CONTROLS MAPPED
Security and compliance
Internal audit and controls agent
Tracepoint
Samples transactions against the control they are meant to satisfy, and writes the working paper with the evidence attached.
170 tokens/s
Throughput
99.3%
Accuracy
740ms
Median latency
2.8M
Calls per month
Maps controls to systems of record, selects statistically defensible samples, tests each against its stated criterion, and documents failures with the underlying records.
Scope
Maps controls to systems of record, selects statistically defensible samples, tests each against its stated criterion, and documents failures with the underlying records.
Capabilities
- Control-to-system mapping
- Defensible sample selection
- Exception documentation
- Working paper generation
- Prior-period carry-forward
Runs on
Deployed in
Calling it from the SDK
const audit = new NexusAgent({ role: 'internal_audit' });
const papers = await audit.test({
control: 'AP-03: dual approval above threshold',
period: '2026-Q1',
sampleMethod: 'monetary_unit'
});
Recorded exchanges
Published examples, reproduced verbatim. This page does not call a model.
Testing a dual-approval control
Asked
Test the dual-approval control on accounts payable for the quarter.
Returned
Sampled 60 payments by monetary unit sampling across 4,180 in-scope transactions. Coverage: 62% of value. Fifty-seven passed. Three exceptions: • Two payments approved by the same user twice, using two accounts that resolve to the same person in the identity directory. The control was satisfied in the system and defeated in fact. This is the finding worth escalating — it is a design weakness, not an operator error. • One payment above threshold with a single approval, backdated approval record. Documented with the audit log entry showing the sequence. Working paper generated with the sample basis, the selection seed so it can be reproduced, and the underlying records for each exception. Conclusion on control effectiveness is left for the audit lead to draw.