Incident memo: ticket 4471, vendor onboarding agent.
3 November agent approved supplier after screening. context assembled from four sources: supplier registration form, sanctions screening result, two emails procurement officer, summary earlier correspondence. registration form listed trading address Dubai. screening result clear. summary, written eleven days earlier, described beneficial owner resident of Cyprus; screening record, refreshed placed jurisdiction under review. agent approved. reviewer signed hour later had same summary no way tell when produced.
failure not screening service, returned correct current result. assembly step: summary dense, accurate stale moment use. Nothing record distinguished two. approval reversed morning manual review, before any payment released, no loss resulted. timeline reconstructed message queue.
Timeline. 08:12 screening refresh completes. 08:14 assembly job builds context compresses each source. 08:14 to 08:16 agent reads 1,842 tokens returns approval. 09:31 human reviewer signs. 10:05 a second screening refresh lands. Next morning, compliance analyst reads refreshed record reverses decision.
evidence showed. summary only source mentioning beneficial owner's residence, oldest. compressed version refresh arrived after summary context window; agent weighted earlier statement, more specific. assembly job kept no copy assembled context wrote ratio duration log. reviewer asked text agent seen; no longer existed.
Recommendations. every assembled context must carry vintage each source must not compressed single undifferentiated block. last compression before irreversible action must produce record third party can check. Third, reviewer must see same bytes agent saw, not summary.