When can a document update a business record?

A worked architecture decision for document extraction, field-level validation, human exception review, versioned writes, and audit.

What makes the obvious answer unsafe?

A model can extract fields accurately while the document still conflicts with the authoritative record. Extraction success is not permission to write.

Three credible approaches

Compare manual review, extract-then-review, and selective straight-through processing for measured low-risk document classes.

Where the authority changes hands

Preserve source locations, validate fields and current record values, route conflicts to a reviewer, and use a controlled version-checked write.

What must remain true?

Document text is untrusted input. Failed validation cannot be overridden by a generic confidence threshold. Record every decision and outcome.

Test the decision, not just the diagram

Test contradictory invoices, duplicates, corrections, concurrent record changes, and field-level false acceptance before expanding automation.