Supplier risk
The path from what a machine is documented doing to the party holding the record that makes the result official, with how well each step is backed. Where the sources settled nothing, the step says so.
-
What a machine is documented doing
Established by the evidence. One capability changing an internal admissibility field; risk findings produced -
The record it touches
Established by the evidence. O-1 supplier identity; O-2 supplier admissibility; O-3 supplier approval; O-4 statutory designation -
What still has to happen first
Established by the evidence. STRUCTURAL - a ministerial decision is required and no artifact evidences any block applied unattendedA source describes this step a document describes this step at the point where it matters A ministerial decision is required by statute
Where a supplier is on the debarment list contracting authorities must or may exclude that supplier from the procurement
the source's own words, quoted exactly -
What makes the change count
Established by the evidence. Statute - Schedule 6 of the Procurement Act 2023, the FAR, the EU CSDDD -
Who holds the official record
Established by the evidence. Institutions hold O-4 in published registers; buyer-side masters hold O-2 and O-3 -
What the area relies on
Established by the evidence. SAP Ariba Supplier Lifecycle and Performance — supplier qualification and disqualification state; Oracle Fusion Cloud Procurement — supplier site purchasing and payment hold attributes; Oracle Fusion Cloud Procurement — supplier profile internal change control
The action that makes it official Publication of the statutory designation on the debarment list Done by A Minister of the Crown following an investigation. It counts because of a named office - a Minister of the Crown. No machine is documented doing this.
What could this area not settle?
What this area recorded against its own findings, in its own words.
Recorded against itself by this area
institutional estates dated 11 of 12; the commercial estate contributed 1; two release labels refused as dates
This area's schema carries no population-membership field on any row. A scan returns 0 and that 0 is an absent field, not a measured zero. It may never be rendered as 'this area has no units in the population'.
Can the act be undone, and by whom?
What did the evidence settle, dimension by dimension?
Eighteen structural dimensions, each carrying its own evidence state and what it does not establish.
| Question asked | What the evidence says | What it does not tell you |
|---|---|---|
consequential-objectD01 | Established by the evidence. O-1 supplier identity; O-2 supplier admissibility; O-3 supplier approval; O-4 statutory designation | Not recorded by the method used for this area |
object-holderD02 | Established by the evidence. Institutions hold O-4 in published registers; buyer-side masters hold O-2 and O-3 | Not recorded by the method used for this area |
grammar-or-form-setterD03 | Established by the evidence. Statute: Schedule 6 of the Procurement Act 2023, the FAR, the EU CSDDD | Not recorded by the method used for this area |
composerD04 | Established by the evidence. A Minister of the Crown; the FLETF; the issuing agency | Not recorded by the method used for this area |
validatorD05 | Established by the evidence. Supplier notification plus an 8-working-day standstill period | Not recorded by the method used for this area |
binderD06 | Established by the evidence. PUBLICATION of the statutory designation on the debarment list, by a Minister of the Crown | Legal effect on parties that never transact with the unit. |
deterministic-automationD07 | A source states this does not happen: A source addressed it and said no.. No artifact evidences any block applied unattended; a ministerial decision is required by statute | The stop is DESCRIBED - the statute prescribes the office. |
agentic-capabilityD08 | Established by the evidence. One capability changing an internal admissibility field; risk findings produced | Internal admissibility field only; not the statutory designation. |
furthest-deterministic-actionD09 | Not answered by the evidence we checked: We looked and the sources we inspected did not settle it.. No deterministic mechanism is evidenced beyond producing findings We looked and the sources we inspected did not settle it. | The commercial estate contributed 1 of 12 events. |
furthest-agentic-actionD10 | Established by the evidence. Producing risk findings; one capability changing an internal admissibility field | Not recorded by the method used for this area |
reversibilityD11 | Not answered by the evidence we checked: We looked and the sources we inspected did not settle it.. Removal exists in the statutory grammar; no dated instance was retrieved We looked and the sources we inspected did not settle it. | Grammar is not an instance. Never filled by analogy. |
externality-radiusD12 | Established by the evidence. WIDEST IN THE CORPUS: publication creates legal effect on parties that never transact with the publishing unit | Not recorded by the method used for this area |
counterparty-assentD13 | A source states this does not happen: A source addressed it and said no.. No counterparty assents. A Minister decides and publication binds third parties | Not recorded by the method used for this area |
rule-codifiabilityD14 | A source states this does not happen: A source addressed it and said no.. The binding act is a named office's decision following an investigation, not a rule | Not recorded by the method used for this area |
institutional-closureD15 | Established by the evidence. Contracting authorities must or may exclude a supplier on the debarment list - independent parties must recognize the published state | Not recorded by the method used for this area |
authoritative-state-centralizationD16 | Established by the evidence. SPLIT: institutions hold O-4 in published registers; buyer-side masters hold O-2 and O-3 | Not recorded by the method used for this area |
consequence-of-errorD17 | Not answered by the evidence we checked: We looked and the sources we inspected did not settle it.. Sought and not retrieved: the rebuttable-presumption consequence of UFLPA listing was not obtained and is not claimed We looked and the sources we inspected did not settle it. | This is an explicit retrieval failure recorded on every affected row, not an absence in the world. |
accountabilityD18 | Not answered by the evidence we checked: We looked and the sources we inspected did not settle it.. No stable answerable party across the object's life We looked and the sources we inspected did not settle it. | A Minister of the Crown is a named authority for ONE act on ONE object in ONE jurisdiction. TA-07's own counterexample, and the area does not claim more. |
What is each capability evidenced doing?
The mode records that a named subject performs an operation. It does not record what kind of performer that subject is, and several rows disclaim an agentic mechanism in their own limitation.
| Capability | How far it goes | What it does | Human work still needed | What this does not tell you |
|---|---|---|---|---|
Automated vendor approval and rejection at onboarding, with document forensics embedded in the decision path. Passage: "With AI-powered document fraud detection, customers can reduce time spent on manual documentation review, detect and prevent serial fraud attempts, and approve more customers and suppliers."C-006 | the sources do not settle whether it acts or only prepares | An approval or rejection of a vendor at onboarding. Passage: "better automate customer and vendor approvals and rejections during the onboarding process". A second inspected artifact describes an adjacent capability in object-free terms: "Automate decisioning based on pre-set risk factors so you can focus on the complex cases that require human input." | Not established as nil. Inspected passage retains a human path: "so you can focus on the complex cases that require human input". No inspected artifact states that approval or rejection occurs unattended. | Establishes that a supplier approval state is acted on. Does NOT establish that Certa mutates supplier admissibility (O-2), that any block is applied to an ERP or supplier master, that the action is unattended, or anything about prevalence, deployment or use. |
A screening API returning screening results against a risk dataset. Passage: "World-Check Verify delivers real-time screening against LSEG's trusted World-Check data".C-005 | advises only | A screening result — a watchlist result, ruled an input and not a consequential object by the frozen contract. Passage: "Embedded, low-latency screening checks within payment and onboarding workflows". | Not established. No inspected passage describes what is done with a returned result. | This is an exclusion on the area's own consequentiality ruling, not a judgement of the offering's importance or quality. It establishes only that no inspected artifact shows this unit changing a supplier's identity, admissibility or approval state. It establishes nothing about effectiveness, coverage or use. |
Whose systems does this area run on?
What part each system plays was decided by what it does to the area's records, never by what kind of company runs it. Where the sources leave that open the entry says so, because an open question is not a kind of system.
| System | Who runs it | What part it plays | What it does to the official record |
|---|---|---|---|
SAP Ariba Supplier Lifecycle and Performance — supplier qualification and disqualification stateC-001 | SAP SE | authoritative-transaction-rail | holds — O-3 supplier approval state, held within SAP Ariba Supplier Lifecycle and Performance; mutates — O-3 supplier approval state, on disqualification |
Oracle Fusion Cloud Procurement — supplier site purchasing and payment hold attributesC-002 | Oracle Corporation | authoritative-transaction-rail | holds — O-2 supplier admissibility state, held on the supplier site record within the Oracle Fusion Cloud Procurement supplier master; mutates — O-2 supplier admissibility state, via HoldAllNewPurchasingDocumentsFlag |
Oracle Fusion Cloud Procurement — supplier profile internal change controlC-003 | Oracle Corporation | authoritative-transaction-rail | holds — O-1 supplier identity record, held in the Oracle Fusion Cloud Procurement supplier profile; accepts-or-rejects — O-1 supplier identity record, via the internal supplier profile change request |
World-Check risk intelligence datasetC-004 | London Stock Exchange Group (LSEG) | not-applicable | none-established — no inspected passage shows this unit creating, holding, mutating, accepting-or-rejecting, submitting-to, constructing-for or mirroring O-1, O-2, O-3 or O-4 in any named system |
UK central debarment list under Procurement Act 2023 s.62C-007 | A Minister of the Crown (United Kingdom), administered via the Debarment Review Service, Government Commercial Agency | unresolved | creates — O-4 statutory designation, created by a Minister of the Crown and held on the published debarment list; holds — O-4 statutory designation, held on the debarment list published on gov.uk; mutates — O-2 supplier admissibility state, in every contracting authority simultaneously, without any entry being made in any contracting authority's own system |
UFLPA Entity ListC-008 | U.S. Department of Homeland Security, as Chair of the Forced Labor Enforcement Task Force (FLETF) | unresolved | creates — O-4 statutory designation, created by the FLETF and held on the UFLPA Entity List; holds — O-4 statutory designation, held on the consolidated register published on the DHS UFLPA website; mutates — O-2 supplier admissibility state, for every US importer simultaneously, without any entry in any importer's own system |
FASCSA exclusion and removal orders as implemented in the Federal Acquisition RegulationC-009 | Federal Acquisition Regulatory Council (DoD, GSA, NASA) | unresolved | creates — the grammar of O-4 statutory designation, by defining what an exclusion or removal order is and how it applies in acquisition; mutates — O-2 supplier admissibility state, through orders issued under the regime |
System for Award Management (SAM) — supplier registration as a precondition of awardC-010 | General Services Administration | unresolved | holds — O-1 supplier identity record, held in the System for Award Management; relationship inferred from the naming rule and NOT from a SAM artifact |
FCC nonprocurement suspension and debarment regimeC-011 | Federal Communications Commission | unresolved | mutates — O-2 supplier admissibility state, in respect of participation in the Commission's support programs |
HUBZone certification as an eligibility preconditionC-012 | U.S. Small Business Administration | unresolved | holds — O-3 supplier approval state, in the form of a HUBZone certification held by SBA; mutates — O-3 supplier approval state, through certification and recertification requirements |
Corporate Sustainability Due Diligence Directive (EU) 2024/1760, Articles 10-11 obligations on business relationshipsC-013 | European Parliament and Council of the European Union | unresolved | creates — the grammar of O-2 supplier admissibility state, by defining the circumstances in which a business relationship must be suspended or terminated; mutates — O-2 supplier admissibility state, indirectly, by obliging the in-scope company to change it in the company's own systems |
What may be said from this area, and what may not?
Each one carries how far it is backed and, where it was recorded, the exact stronger sentence that may never be written from it.
In this pilot's admitted event set, eleven of twelve dated events were institutional publications and one was a commercial announcement.
The strongest thing against it EV-12 is a commercial event acting on an record in scope for the area, and the commercial estate was not exhausted — several vendor estates were searched and not retrieved.
What may not be said from this Never: 'institutions dominate this area', 'most activity is regulatory', 'the commercial layer is inactive', or any proportion, share or rate.
The UK central debarment list was constituted on 24 February 2025 and, on the copy inspected on 15 August 2026, contained no supplier entries.
The strongest thing against it None was found. The artifact states the position directly: "until a ministerial decision is made to add a supplier following an investigation, the list will remain blank."
What may not be said from this Never: 'the debarment regime has failed', 'the UK does not debar suppliers', 'the regime is unused', or any inference about future entries.
A supplier disqualification in SAP Ariba Supplier Lifecycle and Performance changes a supplier's qualification for guided buying and, on the vendor's own statement, does not deactivate the supplier record or block the supplier in ERP.
The strongest thing against it None was found within the inspected artifact, which states the limits of disqualification explicitly rather than by omission.
What may not be said from this Never: 'Ariba cannot block suppliers', 'Ariba is not a blocking system', or any claim about other SAP products or configurations.
Oracle Fusion Cloud Procurement exposes a supplier-site purchasing hold as a machine-readable attribute carrying the person who set it and the date it was set.
The strongest thing against it The same artifact records a human actor against the state change — "Person who put a hold on new purchasing documents." — which cuts against reading the field as an agent-facing control.
What may not be said from this Never: 'agents can block suppliers in Oracle', 'blocking is automated', or any claim about who or what sets the flag in practice.
In this pilot, no commercial unit was evidenced to hold a supplier admissibility state that binds parties other than its own customer.
The strongest thing against it Shared prequalification networks were surfaced during discovery and could not be admitted because no artifact was inspected; if one holds a supplier admissibility state relied on by many buyers, this claim would need revision.
What may not be said from this Never: 'no commercial system holds blocking authority', 'only governments can block suppliers', or any statement that converts an absence of evidence into evidence of absence.
Constitution of a blocking authority and exercise of it are separately evidenced states, and in this pilot two authorities were evidenced as constituted without any exercise being evidenced.
The strongest thing against it EV-01, EV-02 and EV-03 are the direct counter: the UFLPA Entity List was exercised repeatedly across the window, including forty-three additions on 2026-08-03. A constituted authority in this area is not generally dormant.
What may not be said from this Never: 'blocking authorities are rarely used', 'regulation is symbolic', or any frequency, rate or trend claim.
In the units inspected in this pilot, the party that defines the circumstances of a block and the party that applies it were frequently different parties.
The strongest thing against it C-002: in the Oracle supplier master the same unit both defines the hold field and holds the state changed by it, with no external definer named. Where the block is buyer-internal, the separation collapses.
What may not be said from this Never: 'blocking authority is always separated', 'regulators decide and companies execute', or any universal claim.
The consequential-object test admitted supplier identity, admissibility and approval states, and excluded risk findings and watchlist results as inputs.
The strongest thing against it None was found. The SAP artifact independently states the O-2 / O-3 separation the contract predicted.
What may not be said from this Never: 'risk findings do not matter', 'screening is not consequential', or any claim that the excluded objects are unimportant.
One dated event in the admitted set was rejected because the artifact carrying it named no record in scope for the area.
The strongest thing against it A separately inspected LSEG artifact does name "third-party vendor and supplier screening"; area placement is not inherited across artifacts, which is why the event was still rejected.
What may not be said from this Never: 'World-Check Verify is not a supplier tool', or any characterisation of the offering itself.
The operator-release-notes estate yielded no admissible event dates in this pilot, because the artifacts inspected carried release labels rather than visible dates.
The strongest thing against it None was found within the artifacts inspected; no dated revision history was located on any of them.
What may not be said from this Never: 'vendor release notes are undated', 'operators hide dates', or any generalisation beyond the four artifacts inspected.
The participant and infrastructure two-class division held across all twelve actors in this pilot without a third class being required.
The strongest thing against it The strain is real and recorded: DV-01, DV-02 and DV-03 all report that the role and orientation vocabularies could not express what the evidence plainly showed. A reader who treats 'the division held' as 'the model fitted' would be misreading this row.
What may not be said from this Never: 'the two-class model works in this area', 'no changes are needed', or any statement omitting the vocabulary failures.
Two search summaries over-claimed relative to the artifacts they pointed at, and in both cases the inspected artifact governed.
The strongest thing against it None was found — in both instances the discrepancy was resolved by reading the artifact, which is the outcome I-10 is designed to produce.
What may not be said from this Never: 'search results are unreliable', 'the vendor misrepresented its product', or any count presented as a rate.
What dated acts touch this area's records?
A list, in date order. It is not a timeline and carries no rate: the collection capped each publisher, so this is a floor on what was retrievable rather than a count of what occurred.
| Date | Kind of act | Consequence recorded | Source |
|---|---|---|---|
2026-08-03 day precision | institutional accommodation | The register of designations is enlarged by forty-three entities and corrected in two. Passage: "This notice announces the publication and availability of the UFLPA Entity List updated as of August 3, 2026, included as an appendix to this notice." | source |
2025-01-15 day precision | institutional accommodation | Entities are placed on named statutory sub-lists, and one entity is placed on two sub-lists simultaneously. Passage: "This update adds one entity to both the 2(d)(2)(B)(ii) list and section 2(d)(2)(B)(v) of the UFLPA." | source |
2023-06-12 day precision | institutional accommodation | Designation is extended to named subsidiaries of listed entities, so corporate structure is carried inside the designation object. | source |
2023-12-04 day precision | institutional accommodation | An exclusion and removal order regime becomes operative in federal acquisition rules. Passage: "exclusion or removal orders". | source |
2025-01-17 day precision | institutional accommodation | The procedures governing suspension and debarment are made consistent across two previously divergent regimes. | source |
2024-11-12 day precision | institutional accommodation | The registration state a supplier must hold before award is clarified in rule. | source |
2026-05-11 day precision | institutional accommodation | A sectoral regulator adopts government-wide exclusion guidance, and simultaneously defers most of it. Passage: "Amendatory instructions 1, 4 through 9, and 11 through 13 are delayed indefinitely." | source |
2025-01-16 day precision | institutional accommodation | Eligibility is bound to a specific moment — the date of offer — rather than to a period, and recertification requirements are consolidated across programmes. | source |
2025-02-24 day precision | area entry | A central, published, ministerially-held register of excluded suppliers comes into legal existence, with the required content of an entry specified. Passages: "the exclusion ground to which the entry relates"; "the date on which the Minister expects the exclusion ground to cease to apply". | source |
2026-08-06 day precision | institutional accommodation | Central debarment is distinguished in guidance from authority-level exclusion. Passage: "Whereas the exclusion regime relies wholly on assessments undertaken by contracting authorities, debarments will be managed centrally." | source |
2024-07-05 day precision | institutional accommodation | A legal obligation is created to suspend or terminate a supplier relationship in defined circumstances. Passage: "refrain from entering into new or extending existing relations with the partner in question and, where there is a reasonable prospect of change, by using or increasing the company's leverage through the temporary suspension of the business relationship with respect to the activities concerned". | source |
2023-06-22 day precision | workflow expansion | none | source |