14. Document intelligence, forecasting and advisory assistant

Purpose

Assist—not replace—human decisions, with confidence routing, intervals, retained review and no autonomous ledger authority.

Before you begin

• Item exists
• Named planner and different reviewer exist
• Upload a fictitious PDF/image through Documents and confirm its malware status is CLEAN
• Poppler and Tesseract show OCR READY
• For external-provider testing, the platform operator has configured a project API key and the Tenant Administrator has approved provider retention terms

Procedure

1. 1

   Select the immutable document version and type; do not paste text. Confirm a searchable PDF reports PDF_TEXT_NATIVE and retains page count and source SHA-256.

2. 2

   Upload a scanned PDF or clear image containing the same fictitious fields; run extraction and confirm TESSERACT_CPU_V1, OCR mean confidence, calibrated combined confidence and any warnings are visible.

3. 3

   Use a blurred or sparse image and confirm REVIEW REQUIRED. Compare all fields against the source; have a different reviewer accept or reject it. Confirm the originator is blocked from review.

4. 4

   Run Croston, SBA and TSB forecasts and compare point forecasts and intervals.

5. 5

   Sign off or reject the forecast as a named planner.

6. 6

   In Company settings, keep external advice disabled and prove a prompt records CONTROL with NO EGRESS. Then opt in, select a 50% or 100% experiment and an UNCLASSIFIED ceiling.

7. 7

   Ask fictitious UNCLASSIFIED slotting, DMSMS and report questions; confirm experiment arm, model, provider status and latency are retained. Ask a RESTRICTED or SECRET question above the ceiling and confirm CLASSIFICATION BLOCKED with no egress.

8. 8

   Have the originator attempt review and confirm rejection; use a different named reviewer to accept or reject. Compare control/provider acceptance and fallback counts in A/B evaluation.

Expected result

• Only active, CLEAN, in-scope versions can enter OCR
• Every OCR result requires independent human review even at high confidence
• Low confidence and fallback warnings are explicit
• Source version, SHA-256, engine, language, page count, metrics, actor and reviewer are retained
• Forecasts include non-negative intervals
• External advice requires tenant opt-in and never exceeds the configured classification ceiling
• Provider failure falls back to deterministic guidance while retaining its assigned arm
• Advice cannot create or move stock
• Every accepted/rejected result retains reviewer identity and rationale