Spreadsheet Failure ModeManual Workflow
Root Operational Bottleneck
Fare class is sampled from expense reports in a monthly audit sheet, so first-class bookings hidden in bulk charges are found only if the sample hits them.
Control Hazard & Audit Exposure
Policy-violating fares are reimbursed and never recovered because the audit is after payment and based on a sample.
Deterministic Software ReplacementClient-Owned Architecture
Travel API Synchronizer & Real-Time Fare Class Audit Gate
Travel-booking API sync that classifies fare family at ticket time and blocks or flags bookings that exceed the allowed class for that traveler and route.
Continuous Assertion Rule
Class assertion: an expense line for air travel cannot approve if the fare class exceeds policy unless a named exception with an approver is stored.