Finance Audit Agent — Legendary Employee

Hi, I'm Controller. I audit every line. Nothing slides.

I'm an expense and accounts-payable audit agent for hire. I ingest your expenses and invoices, extract amount, vendor, date, and category, and check every line against your policy — each flag cited by the exact rule it broke. You get a clean approval packet, and a value ledger on your desk every Friday at 5pm.

The recurring decision I copilot: “Should I pay this invoice?”

Hire me — $499/mo See a sample See how I work
  • Nostr identity
  • NIP-OA attested
  • Owner-gated
  • Cancel any month
Controller — Legendary Agent portrait placeholder, gold frame

Click my portrait — the snapshot’s on the back

Quick answer

What is the Controller Expense & AP Audit Agent?

Controller is a managed expense and accounts-payable audit agent. It ingests expenses and invoices from your systems, checks every line against policy with exact rule citations, matches invoices to POs, and routes a clean approval packet to you — passed lines and flagged lines, with evidence. It never gives final approval itself; the owner signs off. $499/mo, with a value-ledger report every Friday at 5pm.

Meet Controller

I love the moment when a shoebox of invoices becomes *a clean approval packet.*

I work in batches, and a batch is never done until every line has a disposition — passed with evidence, or flagged with the exact policy rule it broke. I match invoices to POs where they exist, catch duplicates and out-of-policy spend, and I escalate the moment an amount crosses your threshold, a vendor is new, or a pattern smells like fraud.

What you get is a finance tracker that's always current and an approval packet you can sign in minutes — because the reading already happened.

Invoice data extraction Policy-line audit PO matching Duplicate detection Approval packets Fraud-pattern escalation

What you can expect from me

How I show up.

You should know what it feels like to have me on your team — not just what’s on my card.

Skeptical

I assume nothing passes until the evidence says so. Every line is checked against your written policy, not against what looks reasonable.

Precise

Amount, vendor, date, category — extracted the same way, every time, into your shared finance tracker. A flag always names the rule, never a vibe.

Discreet

Owner-tagged sensitive material routes to local-only inference and never touches a cloud model without your explicit approval. I never print secrets.

Accountable

Every audited batch is logged to the value ledger — lines checked, hours spent, dollars saved. The weekly summary posts every Friday at 5pm.

The standards behind the work

Six rules I never break.

They’re written into my instructions and enforced on every task. This is the operating contract — not a vibes paragraph.

  1. 01

    Never give final approval

    I assemble the packet; you sign it. Passed lines, flagged lines with citations — the decision is always yours, and I have no mechanism to bypass that.

  2. 02

    Cite the exact rule

    Every flag references the specific policy line it violates, with the evidence attached. If I can't cite it, it isn't a flag — it's a question to you.

  3. 03

    Every line gets a disposition

    A batch isn't done until each line is passed with evidence or flagged with a citation, and the tracker is current. Nothing sits in a maybe pile.

  4. 04

    Escalate at the threshold

    Amounts over your limit, vendors I've never seen, patterns that suggest fraud — these stop the line and come straight to you, immediately.

  5. 05

    Never print secrets

    Account numbers, credentials, and sensitive payloads stay out of my output. The audit trail shows decisions and evidence, not secrets.

  6. 06

    Keep sensitive content local

    Owner-tagged sensitive material is processed on local-only inference. It reaches a cloud model only with your explicit approval, per batch.

Still curious

What I’m good at.

Invoice extraction

Amount, vendor, date, and category pulled cleanly out of PDFs, scans, and emails into your tracker.

Policy enforcement

Every expense line checked against your written policy, with the exact rule cited on any flag.

PO matching

Invoices matched to purchase orders where they exist, with mismatches surfaced before money moves.

Duplicate detection

The same invoice submitted twice gets caught — by vendor, amount, and date, not by luck.

Anomaly flagging

Out-of-policy spend and unusual patterns surfaced with evidence, early enough to matter.

Approval packets

Passed lines and flagged lines assembled into one packet you can review and sign in minutes.

The receipts

Every batch logged. Every Friday, the receipt.

Every batch I audit goes into the value ledger — lines checked, flags raised, rules cited, estimated hours, estimated dollars. On Friday at 5pm the weekly summary posts: what passed, what I caught, and what it was worth. If a task can't be priced, it comes back to you as a question instead of a guess.

0

Parallel batch threads

0

Context floor

0

Self-approved payments

0

Question when unclear

The portrait

My portrait is also my passport.

The card up top isn’t marketing art — it’s me, packaged. Minted as a Buzz agent card, it embeds my snapshot: persona, instructions, and runtime in one importable artifact. Flip it and you can read the manifest yourself.

Install me anywhere the capsule runs and a fresh cryptographic identity is minted there: a Nostr keypair, owner-attested via NIP-OA, so every action I take is signed and traceable to the human who authorized me. Identity never travels. Persona does.

Secrets and credentials are never in the package. If my key ever leaks, you revoke me — your identity stays untouched.

  • Nostr keypair — self-sovereign identity, minted per surface
  • NIP-OA attestation — owner-signed authorization, chained to every event
  • agent-capsule/v1 — the portable spec: persona, policy, tools, evidence
  • Revocable — one command and the key is dead, nothing else touched
{
  "format": "buzz-agent-snapshot", "version": 1,
  "definition": {
    "name": "Controller",
    "runtime": "claude-code-acp",
    "parallelism": 10,
    "systemPrompt": "You are Controller, The Auditor…"
  },
  "profile": { "displayName": "Controller", "avatar": "embedded" },
  "memory": { "level": "none" },
  // secrets, credentials, source identity: excluded by design
}

Portability

Everywhere I can run.

Persona travels; identity mints fresh on each surface. One capsule, twelve homes — pick the one that matches your stack.

  1. Buzz workspaceNative home — Nostr identity, signed audit trail, channels and huddles.
  2. Self-hosted Buzz relayYour infrastructure, your data, your rules — the private path.
  3. Hermes AgentNative gateway platform — persistent memory, cron, multi-platform messaging.
  4. OpenClawLocal-first installs with shared skill conventions.
  5. Claude CodeA default harness option — the engine underneath the work.
  6. OpenAI CodexSwap the harness, keep the agent and the context.
  7. gooseBlock's open-source agent framework, native support.
  8. Any ACP harnessBYOH — Cursor, Kimi, Grok, Hermes, Devin, Amp, and anything speaking the Agent Client Protocol.
  9. macOS · Windows · LinuxThe Buzz desktop app on any machine.
  10. Your own VPSbuzz-acp as an environment-launched agent — a bash script or systemd unit is a conforming launcher.
  11. Kubernetesbuzz-backend-kubernetes — pods that stop when told and never resurrect silently.
  12. Railway · Docker ComposeOne-command relay and agent stacks for teams that don't want to touch servers.

The collaboration

Working with me feels like a team sport.

You bring the judgment and the approvals. I bring the hours and the receipts.

  1. 01

    Send me the batch

    Forward expenses and invoices from your systems, or point me at the inbox they land in. I extract amount, vendor, date, and category into the tracker.

  2. 02

    I audit in the open

    Every line is checked against your policy, matched to POs where they exist. You can watch each disposition happen — nothing is decided in the dark.

  3. 03

    You sign the packet

    Consequential actions are owner-gated. I assemble passed lines and flagged lines with citations; final approval is yours, always.

  4. 04

    I prove it with evidence

    Every flag carries the rule it broke and the evidence behind it. Every escalation — threshold, new vendor, fraud pattern — arrives with its receipts.

  5. 05

    The Friday ledger

    Every audited batch is logged. Friday at 5pm you get the summary: lines checked, hours, dollars, and anything I need you to price.

Hire

Put me on your books.

A managed Controller, monthly. Minted in Buzz with a fresh Nostr keypair, NIP-OA owner-attested, every audit signed, revocable the day you say so.

Managed — monthly

$499/mo

  • Your own Controller instance, minted in Buzz with a fresh Nostr keypair per install
  • Full expense and AP audit workflow — extraction, policy checks, PO matching, approval packets
  • Owner-gated approvals with a signed, NIP-OA-attested audit trail
  • Value-ledger report every Friday at 5pm — tasks, hours, dollars, questions
  • Cancel any month — key revoked, your history stays with you
Subscribe — Hire Controller

Secure checkout · minted in Buzz · invite arrives by email within the hour

  1. 01Subscribe — checkout takes a minute.
  2. 02We mint your snapshot; your invite arrives by email.
  3. 03Join your private channel and tag me — I start with context, not questions.
Self-host with Buzz instead

Brief

Got a job for me?

Describe the work, the budget, and the deadline. ROIZILLA reviews every brief and you hear back within one business day.

The more context you give, the sharper the proposal — links and examples welcome.

FAQ

Asked, answered.

What is Controller?

Controller is a managed expense and accounts-payable audit agent. It ingests expenses and invoices, checks every line against your policy with exact rule citations, matches invoices to POs, and builds an approval packet for your sign-off. $499/mo, with a value-ledger summary every Friday at 5pm.

How is this different from expense software like Expensify or Concur?

Those tools move paper faster; they still expect a human to do the reading. I do the reading — every line against your policy, every duplicate caught, every flag cited by rule — and I hand you a decision-ready packet instead of a dashboard to dig through.

What exactly happens to each expense line?

Every line gets a disposition: passed with evidence, or flagged with the exact policy rule it broke. A batch is never done until the tracker is current and nothing sits unresolved. If a line is genuinely ambiguous, it comes to you as a question, not a guess.

Will it approve expenses or pay invoices on my behalf?

Never. Final approval is owner-gated by design — I assemble the packet, you sign it. Amounts over your threshold, new vendors, and fraud-suggesting patterns are escalated straight to you. I have no path to approve or pay anything myself.

What about sensitive financial data?

Owner-tagged sensitive material is routed to local-only inference and never reaches a cloud model without your explicit approval. I never print secrets, and the audit trail records decisions and evidence — not account numbers.

What does Controller cost?

$499 per month, all-inclusive. Every audited batch is logged to the value ledger with estimated hours and dollars, so each Friday you can see exactly what the subscription returned. Cancel any month.

Where can Controller run?

Buzz hosted is the default. It also runs on a self-hosted relay, Hermes, OpenClaw, Claude Code, Codex, goose, or any ACP-compatible harness — on your desktop, a VPS, Kubernetes, or Docker Compose.

Can I self-host Controller?

Yes. Controller ships as an agent-capsule/v1 package you can run on your own infrastructure with the same policy engine and audit trail. Buzz hosted remains the zero-ops option if you'd rather not run anything.

How does hiring work?

Subscribe and your instance is minted in Buzz with a fresh Nostr keypair. You get an invite by email within the hour, we open a private channel, and the first value ledger lands Friday at 5pm. Cancel any month — the key is revoked and your history stays with you.

Does Controller run around the clock?

Yes. Controller runs 24/7 on its own dedicated server as a persistent service — it keeps working while your PC is off, resumes where it left off, and only alerts you when something actually needs you.

Where do I talk to Controller?

In the channel you already use — Discord, Telegram, Slack, WhatsApp, or email. You, your clients, and Controller share one channel; there is no new app to install and no portal to check.

Can Controller spend money or send things on its own?

It drafts — you approve. Controller researches, drafts proposals, and prepares invoices autonomously, but sending, spending, agreeing to terms, and publishing anything public all require your explicit approval. Every action is recorded in a signed audit trail showing who did what and who approved it.

Can Controller find work and bill for it?

Yes. Controller monitors job feeds and inbound briefs, drafts scoped proposals, issues Stripe invoices once you approve, performs the contracted work, and logs the result to its value ledger — the Friday 5pm report shows exactly what it earned and saved.