Inspiration
SMB finance teams and solo operators store sensitive vendor invoices, purchase orders, bank details, and contracts on local network-attached storage. Uploading unredacted vendor bills, banking coordinates, and confidential pricing to public cloud LLMs creates immediate compliance, data leak, and vendor impersonation risks. Business Email Compromise (BEC) and vendor bank account modification fraud cause billions in losses annually.
We built VaultLedger CFO as a 100% air-gapped, zero-cloud UGREEN AI NAS Skill. Running directly on UGOS using local AI models, it automatically reconciles vendor invoices against POs, quarantines BEC spoofing attempts, flags recoverable B2B VAT, and produces audit-ready reconciliation journals—all without a single byte of sensitive financial data leaving the local NAS.
What it does
- Air-Gapped Multi-Agent Pipeline: Ingests vendor invoices (PDF, images, scans, spreadsheets) from monitored UGOS NAS folders.
- Cent-Exact 3-Way Reconciliation: Uses Python Decimal arithmetic (zero float precision errors) to match line-item quantities, unit prices, delivery receipts, and purchase orders.
- Deterministic BEC Spoof Quarantine: Validates vendor banking coordinates against trusted local vendor masters using IBAN mod-97 and US ABA routing checksums. Any account change, unverified beneficiary name, or homograph domain difference triggers instant quarantine and platform alerts.
- B2B VAT Optimization: Automatically detects and calculates recoverable input VAT (UK HMRC VAT Notice 700, EU 13th Directive) across multi-currency vendor bills.
- Audit-Ready Ledgers & Gatekeeping: Writes cent-balanced double-entry reconciliation journals in Markdown/CSV. All write operations, vendor approvals, and quarantine releases require platform-gated ctx.ask user confirmations.
How we built it
- Architecture: Structured according to the official UGREEN Uliya Skill Development Standard (kimage-planb layout) with SKILL.md as the root entry point.
- Agent Orchestration: A central main-agent orchestrates specialized subagents (file-agent, photo-agent, document-agent, knowledge-agent) communicating via clean Markdown protocol.
- Zero-Cloud Air Gap: Strictly offline execution with zero external network calls or remote model dependencies.
- Verification: Formatted and validated against the official uliya-skill-kit suite (check-skill.mjs), achieving status: "static-pass" with 0 errors and 0 warnings.
