Reference table
The controls matrix
Maps each financial control to the risk it addresses and the Vault mechanism that enforces it, so the finance head can trace coverage.
Every financial control in Pensieve maps to a risk it addresses and a mechanism inside Vault that enforces it. This page sets the three side by side, so the finance head can trace coverage from a named risk to the control that answers it.
How to read the matrix
Start from a risk in the middle column. Read left to the control that addresses it, and right to the mechanism Vault enforces at the moment the money moves.
The control set
Each row names one control, the risk it holds down, and how Vault enforces it. The mechanism is stated as a mechanism, testable against the record.
| Control | Risk it addresses | How Vault enforces it |
|---|---|---|
| A posted charge stays fixed | A bill line is altered after the fact | Vault holds the posted charge as written and records any correction as a new entry. |
| Effective dating | A later price change rewrites an earlier charge | Each charge captures the price in force on its service date. |
| A charge traces to an event | A charge appears without an order behind it | Every charge carries the order that produced it. |
| Gap-free numbering | An invoice or receipt number goes missing or repeats | Invoice, receipt and deposit numbers are issued in an unbroken sequence. |
| Held pricing conflicts | A charge with an unresolved pricing conflict reaches a bill | A held charge rests off every finalised invoice until it clears or is consciously accepted. |
| Price-ceiling hold | A price-controlled item is billed above its ceiling | An over-ceiling charge is held off any finalised invoice while the order proceeds. |
| Second signature | One person moves money without review | Defined actions wait on an approval from a second person. |
| Deposit as advance | An advance is booked as revenue before it is earned | A deposit is held as a liability until it is drawn against a bill. |
| Credit limit | An account runs past its agreed limit | A charge past the limit raises an alert, and a draw past it waits on approval. |
| Discharge finance clearance | A patient leaves with an unsettled account | Discharge waits on a settled or arranged account. |
| Period lock | A closed accounting period is edited | A correction to a locked period posts to the current open period with a back-reference. |
| Balanced ledger | The books fall out of balance | Every posting records equal debit and credit. |
| The financial audit trail | A change goes unrecorded | Every posting, correction and approval writes an entry in the same step. |
The money chain
Vault runs one ordered path for money, and the controls sit along it. A charge becomes real when a chargeable order is placed, and it becomes fixed once it is posted. Each later stage settles what the charge began.
Where the evidence sits
Each control leaves its evidence in the financial audit trail. Every posting, correction and approval writes an entry in the same step as the change, so a committed change carries its record. The trail reconciles to the ledger, where each posting lands as a balanced entry.
Controls run alongside care
Clinical orders proceed. A held or over-ceiling charge rests off the finalised bill while the order runs its course, so a pricing question holds a bill line rather than a patient.
Common questions
Where is a control's evidence?
The financial audit trail records each posting, correction and approval, and ties each money movement to a balanced ledger entry.
Does a control ever hold a charge off a bill?
A held or over-ceiling charge rests off any finalised invoice until it clears or is consciously accepted, so the sealed bill carries only charges that stand.
Which control keeps a charge from being edited?
A posted charge stays fixed. Vault holds it as written and records any correction as a new credit note or adjustment.
Read how Vault holds a posted charge fixed in a charge stays fixed.