heyshubh.
HomeWorkBlogAbout
← Back to Work
Case Study · Neoflo.ai · In Build

A prompt is not
a permission.

Neo is Neoflo's finance chief of staff. I own it. It is still being built, so this page has no results in it.

TypeWork project
CompanyNeoflo.ai
RoleHead of Product · owner and PM
DomainFinance operations · retrieval
StatusIn build · no results yet

Every other case study here ends in a number. This one does not, because nothing is in front of real users yet. When that changes, this page changes.

The Problem

Finance teams already have the answer somewhere. It is in the ERP, or a PO, or a GL code, or an email thread nobody can find. The work is not deciding what to do. It is assembling enough context to decide anything at all.

Neo is one of four solution lines at Neoflo, alongside procure-to-pay, order-to-cash and record-to-report. The other three run workflows. This one answers questions about them.

How It Works, Publicly

Batch ingestion across the systems finance already uses: the ERP, AP inboxes, invoices, payments, purchase orders, GL codes, vendor and client records, chats and PDFs. A knowledge graph links vendors to invoices to approvals to payments to contracts. A vector index sits alongside it.

Questions get answered in natural language, grounded in the company's own documents, with citations and an audit trail. Outdated information is superseded rather than left to compete with the current version.

What I Am Holding To
01
A prompt is not a permission

A write-capable token is not made safe by a prompt telling the model not to write. Read-only is enforced at the tool layer.

Rejected prompt-level restriction entirely.

02
Retrieved text is data, never instruction

An integration gets no more implicit trust than a document. This is the whole ballgame for an assistant that reads your email.

Rejected treating an external source as more trustworthy than an internal one.

03
When two retrieval paths disagree, say so

Show the most recent and flag the conflict.

Rejected silently picking one, which is how a confident wrong answer gets made.

04
The confidence threshold belongs to the customer

Stricter means more I don't know, at higher precision.

Rejected fixing that trade-off in the product, because workspaces do not share a risk tolerance.

Got a wild idea?
Let's build it.Let's build it.

Shubham Shrivastava
Shubham ShrivastavaHead of Product · Neoflo.ai
© Shubham Shrivastava 2026