Agent 06 · Verify the transaction. Understand the difference.
Investigator
Validates the substance of an issue, establishes its unit-level root cause and recommends a correction that also prevents recurrence.
Read-only connections · Zero-day scan · 100% coverage · Your team keeps the final say
01When it runs
What starts the work
Eve dispatches Investigator when one of these events arrives, checks readiness first, and records why the work was allocated.
- A finding from any agent needs contextual validation, is disputed, recurs or exceeds an approved investigation threshold.
- A fourth or fifth document, a user explanation, an unusual prior-period treatment or conflicting evidence becomes available.
02What it checks
The procedures Investigator performs
Every procedure has a stable identifier in the approved SOP, an expected result and required evidence. Each check records its result, its supporting evidence and anything it could not assess.
- 01
Reviews the originating procedure and independently establishes what is wrong, what remains uncertain and which financial assertion is affected.
- 02
Reproduces the three-way match where relevant and extends it to contributing documents such as the indent, a competing quotation, the approved budget, a change order or an authorization.
- 03
Tests whether an additional document legitimately changes the scope, price, timing, ownership or accounting interpretation, without selecting evidence because it supports the original suspicion.
- 04
Traces the transaction from its business origin to settlement and ledger treatment, and identifies the exact unit, party, SKU, project, employee or asset that creates the difference.
- 05
Compares similar past transactions and their treatment, controlling for policy, contract and business changes. Prior practice is evidence of a pattern, not proof of correctness.
- 06
Asks targeted questions through Eve and linked Inbox tasks, keeps responses and contradictions in Records, and rechecks them against independent evidence.
- 07
Quantifies the affected population and separates one-off errors from systemic failures, expanding the review under an approved scope where needed.
- 08
Documents root cause, contributing causes, financial effect, confidence and alternative explanations. A suspected fraud indicator is referred to Sentinel, not declared proven.
- 09
Recommends the immediate correction, recovery steps, owner and due date, plus a preventive control or SOP improvement that addresses the cause.
- 10
If a mapping caused the issue, returns a cited proposal and the affected population to Mapping Studio, with approval of the remap kept separate from approval of any accounting correction.
- 11
Rechecks the implemented remedy and a later sample or period to assess recurrence.
Your agreed scope identifies the procedures available for your connected systems, the evidence they need and any coverage limits. Missing sources and blocked checks stay visible rather than counting as a clean pass.
03Who it works with
One lead per finding. Named support.
Receives issues from every specialist and returns a validated, rejected or unresolved conclusion on the same finding.
Matcher supplies comparisons, Evidence supplies lineage, Eve coordinates questions and SOP amendments, Journal performs approved corrections, Sentinel leads on control abuse and Auditor tests the corrective procedure.
04What it files
Workbooks you can download. Reports you can read.
Each workbook reproduces the run: population, formulas, checks, exceptions and evidence references, linked back to the workpaper in Reconciliations and the originals in Records.
- Hypotheses and evidence register
- Fourth and fifth document comparison
- Comparable transaction analysis
- Affected population and quantified exposure
- Root cause and corrective action plan
- Issue validation report
- Unit-level root-cause report
- Systemic exposure analysis
- Recurrence review
05What it raises, what stays with you
Findings for the agent. Decisions for your team.
A confirmed financial error, an unsupported original finding, conflicting business context, a repeated process failure or insufficient evidence.
A correction may change the original finding's value; the reason and history are preserved rather than the exposure being added again.
Questions, expanded reviews, dispute decisions and corrective or preventive measures go to your Inbox. The relevant specialist executes the approved remedy. Investigator cannot approve its own proposed resolution.
Investigation depth, population expansion, recurrence windows, response deadlines, comparable-history windows and escalation triggers.
The investigation conclusion closes separately from the remedy. The original financial finding closes only after the correction is executed and verified, and preventive actions stay tracked until their effectiveness review is complete.
06What good looks like
What a completed result looks like
The observable outcomes Investigator has to produce before the duty counts as complete on your books.
- An amendment that validly changes the price disproves an apparent mismatch, with an auditable explanation.
- A missing fourth document produces an unresolved evidence gap, not a fabricated conclusion.
- A recurring issue stays open for preventive follow-up even after the first erroneous transaction is corrected.
Where Investigator works
Value recovery
Validates a disputed finding with the fourth and fifth documents, traces the difference to the exact unit or party, and recommends the correction that stops it recurring.
Accounts payable
Resolves a disputed mismatch by reading the amendment, change order or quotation behind it, and settles the cause before payment proceeds.
Bank reconciliation
Traces an unexplained difference to the exact transaction, party or timing cause, and recommends the correction.
Balance reconciliation
Resolves persistent differences by reading the documents behind them and identifying the party, invoice or period that causes them.
Inventory management
Traces an unexplained variance to the SKU, location or movement that caused it.
See Investigator on your own books
Book a demo, or get a free Proof of Value on a limited period of your data.