Static snapshot. A frozen copy of the operator dashboard, safe to open anywhere. The buttons below are drawn but inert — recording a verification and being refused the release is a state change, so it runs on the live app: python src/demo.py --serve.

BaseDrift

internal
← Inbox
From
procurement@clientcorp.in
Received
28 Jun 2026, 13:44
Subject
internal
Reply to
not a reply
Thread
THRN05103

The message

Team, the finance system is down for patching on Saturday 0600-1000.

What the sender resolved to

Supplier
no supplier matched
Matched on
No supplier matched
Because
—
Domain matched
—
Triage decision
Sender not recognised
Change request filed
none
sender domain 'clientcorp.in' is not in the vendor master, does not resemble anything in it, and the body quotes no identifier that is
Sender matching decides whether a message is read in full. It never decides a payment on its own — a lookalike domain is a reason to look, not a reason to reject.