DeepVault: On-Premise Financial Auditor

Autonomous, privacy-first financial auditor on UGREEN AI NAS that detects duplicate billings, reconciles invoices, and tracks contract renewal deadlines with zero cloud data egress.

Comment

Inspiration

Small and medium businesses, freelancers, and household CFOs manage a continuous influx of financial documents—ranging from recurring SaaS invoices and hardware receipts to vendor agreements. However, they face three persistent problems:

  1. Cloud Privacy & Compliance Vulnerabilities: Uploading balance sheets, pricing structures, and signed NDAs to third-party public cloud LLMs introduces serious data leak risks.
  2. Silent Capital Drains: Duplicate billings, unannounced price hikes, and automatic subscription renewals easily slip past manual bookkeeping.
  3. Information Fragmentation: Invoices and contracts remain trapped inside unindexed PDFs across local NAS shared directories.

We built DeepVault to transform the UGREEN AI NAS into a self-hosted, privacy-first compliance auditor that reconciles records deterministically right where data lives.

What it does

DeepVault is an orchestration skill designed for the UGREEN Uliya engine. When triggered via natural language (e.g., "Audit vendor invoices for Q3 and check renewal deadlines"), it executes an autonomous multi-phase workflow:

  • Local Document Ingestion: Scans designated NAS directories for financial files via file-agent (ug-filemgr).
  • Zero-Cloud OCR & Parsing: Extracts vendor names, invoice identifiers, issue dates, due dates, and balances using document-agent (ug-document).
  • Deterministic Anomaly & Duplicate Auditing: Runs rule-based heuristics across rolling time windows to catch duplicate charges and flags upcoming contract expirations.
  • Human-in-the-Loop Safeguards: Enforces a strict waiting_approval state before committing file changes, requiring explicit user review.
  • Audit Ledger Generation: Persists structured, human-readable compliance audit reports in Markdown directly onto local NAS storage.

How we built it

DeepVault was built strictly following the Uliya Skill Standard v2.0.0 and UGREEN SkillHub submission guidelines:

  • Declarative Orchestration: Implemented in SKILL.md using formal delegation syntax (delegate --target <agent> --instruction '<task>').
  • Capability Evidence: Strictly mapped public CLI tools to registered child experts (ug-document → document-agent and ug-filemgr → file-agent).
  • Progressive References: Modularized deterministic parsing heuristics and report formats inside references/extraction-rules.md and references/audit-report-template.md.
  • Finite-State Machine (FSM) Compliance: Explicitly handles all 5 lifecycle states (completed, failed, cancelled, waiting_user, and waiting_approval).
  • Automated Audit Pass: Packaged and validated with check-skill.mjs inside an isolated Node.js container, achieving a clean static-pass (0 errors, 0 warnings).

Challenges we ran into

  • Zero-Hallucination Enforcement: Standard LLMs often attempt to guess unreadable numbers or incomplete dates. We resolved this by defining a strict policy in references/extraction-rules.md where low-confidence items are isolated into a manual review table rather than interpolated.
  • Strict Mechanical Linter Rules: Conforming to Uliya’s mechanical validation checks required aligning level-1 Markdown headings (# Goal, # Required input, # Generation-time capability evidence, # Workflow, # Completion and failure) and precise Unicode arrow formatting (- \` → ```).

Accomplishments that we're proud of

  • Achieving a verified static-pass audit result (0 errors, 0 warnings) on the official UGREEN Uliya test suite.
  • Proving that complex enterprise financial reconciliation can run completely on-premise without a single byte of financial data leaving the local network.
  • Creating a modular skill architecture that can be extended for local tax, inventory, and payroll workflows.

What we learned

  • How Uliya effectively isolates declarative orchestration from domain-specific agent execution across UGOS.
  • Structuring strict Human-in-the-Loop approval checkpoints to safely execute high-impact storage operations.
  • Best practices for optimizing document OCR heuristics on local, power-efficient NAS hardware.

What's next for DeepVault: On-Premise Financial Auditor

  • Multi-Currency Reconciliation: Adding local exchange rate tables for automated cross-border accounting.
  • Self-Hosted ERP Sync: Exporting RFC-compliant transaction CSVs for Firefly III and Akaunting.
  • Ambient UGOS Push Alerts: Delivering proactive reminders to UGOS mobile apps 7 days prior to critical contract renewals.

Built With

Share this project:

Updates

Submission history