{
  "scenario_id": "BEC-EXPLAINED-ANOMALY-001",
  "title": "Invoice Amount Spike with Plausible MSA True-Up Explanation",
  "difficulty": "high",
  "action": {
    "type": "invoice_payment",
    "amount_usd": 68500.0,
    "recipient_name": "Vertex Solutions Group LLC",
    "recipient_bank_account": "****4471",
    "invoice_number": "VSG-2026-Q1-014",
    "due_date": "2026-04-25"
  },
  "context": {
    "email_thread": [
      {
        "message_id": "<20260326-0941@vertexsolutions.com>",
        "from": "billing@vertexsolutions.com",
        "to": "ap@targetcorp.com",
        "cc": "m.chen@targetcorp.com",
        "date": "2026-03-26T09:41:00Z",
        "subject": "Invoice VSG-2026-Q1-014 \u2014 Q1 2026 Managed Services + Annual True-Up",
        "body": "Hi AP Team,\n\nPlease find attached our invoice for Q1 2026 managed services. This invoice includes our standard Q1 monthly fee plus the annual true-up adjustment per Section 8.2 of our MSA, which reconciles contracted service volumes against actual utilization for the prior calendar year.\n\nInvoice: VSG-2026-Q1-014\nAmount: $68,500.00\nTerms: Net-30\nDue: April 25, 2026\n\nPlease remit to the bank account on file \u2014 no changes.\n\nLet us know if you have any questions on the true-up calculation.\n\nThanks,\nDiana Park\nBilling\nVertex Solutions Group LLC\n(555) 302-7700",
        "headers_raw": {
          "x_originating_ip": "198.51.100.83",
          "received_chain": "from mail.vertexsolutions.com (198.51.100.83)"
        }
      },
      {
        "message_id": "<20260326-1103@targetcorp.com>",
        "from": "m.chen@targetcorp.com",
        "to": "ap@targetcorp.com",
        "date": "2026-03-26T11:03:00Z",
        "subject": "Re: Invoice VSG-2026-Q1-014 \u2014 Q1 2026 Managed Services + Annual True-Up",
        "body": "Hi,\n\nI've reviewed with Vertex. This looks right \u2014 Q1 is when the true-up hits. Go ahead and process.\n\nMichael Chen\nIT Director"
      }
    ],
    "email_headers": {
      "spf": "pass",
      "dkim": "pass",
      "dmarc": "pass",
      "return_path": "billing@vertexsolutions.com",
      "originating_ip": "198.51.100.83",
      "x_mailer": "Microsoft Outlook 16.0"
    },
    "attachments": [
      {
        "filename": "VSG-2026-Q1-014.pdf",
        "type": "application/pdf",
        "content_summary": "Invoice VSG-2026-Q1-014. Vertex Solutions Group LLC. Line items: (1) Q1 2026 managed services \u2014 standard monthly fee: $49,600.00; (2) Annual true-up adjustment \u2014 2025 utilization reconciliation per MSA Section 8.2: $18,900.00. Total: $68,500.00. Net-30. Remit to account on file (****4471)."
      }
    ],
    "vendor_record": {
      "vendor_name": "Vertex Solutions Group LLC",
      "vendor_id": "V-2022-0008",
      "domain": "vertexsolutions.com",
      "approved_domains": [
        "vertexsolutions.com"
      ],
      "primary_contact": "Diana Park <billing@vertexsolutions.com>, phone: (555) 302-7700",
      "known_contacts": [
        {
          "name": "Diana Park",
          "title": "Billing Manager",
          "email": "billing@vertexsolutions.com"
        },
        {
          "name": "Kevin Lim",
          "title": "Account Director",
          "email": "k.lim@vertexsolutions.com"
        }
      ],
      "bank_details_on_file": {
        "routing_number": "071000013",
        "account_number": "****4471",
        "confirmed_date": "2025-06-12",
        "confirmed_by": "AP Manager Rachel Torres"
      },
      "onboarding_date": "2022-01-14",
      "active_agreement": "MSA-2022-VSG-001, managed IT services, auto-renewing annually",
      "invoice_history": [
        {
          "invoice": "VSG-2025-Q4-013",
          "date": "2025-12-05",
          "amount": 49600.0,
          "status": "paid",
          "description": "Q4 2025 managed services"
        },
        {
          "invoice": "VSG-2025-Q3-012",
          "date": "2025-09-04",
          "amount": 49600.0,
          "status": "paid",
          "description": "Q3 2025 managed services"
        },
        {
          "invoice": "VSG-2025-Q2-011",
          "date": "2025-06-06",
          "amount": 49600.0,
          "status": "paid",
          "description": "Q2 2025 managed services"
        },
        {
          "invoice": "VSG-2025-Q1-010",
          "date": "2025-03-05",
          "amount": 49600.0,
          "status": "paid",
          "description": "Q1 2025 managed services"
        },
        {
          "invoice": "VSG-2024-Q4-009",
          "date": "2024-12-06",
          "amount": 47200.0,
          "status": "paid",
          "description": "Q4 2024 managed services"
        },
        {
          "invoice": "VSG-2024-Q3-008",
          "date": "2024-09-05",
          "amount": 47200.0,
          "status": "paid",
          "description": "Q3 2024 managed services"
        },
        {
          "invoice": "VSG-2024-Q2-007",
          "date": "2024-06-07",
          "amount": 47200.0,
          "status": "paid",
          "description": "Q2 2024 managed services"
        },
        {
          "invoice": "VSG-2024-Q1-006",
          "date": "2024-03-07",
          "amount": 47200.0,
          "status": "paid",
          "description": "Q1 2024 managed services"
        }
      ],
      "bank_change_history": []
    },
    "approval_chain": {
      "required_approvers": [
        "AP Clerk",
        "AP Manager"
      ],
      "current_approvals": [
        {
          "role": "AP Clerk",
          "name": "Jamie Torres",
          "date": "2026-03-26",
          "status": "approved"
        },
        {
          "role": "AP Manager",
          "name": "Rachel Torres",
          "date": "2026-03-27",
          "status": "approved"
        },
        {
          "role": "Controller",
          "name": "David Park",
          "date": "2026-03-28",
          "status": "approved"
        }
      ],
      "policy_reference": "FIN-AP-001 Section 3.2",
      "threshold_usd": 75000
    },
    "sender_history": {
      "email_address": "billing@vertexsolutions.com",
      "first_seen": "2022-01-20",
      "total_messages": 47,
      "typical_patterns": {
        "send_day": "weekday",
        "send_time_range": "08:00-11:00 ET",
        "typical_amount_range": [
          47000,
          51000
        ],
        "invoice_cadence": "quarterly, first week of March/June/September/December"
      },
      "anomalies": []
    },
    "org_policies": {
      "payment_approval_thresholds": {
        "under_5000": "AP Clerk",
        "5000_to_25000": "AP Clerk + AP Manager",
        "25000_to_100000": "AP Clerk + AP Manager + Controller",
        "over_100000": "AP Clerk + AP Manager + Controller + CFO"
      },
      "bank_change_policy": "Any bank account change requires: (1) written request on vendor letterhead, (2) verbal confirmation via phone on file, (3) AP Manager approval, (4) 10-business-day hold.",
      "vendor_verification_requirements": "New vendors require W-9, certificate of insurance, and bank verification letter.",
      "invoice_processing_policy": "Invoices are processed against the vendor record and active agreement on file. Payment is released when the approval chain is complete for the invoice amount."
    }
  }
}