{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-24T17:38:21.804Z",
  "record_id": "VXI-EXT-PROCUREMENT-COUPA-APPROVAL-OBJECT-STATE-SPECIFIC-AUTHORITY-01-v1",
  "record_kind": "external_reference",
  "title": "Coupa approval objects and decision scope",
  "system": "Coupa",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does an approved Coupa document establish authority for a later purchase-order change?",
  "near_questions": [
    "Can a Coupa approval be reused for a revised purchase order?",
    "What object does a Coupa approval identify?",
    "When is a Coupa approve or reject API action valid?",
    "Which evidence binds approval to a purchasing change?"
  ],
  "supported_claims": [
    {
      "claim": "Coupa’s Approvals API binds an approval to an approvable object and type, an approval chain, status and approver information. Approve and reject actions require a Pending approval. Purchase-order changes have their own operations and approval handling. A past approval record therefore does not, by itself, identify approval for a changed order.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Legal authority to increase spending from an API record alone",
    "The buyer’s approval limits and effective workflow are unknown.",
    "Buyer deployment testing, live runtime enforcement, certification or permission to act",
    "Expanded capabilities or licences for existing INDEX executables"
  ],
  "public_summary": "Coupa’s Approvals API binds an approval to an approvable object and type, an approval chain, status and approver information. Approve and reject actions require a Pending approval. Purchase-order changes have their own operations and approval handling. A past approval record therefore does not, by itself, identify approval for a changed order.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Approvals API (/approvals) | Coupa",
    "source_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/approvals-api-%28approvals%29",
    "checked_on": "2026-10-24",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-COUPA-APPROVAL-OBJECT-STATE-SPECIFIC-AUTHORITY-01-v1",
    "candidate_record_sha256": "744958ea455151569b4d6387cc4d4965feeba8b1058409c99249f765aaa1d6ce",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Coupa’s Approvals API binds an approval to an approvable object and type, an approval chain, status and approver information. Approve and reject actions require a Pending approval. Purchase-order changes have their own operations and approval handling. A past approval record therefore does not, by itself, identify approval for a changed order.",
    "required_buyer_context": "Current order and change identifiers; Approval chain, status and approver/delegate evidence; Applicable limits and revision approval policy. Buyer deployment not inspected.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-24",
    "claim_to_check": "Does an approved Coupa document establish authority for a later purchase-order change?",
    "documented_statement": {
      "status": "documented",
      "statement": "Coupa’s Approvals API binds an approval to an approvable object and type, an approval chain, status and approver information. Approve and reject actions require a Pending approval. Purchase-order changes have their own operations and approval handling. A past approval record therefore does not, by itself, identify approval for a changed order.",
      "source_ids": [
        "coupa-approvals-legacy",
        "coupa-changes"
      ]
    },
    "review_inference": {
      "status": "review_inference",
      "statement": "Reconcile the approval object and current change with the buyer’s approval rules.",
      "source_ids": [
        "coupa-approvals-legacy",
        "coupa-changes"
      ]
    },
    "buyer_evidence_required": [
      "Current order and change identifiers",
      "Approval chain, status and approver/delegate evidence",
      "Applicable limits and revision approval policy"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Do not reuse a historical approval as evidence for a changed purchase without matching scope."
    },
    "unknowns": "The buyer’s approval limits and effective workflow are unknown.",
    "unknown_finding": {
      "status": "unknown",
      "statement": "The buyer’s approval limits and effective workflow are unknown."
    },
    "evidence_sources": [
      {
        "source_id": "coupa-approvals-legacy",
        "url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/approvals-api-%28approvals%29",
        "final_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/approvals-api-%28approvals%29",
        "status": 200,
        "captured_at_utc": "2026-10-24T17:28:02.054Z",
        "sha256": "2b691627cec3b4212c495d77663c5535a3d5955982816b3e449d952f5fca9898",
        "bytes": 230142,
        "title": "Approvals API (/approvals) | Coupa",
        "hash_basis": "Decoded HTTP response body bytes",
        "rights_review": "Factual paraphrase and source metadata only; raw source retained privately and not redistributed.",
        "checked_on": "2026-10-24",
        "capture_status": 200,
        "claim_review_completed": true,
        "reviewed_sections": [
          "Approval fields",
          "Actions",
          "Pending-state requirement"
        ],
        "version_context": "Coupa Core API documentation captured 24 October 2026 from the official Compass documentation route; tenant release and approval configuration require verification."
      },
      {
        "source_id": "coupa-changes",
        "url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/purchase-orders-api-%28purchase_orders%29/purchase-order-change-api",
        "final_url": "https://compass.coupa.com/en-us/products/product-documentation/integration-technical-documentation/the-coupa-core-api/resources/transactional-resources/purchase-orders-api-%28purchase_orders%29/purchase-order-change-api",
        "status": 200,
        "captured_at_utc": "2026-10-24T17:28:00.458Z",
        "sha256": "ba21c0a36016cf4677de407aa4ae5eb5203e3c2bb28fecb693bf64655dc65298",
        "bytes": 241247,
        "title": "Purchase Order Change API | Coupa",
        "hash_basis": "Decoded HTTP response body bytes",
        "rights_review": "Factual paraphrase and source metadata only; raw source retained privately and not redistributed.",
        "checked_on": "2026-10-24",
        "capture_status": 200,
        "claim_review_completed": true,
        "reviewed_sections": [
          "Overview",
          "PO revision retrieval",
          "Change actions"
        ],
        "version_context": "Coupa Core API documentation captured 24 October 2026 from the official Compass documentation route; tenant release and approval configuration require verification."
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Documentation review only; the buyer must establish applicability and actual outcomes. INDEX does not inspect or control the deployment.",
    "paid_value": {
      "decision_context": "Prevent an agent from treating an earlier approval as open-ended purchasing authority.",
      "free": "Complete review, sources, practical questions and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck the documented behavior, product version and buyer evidence before relying on a current outcome."
    },
    "buyer_relevance": "Prevent an agent from treating an earlier approval as open-ended purchasing authority.",
    "refusal_conditions": [
      "Do not reuse a historical approval as evidence for a changed purchase without matching scope."
    ]
  },
  "niche": {
    "niche_id": "agent-authority-action-evidence",
    "label": "Agent Authority & Action Evidence",
    "classification_id": "payments",
    "classification_label": "Agent Payments, Authority & Transaction Evidence",
    "topic_id": "payments",
    "buyer_intent": "Prevent an agent from treating an earlier approval as open-ended purchasing authority.",
    "comparison_role": "supplementary_discovery"
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#coupa-approval-object-state-specific-authority",
  "machine_readable_record": "/varexis-index/records/coupa-approval-object-state-specific-authority.json"
}
