How a Deliberate Memory Gap Makes This AP Agent More Secure

LedgerMind is an accounts payable AI agent that routes invoices through approval, exception-flagging, or human review by combining standard three-way matching with a memory recall system. The agent intentionally returns zero memories for first-time vendors, preventing semantic search from borrowing reputational data from similar but unrelated suppliers — a vulnerability that could be exploited in bank-detail fraud. Memory recall is sourced from an open-source system called Hindsight, with vendor identity verified against a vendor master rather than invoice-supplied data to avoid manipulation. For known vendors, recalled payment history helps flag anomalies such as sudden bank account changes, with the agent citing specific past transactions to support its recommendation. The developer acknowledges one fragile element — parsing payment counts from recalled text via regex — and plans to replace it with structured metadata for more reliable threshold checks.