SOX Desk — control population in, sample selection and testing workpaper out

Drop a control population — a disbursement register, a journal listing, a payroll change log, an access-grant extract — and get a complete SOX 404 testing workpaper. The browser does the whole deterministic half free: it maps the columns whatever they are named, derives the sample size by attribute sampling with every adjustment stated as its own line, flags twelve risk attributes each reading only the fields it is about, selects a 100% high-value stratum plus risk-targeted items plus a seeded random or systematic sample that never counts an item twice, measures count, value and sub-period coverage, and evaluates deviations against a tolerable rate with a rule-of-three upper bound and an extrapolation against materiality. The metered pass adds the judgement: test steps for your control, evidence requests, a verdict on every flagged attribute, and the likelihood-and-magnitude argument behind the classification. A derived work of the sox-testing skill by @anthropics. Not audit or legal advice — every workpaper needs a qualified review.

Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.