
The Answer Is Optional: An Abstention Contract for AI
A practical guide to deciding when AI should answer, seek evidence, defer, or refuse using calibrated signals, risk–coverage curves, and fallback capacity.
Read MoreZharfAI Team

This guide is written for the CFO or head of accounting at an Iranian company where document volume has grown, the team is under period-close pressure, and the open question is which part of the work AI genuinely improves and which claims are marketing. The core message is simple: in accounting, the largest value today is in automating data entry and reconciliation, not in replacing the accountant's judgment; and every successful deployment follows one principle: machine output is human-reviewable before it has financial effect.
If you log where the finance team's time goes, three bottlenecks usually repeat: manual data entry from invoices and receipts, reconciliation between banks, ledgers, and systems, and preparation of periodic reports. All three share the same profile: high volume, fairly repetitive structure, and clear acceptance rules. That is exactly where machine learning and document processing pay off most. In contrast, judgment decisions such as provision estimates or classification of unusual items should remain human, with the tool only assembling the evidence in front of the accountant.
Official guidance on buying intelligent technology, including the UK government guidelines for AI procurement, recommends the same logic: start from the problem and the data, not from the tool.
Structured extraction from Persian documents has its own challenges: mixed Persian and Latin digits, Solar Hijri dates, stamps and handwriting on scans, variable image quality, and diverse vendor formats. A good system delivers three things for every critical field such as invoice number, counterparty identifier, amount, and date: the extracted value, a confidence score, and the source region on the image for fast human verification. The right metric is per-critical-field accuracy and correction time; average accuracy over the whole document is an advertising number, not a decision input.
The working rule: a low-confidence field must enter a review queue rather than sitting silently in the record. A visible error is cheap; a silent error in an account number is expensive.
Vendor master data deserves special mention because it multiplies or destroys extraction value. When counterparty names arrive with inconsistent spellings, the matching step needs a maintained vendor registry and a fuzzy-match review queue; without it, the same supplier quietly becomes three records and every downstream report inherits the split. Plan the registry cleanup as part of the project, and measure duplicate-rate before and after so the improvement is visible to management.
In bank and intersystem reconciliation, the main value is eliminating the manual hunt for discrepancies: the system auto-matches the clean cases and presents only exceptions to the analyst, with the evidence side by side. For period close, the same pattern applies to the closing checklist: automatic tracking of open items, reminders to each item's owner, and drafting of recurring notes. The measurable result is a shorter close and fewer aging items; record both as a baseline before starting so the project's effect is defensible.
One design choice matters more than any algorithm here: exceptions must carry their evidence with them. When the system routes a mismatch to an analyst, the screen should already show the bank line, the ledger entry, the candidate matches, and the amount difference, so resolution is a judgment call rather than a search expedition. Teams that measure it consistently find the search time, not the decision time, was the majority of the old workload.
A language model genuinely helps with drafting management reports and explaining variances, under one clear boundary: numbers come from the system of record, not from the model. The safe pattern is that the model narrates only over extracted and verified data, and every claim links to its numeric source. On the security risks of language model systems, including prompt injection through documents, the OWASP risk list for generative AI is the pre-deployment testing reference.
Financial automation without internal controls does not move risk; it hides it. Our four red lines on every project: segregation of duties is preserved so the tool can never both record and approve; every automated change carries a complete auditable trail; amount thresholds trigger mandatory human review; and a tested fallback to the manual process exists for outage days. Frameworks such as the NIST AI Risk Management Framework and the ISO/IEC 42001 standard help these controls get owners, documentation, and a review cycle.
Not every finance problem needs a language model. A fixed rule for matching exact values is faster and more reliable than any model; the model earns its place on free text, diverse formats, and classification of novel cases. The right architecture is usually hybrid: rules at the core, models at the irregular edges, and a human at the decision point. A vendor with only one answer for every problem has not listened to your problem.
Regulatory digitization strengthens this hybrid case. As Iranian tax and invoicing requirements push more companies toward structured electronic documents, a growing share of inputs arrives machine-readable, which favors deterministic rules; the model's share of the work then concentrates on the messy remainder such as legacy scans, correspondence, and supplier formats that never standardized. Design the architecture so that this shift makes the system cheaper over time instead of leaving you paying model costs for work a rule now handles.
The larger map of financial use cases and how metrics differ per family is in our article on AI in finance, and the banking-sector experience is in AI in Iranian banking.
Company financial data is among the most confidential assets. Before any contract, establish: where processing happens, what remains in logs, whether your data is used to train models, and how deletion is proven. For many Iranian companies, on-premises deployment or hosting on approved infrastructure is a starting condition and must be part of the initial architecture, not a later amendment. Also ask precisely about integration with your existing accounting software: which system, which version, which connection method, and what the behavior is on failure.
Our tested twelve-week plan: choose one high-volume document stream such as purchase invoices; take a four-week baseline of entry time per document, error rate, and correction time; run the system for six weeks in assisted mode where an analyst approves every output; and spend the final two weeks on analysis and the decision. Write the acceptance criteria in advance: for example, a defined reduction in processing time per document and zero serious errors in critical fields. If the numbers fail the criteria, stopping is a successful outcome; your learning cost was one pilot, not a full deployment.

A practical guide to deciding when AI should answer, seek evidence, defer, or refuse using calibrated signals, risk–coverage curves, and fallback capacity.
Read More
A field guide to admitting, quarantining, or rejecting MCP servers, plugins, and agent tools using provenance, capability tests, and enforceable runtime limits.
Read More
A field guide to baselines, delayed outcomes, change attribution, and deciding when deployed AI should be watched, constrained, rolled back, or rebuilt.
Read MoreIf this note maps to a real system in your organization, start with the services page or a shipped case study.