Indian finance teams evaluating reconciliation infrastructure are shown feature comparisons — dashboards, connectors, matching modes, reporting templates — that do not answer the question the register asks. The question is which failure classes each layer catches, which layer catches them at the volume the enterprise operates at today, and which layer catches them at the volume the register will name in the next four quarters. Without a failure mode comparison, the CFO cannot defend the capex decision to the board on statute-anchored grounds and cannot defend the do-nothing decision to the statutory auditor when the Section 16(4) exposure surfaces at year-end. The framing collapses two distinct decisions — the operating design of the reconciliation function, and the tooling of the detection layer — into a single feature-checklist conversation that resolves neither.
Publish the comparison as a 14-row failure class walk, anchored to the same taxonomy the reconciliation process design pillar names, with the Severity anchor drawn from Indian statute (Section 16(4) at 10, Section 200A at 9, DRC-01B at 8, Section 43B(h) at 7, petty variance at 3). Every row carries the manual detection technique that catches the failure class (from the seven-technique portfolio), the volume ceiling where the manual technique tops out, and the software detection outcome that displaces the manual walk when the ceiling is crossed. Two classes stay manual permanently — Rs 5,000 petty variance where materiality auto-clears the row, and conservation checks that compute in constant time. Three classes cross to software the moment the ceiling is crossed — Section 16(4) at-risk ITC queue past 200 vendors, cross-era TDS payment-code mapping past 3,000 receivable line items, NACH batch return-code cascade past 500 mandate volumes per month. The 9 middle classes are context-dependent and re-rated every quarter on the register's Occurrence and Detection walk.
One 14-row comparison table maintained in the reconciliation policy document; every row names the failure class, the Severity anchor (statute-referenced), the manual detection technique, the manual ceiling (transactions per month, line items per GSTIN, or open items in the aging queue), and the software detection outcome (customer-benefit language, never algorithm internals); the comparison is re-walked every quarter as part of the anchored SOD scale re-rating; any row that crosses its manual ceiling is escalated to the audit committee with the specific software detection outcome that displaces the manual walk; the transition itself is documented as a Detection-layer re-rating on the register, not as a re-design of the failure mode analysis, so the audit-defence posture is preserved; the CFO's board case for reconciliation infrastructure is anchored to the specific rows the comparison names as software-required, not to a feature list.
A comparison document a CFO can walk with the audit committee, the statutory auditor, and the board — every row names the failure class in Indian reconciliation vocabulary, the Severity in statutory terms, the manual detection technique the enterprise runs today, the ceiling where the manual walk stops being economically viable, and the software detection outcome (an at-risk vendor queue continuously refreshed, an aged Rs exposure list surfaced by rupee weight, a payment-code-aware validation gate on every challan) that displaces the manual walk on the specific rows the register names. The finance team's own risk register is the arbiter of when the shift lands, not a vendor pitch, and the shift itself is a Detection-layer re-rating on the register that ICFR testing under Section 143(3)(i) reads as evidence of an evolving control base, not as a re-design of the underlying analysis.
The wrong way to compare manual and automated reconciliation is to compare features. A feature comparison lists what each layer can do — export to Excel, connect to the bank, run a matching mode, produce an aging report — and the reviewer picks the checklist with the most ticks. This framing loses the point of a reconciliation function. The point is not to run a report. The point is to catch a specific class of failure before it reaches the tax authority, the counterparty, or the auditor.
The right comparison is a failure mode comparison. Every Indian reconciliation register produces the same 14 failure classes across four streams — invoice-to-bank, TDS receivable against Form 26AS transitioning to Form 168, GSTR-1 versus GSTR-3B, and GSTR-2B input tax credit matching. Each class has a Severity anchor drawn from Indian statute. Each class has a manual detection technique. Each manual technique has a volume ceiling. And each class either sits inside the manual ceiling (where manual is adequate, permanently) or crosses the ceiling (where software earns its place, statute-anchored). This article walks the 14 rows side by side.
The frame the comparison rests on is the one the reconciliation process design pillar publishes: Severity dominates the Action Priority table, and the Detection rating on the anchored SOD scale is re-rated against the composite catch-rate of the techniques applied. A row where the manual technique catches the failure at the enterprise’s current volume stays on manual. A row where the manual technique cannot economically close the exposure at Severity 9 or 10 moves to software — because the Action Priority table forbids accepting a Severity 9 or 10 row regardless of Occurrence and Detection.
The 14 failure classes side by side
The comparison walks 14 classes drawn from the four Indian reconciliation streams. Severity is anchored to statute. The manual detection technique and the manual ceiling come from the seven-technique portfolio. The software detection outcome is written in customer-benefit language — what the finance team receives, not how the layer produces it.
Class 1 — Unsupported ITC availment against GSTR-2B (Rule 36(4))
- Severity anchor. 8. DRC-01C intimation risk under Rule 88D; the ITC availed in GSTR-3B without a matching GSTR-2B entry is unsupported at the record-keeping level and reversible with interest under Section 50.
- Manual detection technique. Three-way tick-and-tie — purchase register versus GSTR-2B versus IMS action.
- Manual ceiling. Approximately 1,500 line items per month per GSTIN. A four-GSTIN group at 1,000 line items each is already at 4,000 across the group and past the single-reviewer ceiling.
- Software detection outcome. The three-way match runs at population every day rather than once a month at reviewer capacity, and the unmatched-invoice queue is surfaced to the analyst by rupee exposure with the supplier’s GSTR-1 filing status attached.
- Verdict. Manual is adequate below 1,500 line items per GSTIN per month. Above the ceiling the class earns software.
Class 2 — Section 16(4) 30 November time-bar aging
- Severity anchor. 10. Permanent statutory loss with no recovery mechanism. Section 16(4) of the CGST Act 2017 blocks any ITC claimed after the 30 November following the FY.
- Manual detection technique. Exception aging queue with escalation — 0-60, 61-120, 121-180, 180-plus day buckets keyed to each vendor’s GSTR-1 filing status, escalated through analyst, controller, CFO, audit committee.
- Manual ceiling. Approximately 500 open items and roughly 200 vendors, above which the daily-refresh cadence keyed to vendor-level GSTR-1 status exceeds a single reviewer’s capacity.
- Software detection outcome. A continuously-refreshed at-risk queue that highlights every invoice approaching the 30 November cut-off with days-remaining, aggregate Rs exposure, and the vendor’s current GSTR-1 filing state, surfaced to the AP analyst and the CFO in the same view.
- Verdict. Manual adequate below 200 vendors and 500 open items. Above the ceiling the class earns software because Severity is 10 and the Action Priority table forbids accepting the residual exposure. This is the Section 16(4) time bar class — the reason a manual failure mode analysis produces its own board case for reconciliation infrastructure.
Class 3 — TDS rate-band misapplication (Section 194J code 1005)
- Severity anchor. 9. Section 200A short-deduction demand with Section 201(1A) interest at 1 percent per month and Section 234E fee at Rs 200 per day.
- Manual detection technique. Ratio analysis — TDS-payable-to-purchase ratio, plus a section-wise split reasonableness test against the prior-quarter band.
- Manual ceiling. Approximately 10,000 transactions per month for the aggregate ratio computation, but the investigation queue for a 2-percentage-point drift on a 10,000-row base carries roughly 200 candidate rows to sample from — past 500 professional-services vendor payments per month the sample-walk consumes more than one reviewer week.
- Software detection outcome. A payment-code-aware validation gate on every challan against the 1001-1092 range that surfaces a code 1005 rate-band drift the day the challan is booked, with the offending vendor and the correct rate band named.
- Verdict. Manual adequate below 500 vendor payments per month. Above the ceiling the class earns software.
Class 4 — TDS PAN mismatch and Section 206AA higher-rate deduction
- Severity anchor. 9. Deduction happens at 20 percent under Section 206AA where the vendor’s PAN is invalid, unavailable, or inoperative.
- Manual detection technique. Two-way tick-and-tie between the deductee row and Form 168 credit, with the higher-rate deduction ratio as a secondary check.
- Manual ceiling. Approximately 2,000 transactions per month per stream at Detection 5 on the anchored SOD scale.
- Software detection outcome. A PAN-validation-status feed against the TRACES bulk PAN utility with the higher-rate flag attached to every FY-boundary refresh, surfaced to the AP master-data owner before the challan is booked.
- Verdict. Manual adequate below 2,000 monthly deductee rows. Above the ceiling the class earns software.
Class 5 — Cross-era TDS payment-code mapping (Section 393 codes 1001-1092)
- Severity anchor. 9. Section 200A short-deduction demand where the legacy Section 194x code and the new payment code have been reconciled incorrectly across the FY 2026-27 boundary.
- Manual detection technique. Two-key match — try the legacy section code first, then the new payment code — carried in the working paper for FY 2026-27 and FY 2027-28.
- Manual ceiling. Approximately 3,000 receivable line items per financial year. Past that, the two-key match across three FY windows while the correction deadlines close cannot be sustained by hand. The cross-era TDS reconciliation guide covers the mechanics.
- Software detection outcome. A dual-code carry on every deductee row with automatic code-1031 mapping for Section 194Q, code-1005 for Section 194J, code-1002 for Section 194C, and code-1001 for Section 194A, refreshed continuously against Form 168.
- Verdict. Manual adequate below 3,000 receivable line items per FY. Above the ceiling the class earns software.
Class 6 — NACH batch return-code cascade
- Severity anchor. 8-9. Payroll and vendor disputes with cash-flow impact, aggregating into DRC-01B and CARO 2020 audit exposure where unreconciled batches cross the working-capital limit reconciliation.
- Manual detection technique. Two-way tick-and-tie between the NACH mandate register and the return-code cascade at line level, with a bank-narration parsing overlay.
- Manual ceiling. Approximately 500 mandate volumes per month. A Rs 1.2 crore NACH credit against 480 employee accounts with the return file arriving separately is not reconcilable at the batch level.
- Software detection outcome. Line-level disaggregation of every NACH batch against the mandate register with automated classification of every return code and Section 197 hearing-window flag attached.
- Verdict. Manual adequate below 500 mandates per month. Above the ceiling the class earns software.
Class 7 — GSTR-1 versus GSTR-3B Table 3.1 tolerance break
- Severity anchor. 8. DRC-01B intimation under Rule 88C; the registered person must pay the differential with interest under Section 50 or reply within seven days.
- Manual detection technique. Conservation check — SGST plus CGST equals IGST at intra-state supply reclassification level — plus reasonableness testing against the Table 3.1 tolerance band.
- Manual ceiling. Conservation checks are scale-free, but the per-invoice application keyed to the destination-state code tops out around 4,000 outward-supply invoices per month per GSTIN before the reviewer can no longer walk the drift band by hand.
- Software detection outcome. A GSTIN-by-GSTIN outward-supply reconciliation that surfaces every Table 3.1 tolerance break with the offending invoice batch and the destination-state code attached, before the seven-day DRC-01B reply window opens.
- Verdict. Manual adequate below 4,000 outward-supply invoices per month per GSTIN. Above the ceiling the class earns software.
Class 8 — Intercompany credit landing in the wrong entity
- Severity anchor. 8. Ind AS 24 related-party disclosure misstatement, ICFR material weakness observation under Section 143(3)(i).
- Manual detection technique. Independent peer review with a SA 315-style checklist plus a group-controller consolidation walk against the intercompany PAN and GSTIN cross-reference sheet.
- Manual ceiling. Approximately one full close cycle per month per group. Groups with more than 8 subsidiary entities cross the reviewer’s fresh-eyes ceiling.
- Software detection outcome. An intercompany aggregation view that surfaces every credit sitting in the wrong entity with the correct entity’s PAN and GSTIN attached, refreshed against the group’s chart of accounts.
- Verdict. Manual adequate below 8 subsidiary entities. Above the ceiling the class earns software.
Class 9 — Rule 42 and Rule 43 common credit apportionment
- Severity anchor. 7. Common-credit reversal error caught only at the annual reconciliation in the September-following-FY-end return as an aggregate variance.
- Manual detection technique. Conservation check — Input plus Output plus Net equals the ITC available balance — plus a monthly ratio walk on the exempt-supply-to-turnover ratio.
- Manual ceiling. Scale-free on the arithmetic, but the exempt-supply classification review consumes reviewer time linearly past 2,000 outward-supply invoices per month.
- Software detection outcome. A monthly common-credit apportionment computation surfaced to the tax head with the exempt-supply drift band flagged the day it crosses.
- Verdict. Manual adequate for most enterprises. The class earns software only when the exempt-supply mix drifts sharply period-on-period or when the enterprise operates across multiple business verticals with different exempt profiles.
Class 10 — Section 43B(h) MSME payment cutoff
- Severity anchor. 7. Expenditure disallowance in the previous year under Section 43B(h) where the payment to a micro or small enterprise crosses the 15-day or 45-day cutoff.
- Manual detection technique. Exception aging queue with the 45-day escalation trigger plus a quarterly reasonableness review against the MSME vendor master.
- Manual ceiling. Approximately 800 MSME line items per month. The quarterly review is manual-viable up to this ceiling with a documented cutoff calendar.
- Software detection outcome. A daily-refresh MSME aging queue that surfaces every payable approaching the 15-day or 45-day cutoff with days-remaining and Rs exposure, before the FY-boundary disallowance risk lands.
- Verdict. Manual adequate below 800 MSME line items per month. Above the ceiling the class earns software.
Class 11 — Bank narration and MT940 completeness
- Severity anchor. 6-7. Misstatement of the books — MDR pass-through missed, GST reverse-charge on bank charges not booked, forex remittance in the wrong period.
- Manual detection technique. Two-way tick-and-tie between the bank statement and the book, with the ratio analysis on bank-charges-to-turnover as a secondary overlay.
- Manual ceiling. Approximately 2,000 bank transactions per month per account at Detection 5.
- Software detection outcome. A narration-parsing overlay that classifies every credit and debit against the platform-settlement pattern library and surfaces the MDR pass-through and reverse-charge splits automatically.
- Verdict. Manual adequate below 2,000 bank transactions per month per account. Above the ceiling the class earns software.
Class 12 — Invoice-to-bank aging (60-plus-day buckets)
- Severity anchor. 6. CARO 2020 Clause 3(ii)(b) reportable observation on the quarterly stock statement agreement with the books of account.
- Manual detection technique. Exception aging queue with 0-60, 61-120, 121-180, 180-plus day buckets.
- Manual ceiling. Approximately 500 open items across all invoice-to-bank streams before the daily-and-weekly review cadence exceeds a single reviewer’s capacity.
- Software detection outcome. A continuous aging queue that refreshes buckets daily with named escalation triggers and Rs exposure summation by bucket, surfaced to the AR head and the CFO.
- Verdict. Manual adequate below 500 open items. Above the ceiling the class earns software.
Class 13 — Precision, rounding and SGST/CGST split entry errors
- Severity anchor. 4-5. Ledger-level exception that will be caught at year-end but distorts monthly reporting.
- Manual detection technique. Conservation check — debit equals credit; SGST paise plus CGST paise equals the total intra-state GST at the same rate.
- Manual ceiling. Scale-free — the check is a formula, not a row-by-row walk.
- Software detection outcome. The same identity is enforced at posting time as a validation gate rather than at reconciliation time as a detection layer.
- Verdict. Manual is permanently adequate on this class because conservation checks compute in constant time regardless of volume. Software optionally moves the check upstream from detection to prevention.
Class 14 — Petty variance below the Rs 5,000 materiality floor
- Severity anchor. 3. Cosmetic — file naming, rounding difference, minor formatting, or a variance the reviewer would auto-clear on sight.
- Manual detection technique. Materiality-anchored reasonableness — auto-clear every variance below Rs 5,000 per invoice or Rs 1 lakh per close-cycle aggregate.
- Manual ceiling. Not applicable — the materiality floor is the ceiling.
- Software detection outcome. The same materiality floor applies as an auto-clear rule; no incremental detection value is produced.
- Verdict. Manual is permanently adequate on this class. Software does not earn its place because the failure class does not carry residual Severity.
The position — which layer catches which class
Two classes stay manual permanently regardless of volume — the Rs 5,000 petty variance class (Class 14) where the materiality floor auto-clears the row, and the conservation check class (Class 13) where the identity computes in constant time. Neither class carries the residual Severity that would earn a software layer its place.
Three classes cross to software the moment the ceiling is crossed and stay there because Severity is 9 or 10 — the Section 16(4) at-risk ITC queue past 200 vendors (Class 2, Severity 10), the cross-era TDS payment-code mapping past 3,000 receivable line items (Class 5, Severity 9), and the NACH batch return-code cascade past 500 mandate volumes per month (Class 6, Severity 8-9). The Action Priority table forbids accepting these rows on the register regardless of Occurrence and Detection, and the manual detection layer cannot economically close them once the ceiling is crossed.
The nine middle classes (Classes 1, 3, 4, 7-12) are context-dependent. An SME with 40 vendors, 1,200 monthly invoices, and no multi-GSTIN structure runs all nine classes manually and passes ICAI SA 315 testing on the strength of the peer review technique alone. A mid-market enterprise with 300 vendors, 8,000 monthly invoices, and a three-GSTIN structure carries all nine classes on software because the manual ceiling is crossed on every one. The register is the arbiter, not the vendor pitch — every quarter the enterprise re-walks the Occurrence and Detection re-rating and moves any row that has crossed its ceiling from manual to software.
When to move — the specific signals
The signal that a class has crossed its ceiling is not a feature request from the reconciliation team. It is a re-rated Detection on the register that the reviewer cannot bring back down to the composite catch-rate the Severity demands. The signals to walk each quarter are these:
- Any GSTR-2B three-way match reviewer reporting a sample-based Detection rating of 7 or higher — the reviewer is telling the register that the population walk is out of reach at the current volume.
- Any 180-plus-day-bucket item in the Section 16(4) aging queue that the audit committee has walked to a reverse decision more than once in a year — the exposure has become recurring, not incidental.
- Any Section 200A demand notice for a rate-band misapplication that the ratio-analysis technique caught only after the challan had already been paid — the ratio catches the drift, but not before the payment lands.
- Any DRC-01B intimation received where the seven-day reply window closed with a paid differential — the Table 3.1 tolerance walk did not fire in time.
- Any Section 43B(h) expenditure disallowance in the tax audit where the MSME aging queue did not surface the payable before the FY-boundary — the aging cadence has collapsed under volume.
Each signal maps to a specific class in the comparison. Each signal is a Detection re-rating on the register, not a re-design of the failure mode analysis. And each signal is the audit-committee-defensible reason to move that row from manual to software while the peer review technique continues as the design authority the auditor tests under SA 315. Terra Insight’s reconciliation control plan template publishes the register structure that carries the re-rating.
Where this fits
- Reconciliation process design — the methodology pillar
- Manual detection techniques — the seven-technique portfolio
- When manual reconciliation tops out — the thresholds
- Reconciliation process design for a CA firm
- Reconciliation control plan template
- Reconciliation software ROI
- Reconciliation software vs ERP
- Reconciliation software India — pillar guide
- GST reconciliation software
- TDS reconciliation software
Frequently Asked Questions
Why frame the manual-versus-software choice as a failure mode comparison rather than a feature comparison?
A feature comparison lists what each layer can do — export to Excel, connect to the bank, run a matching engine, produce an aging report. That framing loses the point of a reconciliation function, which is not to run a report but to catch a specific class of failure before it reaches the tax authority, the counterparty, or the auditor. The comparison that carries decision weight lists the 14 failure classes an Indian reconciliation register produces, names the manual technique that catches each one, names the volume ceiling where the manual technique tops out, and identifies the classes where manual is adequate and the classes where the register itself names software as the only economically viable detection layer. The comparison anchors to statute — Section 16(4) permanent loss for the ITC-time-bar class, Section 200A short-deduction demand for the TDS rate-band class, DRC-01B intimation for the GSTR-1-versus-3B tolerance class, Section 43B(h) expenditure disallowance for the MSME aging class — because the failure the reconciliation function must catch is defined by statute, not by a feature list.
Which failure classes stay manual regardless of scale, and which move to software regardless of scale?
Two classes stay manual permanently — the Rs 5,000-and-below petty variance class where the materiality floor auto-clears the row and no detection layer earns its keep, and the conservation-check class where the SGST plus CGST equals IGST identity computes in constant time regardless of transaction volume. Three classes cross to software the moment the enterprise crosses the ceiling and stay there — the Section 16(4) at-risk ITC queue class past 200 vendors, the cross-era TDS payment-code mapping class past 3,000 receivable line items, and the NACH batch return-code cascade class past 500 mandate volumes per month. The 9 classes in between are context-dependent — an SME with 40 vendors and 1,200 monthly invoices runs the whole register manually and passes ICAI SA 315 testing on the strength of the peer review technique alone, while a mid-market enterprise with 300 vendors and 8,000 monthly invoices carries the same 9 classes on software because the manual ceiling is crossed on every one of them. The register is the arbiter, not the vendor pitch.
Does moving a failure class to software mean the manual detection technique is retired?
No. The manual detection technique remains the design authority on the failure class even after software carries the population walk. The peer review continues to run monthly as the enterprise’s compressed SA 315 walk, ratio analysis continues to flag aggregate drift the reviewer investigates against the software output, and conservation checks continue to compute the structural identities the software cannot re-derive. The shift is that the row-level walk moves from reviewer capacity to continuous refresh — the three-way tick-and-tie that a reviewer runs on a sample of 200 rows per month becomes the population walk that runs every day, and the reviewer’s role moves from row-level walker to design authority who tests the software’s coverage on a documented sample. This is the posture that satisfies Section 143(3)(i) ICFR testing — the auditor tests the design of the manual technique, samples the software’s operating effectiveness, and reads the reconciliation register as the evidence that failure mode analysis remains the enterprise’s own responsibility.
What does the shift from manual to software cost in audit-defence terms?
Nothing, if the register is intact. The failure mode analysis that Terra Insight publishes on the reconciliation process design pillar is the design documentation ICFR testing verifies, and it does not change when the detection layer shifts. Every High Action Priority row still names a Severity anchored to Indian statute (Section 16(4) at 10, Section 200A at 9, DRC-01B at 8, Section 43B(h) at 7), an Occurrence based on incident data from the previous four quarters, a Detection re-rated against the composite catch-rate of the techniques applied, a prevention control, a detection control, an owner, and a review cadence. The peer review continues as the operating-effectiveness test the auditor samples. The audit-defence posture is stronger, not weaker, because the population walk that a reviewer could not sustain is now documented and reproducible against a continuous log rather than a monthly working paper. The transition is a design change on the Detection layer of the register, not a re-design of the failure mode analysis itself.
How does this comparison relate to the reconciliation software ROI conversation?
The ROI conversation begins where the manual failure mode analysis itself produces a High Action Priority row the manual detection layer cannot economically close. The comparison in this article is the analytical basis for that ROI case — the Section 16(4) at-risk ITC queue is the Severity 10 row where permanent loss is on the table and no manual layer can walk 200-plus vendors every day, the Section 200A cross-era mapping is the Severity 9 row where quarterly filing under Rule 31A cannot be walked across 3,000-plus receivable lines by hand, the DRC-01B Table 3.1 tolerance is the Severity 8 row where every month is a fresh notice risk under a multi-GSTIN structure. The ROI case names those three rows as the software layer’s coverage and calculates the residual severity avoided against the historical loss run. The Terra Insight reconciliation software ROI guide publishes the calculation frame, and the board justification guide publishes the register-anchored narrative that walks a CFO from the comparison to the approved capex.
- ▸ Section 16(4), Central Goods and Services Tax Act 2017 — A registered person shall not be entitled to take Input Tax Credit in respect of any invoice or debit note for supply of goods or services after the 30th day of November following the end of the financial year to which such invoice or debit note pertains, or the furnishing of the relevant annual return, whichever is earlier. This is the Severity 10 anchor in the comparison — permanent loss with no recovery mechanism, and the failure class where an at-risk queue refreshed at the vendor-GSTR-1-filing-status level cannot be sustained by hand past roughly 200 suppliers.
- ▸ Section 200A read with Sections 201(1A) and 234E, Income-tax Act 1961 (retained in Income-tax Act 2025) — The Central Processing Centre shall process every TDS statement and issue a demand for the amount payable with interest at 1 percent per month for short-deduction under Section 201(1A), 1.5 percent per month for short-payment, and Section 234E fee at Rs 200 per day capped at the tax deductible. This is the Severity 9 anchor — cash outflow with slow recovery — and the failure class where a two-way tick-and-tie against Form 168 with payment-code-aware validation on the 1001-1092 range cannot be sustained by hand across cross-era mapping and multi-thousand-row TDS ledgers.
- ▸ Rule 88C read with Form DRC-01B, Central Goods and Services Tax Rules 2017 — Where the tax payable on outward supplies as declared in GSTR-1 exceeds the tax paid in GSTR-3B by more than the prescribed limit, the registered person shall be intimated in Form DRC-01B and shall either pay the differential amount with interest under Section 50 or furnish a reply within seven days. This is the Severity 8 anchor — auditor qualification and CARO 2020 reportable observation risk — and the failure class where the Table 3.1 tolerance walk under a multi-GSTIN structure crosses the manual reviewer's capacity every month.
- ▸ Section 43B(h), Income-tax Act 1961 (retained in Income-tax Act 2025) read with MSMED Act 2006 — Any sum payable by an assessee to a micro or small enterprise beyond the time limit specified under Section 15 of the MSMED Act 2006 (15 days without a written agreement, or up to 45 days with a written agreement) shall be allowed only in the previous year in which the sum is actually paid. This is the Severity 7 anchor — expenditure disallowance and misstatement of the books — and the failure class where a quarterly review with a documented cutoff is manual-viable up to roughly 800 line items per month before the aging cadence collapses.
- ▸ Rule 36(4), Central Goods and Services Tax Rules 2017 — Input Tax Credit availed by a registered person in respect of invoices or debit notes the details of which have not been furnished by the suppliers under Section 37 shall not exceed the amount of input tax credit available in respect of invoices the details of which have been furnished by the suppliers in Form GSTR-1 or through the Invoice Furnishing Facility. Rule 36(4) is the statutory anchor of the three-way tick-and-tie failure class — the class where manual is sustainable up to roughly 1,500 line items per month per GSTIN, and where a multi-GSTIN group crosses the ceiling every quarter.
- ▸ Companies (Auditor's Report) Order 2020, Clause 3(ii)(b) — The auditor is required to report on whether the quarterly returns or statements filed by the company with banks or financial institutions in respect of working capital limits exceeding five crore rupees are in agreement with the books of account. Bank reconciliation is the direct evidence base — the failure class where invoice-to-bank two-way match and 60-day-plus aging bucket discipline are manual-adequate up to roughly 2,000 transactions per month before the reviewer capacity is exceeded.
- ▸ ICAI Standard on Auditing SA 315, Identifying and Assessing the Risks of Material Misstatement — The auditor shall perform risk assessment procedures to obtain an understanding of the entity's internal control sufficient to identify and assess the risks of material misstatement, whether due to fraud or error. SA 315 governs the auditor's walk of the reconciliation function's design and operating effectiveness — the same walk the enterprise's own peer review technique compresses into a monthly one-close-cycle pass on the manual-adequate rows of the comparison this article publishes.
- ▸ Section 393 read with the four-digit payment codes 1001 to 1092, Income-tax Act 2025 — From 1 April 2026, every TDS deduction is reported under a four-digit payment code in the range 1001 to 1092 in place of the legacy Section 194x identifier. Section 194Q maps to code 1031, Section 194J to code 1005, Section 194C to code 1002, and Section 194A to code 1001. This is the anchor of the cross-era mapping failure class — the class where manual matching across three financial years while the correction windows close cannot be sustained by hand past roughly 3,000 receivable line items.