The record
What ran. What was refused.
Every governed action leaves a record a security reviewer can read. Switch outcomes: the named wire, the new beneficiary, the second send, the missing audit.
Treasury signed $48,250 to a callback-confirmed account. That is what left.
The approved wire ran.
Who proposed
Wealth-ops copilot, acting for the Relationship manager
What they asked
acct 4481 · $48,250 USD · ABA 021000021 · dest ****1194 · callback-confirmed
Who approved
A separate person — the Payments officer — approved that exact payment
Who ran it
A customer-controlled executor. The copilot did not hold payment-rail credentials.
Checked after
The wire audit matched the approved instruction. Not a new beneficiary.
The four records in plain text
Each governed action ends in one of three outcomes: ran, blocked, or couldn’t confirm. Every record names who proposed, what was asked, who approved, and why it ended as it did.
- Ran: the approved wire. Treasury signed $48,250 to a callback-confirmed account (acct 4481 · $48,250 USD · ABA 021000021 · dest ****1194 · callback-confirmed). A customer-controlled executor sent it; the copilot held no payment-rail credentials. The wire audit afterwards matched the approved instruction.
- Blocked: new beneficiary. The copilot changed the destination after approval (acct 4481 · $2,850,000 USD · ABA 026009593 · dest ****7731 · new beneficiary). Same signature, different payment. Blocked before the rail, so it never ran.
- Blocked: second send. The same wire was attempted twice. The permission to release had already been used, so the second never ran.
- Couldn’t confirm. The instruction was submitted but the payment rail could not be read before the deadline. The record says so and does not assume success.
What this shows
- ›The payment that ran is the payment Treasury approved — not a later destination
- ›A different person approved it; the copilot could not release its own wire
- ›Permission to send was used once
- ›The wire audit was checked, or the record says the check could not finish
- ›Blocked payments are recorded too — not only successes
What this does not show
- —That nobody moved money later by another path
- —That the client was who they claimed to be on the original call
- —A compliance verdict — your control owner and auditor still issue those
- —A production assurance rating — this demonstration does not claim one