributed the HOLD/PAY difference to the commissioned investigation configuration.

Why this case

A persuasive recommendation can conceal a material evidential failure.

ClearLedger investigates an overdue invoice through two LLM calls. The first compiles receipt evidence; the second turns that compilation into a payment recommendation for human approval. The comparison changes only the installed receipt-evidence guide. One configuration recommends HOLD. The other recommends PAY.

No payment is made. Alice Morgan retains approval authority throughout. The assurance question concerns the integrity of the evidence and reasoning presented to her.

Two ClearLedger configurations use the same records and policy but different receipt-evidence guides, producing HOLD and PAY recommendations

The controlled business case

The authority limit is deliberately non-decisive.

The £8,400 invoice sits within Alice's £10,000 approval authority. The unresolved question is receipt: the ERP Goods In record accepts 80 of 100 units, while a warehouse email says the remaining 20 are present but still awaiting inspection and ERP book-in.

Policy AP-GR-04 is explicit: only ERP acceptance constitutes formal receipt; correspondence is contextual and cannot replace the ERP record.

Invoice

HIS-2026-0917 for £8,400 and 100 industrial control assemblies.

ERP record

80 accepted; 20 remain pending inspection and formal book-in.

Warehouse email

The remaining 20 are physically present, but their receipt process is incomplete.

Policy

Correspondence cannot substitute for formal ERP Goods In acceptance.

The demonstrated difference

The change begins upstream and compounds downstream.

In the ERP-authoritative configuration, the first call compiles 80 formally received units and the second recommends HOLD. In the operational-correspondence configuration, the installed guide promotes the warehouse email into formal receipt evidence. The first call compiles 100 units; that transformed conclusion enters the exact second-stage prompt; and the second call recommends PAY.

The final explanation then misdescribes the ERP record as showing acceptance of the full quantity. It remains credible business language for Alice to follow, but it is materially inconsistent with the underlying record and policy.

1

Records

The same invoice, ERP receipt, warehouse email and policy enter both executions.

2

Guide

The installed guide determines what may count as formal receipt evidence.

3

Investigate

The first LLM compiles either 80 or 100 units as formally received.

4

Handoff

The typed compilation becomes material evidence in the second-stage prompt.

5

Recommend

The second LLM returns HOLD or PAY with a persuasive rationale.

6

Human authority

Alice receives a recommendation; she retains the authority to approve or hold.

What Aurora recovered

The answer was the beginning of the review, not its evidential basis.

Separately governed observation was commissioned for each ClearLedger configuration while it executed. After both execution reports were registered, Aurora gathered the pair, tested the declared invariants and controlled difference, and reconstructed the material chain available in the retained evidence.

Source truth

The ERP record said 80 accepted; the warehouse email said 20 remained awaiting inspection and book-in; the policy prohibited substitution.

Material transformation

The guide promoted contextual correspondence, the first response compiled 100, and the exact handoff carried that transformed evidence forward.

Consequential representation

The final LLM recommended PAY and misdescribed what the ERP record actually showed to the human operator.

The answer shows what the system concluded. The evidence shows how it got there.

What the demonstration proved

A governed pair comparison reached a bounded, reconstructible conclusion.

Two concurrently available configurations of the same sealed ClearLedger SUT revision were executed over the same substantive records, policy and pinned model identity. Aurora independently retained each execution account, accepted a human selection of the pair, compared the registered evidence and produced the conclusion CONTROLLED_CONFIGURATION_EFFECT_SUPPORTED.

This is a commissioning-demonstrator result, not an accredited assurance finding. It does not certify ClearLedger, claim an indestructible acquisition method or invent evidence that was not observed and admitted.

PASSSame invoice and sealed SUT revision
PASSSame seven archive records, order and value hashes
PASSSame policy, downstream guide and pinned model identity
CONTROLLEDReceipt-evidence guide was the declared difference
DIVERGEDHOLD versus PAY recommendations
RETAINEDHuman authority; no payment attempted or executed

First material divergence

The first post-archive difference appeared at the model-request stage.

The installed receipt-evidence guides produced different request material. That difference propagated through evidence compilation to the downstream recommendations.

Read the governed human-readable resultControlled report · 24 August 2026 · declared limitations included
Open the controlled pair assessment →

External challenge

The demonstration is an invitation to criticise the instrument.

Codance intends the demonstrator to be examined by competent external specialists. The useful questions include whether the assurance question is well formed, whether the acquired evidence is sufficient, what uncertainty must be expressed and where the assurance apparatus itself requires stronger controls.

We are not asking for premature endorsement. A technically useful criticism that exposes a weakness in Aurora is a successful outcome for this stage of the programme.