Most POS finance policies assume a shopper sees every disclosure screen in order. On a Saturday in a Kuching electronics hall, the cashier has a queue and a remembered key sequence. If that sequence jumps the affordability prompt, the application still prints an approval. The binder is intact. The control is not.
When we walk a module, we ask the cashier to process a ticket the way they actually do it, then once more the way training describes. The gap between those two paths is the finding. It is rarely malice. It is speed, a shared supervisor code, and a till that treats skipped screens as optional.
A useful working paper records both paths, the ticket numbers, and whether the skipped screen still writes a log. If the log is silent, later reviewers cannot reconstruct the decision. That is the risk finance teams inherit when they only sample completed files from head office.
If you are scoping an engagement, start with one live till and one lab till. The lab shows the intended path. The live till shows the one that funds.