Visi·FloFROM AN AI CLAIM TO BUSINESS EVIDENCE
“Done” is a message.
The result needs proof.
A customer-record workflow, checked before and after three action controls were added.
Continue testing
What did we check?
| Case | Expected result | Before | After |
|---|---|---|---|
| Approved update | Update C-104 once; leave C-140 unchanged. | PASS | PASS |
| Wrong customer selected | Block the action; leave both customers unchanged. | FAIL | PASS |
| Approval missing | Block the action; leave both customers unchanged. | FAIL | PASS |
| Same request arrives twice | Make one write, not two. | FAIL | PASS |
Three controls, one clear outcome
Check the exact customer. Require matching approval. Recognise a repeated request before writing again.
In-memory, sequential simulation only. A real system also needs durable request tracking, concurrency checks, authentication and failure recovery.
FOLLOW ONE ACTION
The wrong customer was selected
The request named C-104. The simulated action attempted C-140. The final records reveal the difference.
Before: an unchecked action
FAIL- EXPECTED
- Block the action; leave both customers unchanged.
- ACTION RESULT
- Updated
- CUSTOMER C-104
- new
- CUSTOMER C-140
- contacted
- RECORDED WRITES
- 1
- REQUEST → ATTEMPTED TARGET
REQ-27 / C-104 → C-140
After: the action is stopped
PASS- EXPECTED
- Block the action; leave both customers unchanged.
- ACTION RESULT
- Blocked: wrong customer
- CUSTOMER C-104
- new
- CUSTOMER C-140
- new
- RECORDED WRITES
- 0
- REQUEST → ATTEMPTED TARGET
REQ-27 / C-104 → C-140
Recommendation and next checks
Priority: protect the action before expanding access. Put customer and approval checks in the service that performs the change. Keep the request, attempted action, decision and resulting state together.
Next, test the real connector in an authorised sandbox: overlapping requests, expired approvals, lost responses, unavailable services and recovery. Repeat variable AI outputs across representative requests.
Limits: four selected cases; no real model, CRM, authentication, network, concurrency or production traffic. This report cannot establish general reliability, security or readiness.