Finance · Showback by User
Only 82% of spend has an owner you could bill — $122.10 has none
$684.50 in observed AI spend. $562.40 (82%) maps to a verified owner you could charge back; $122.10 (18%) does not — 2 of 6 identities are unverified (vendor aliases like duck.com or proxy-only agents with no human behind them). Top exposure isn't the biggest bill: (proxy-only, no identity) at $44.10 (critical-risk, 3 sensitive opens).
Observed, not verified — the table is ranked by risk weight first, then spend. Chargeback figures are projected, not billed.
Observed spend
across 6 identities · 11% estimated
Unchargeable liability
$122.1018% of spend · no verifiable owner
Chargeback-ready
$562.40 on verified owners · projected
Critical-risk identities
3 with sensitive-data opens
How much spend can land on an owner
$684.50 observed total2 of 6 identities carry $122.10 with no owner to bill — vendor aliases like duck.com and proxy-only agents. Resolve them to convert this liability into chargeback.
By attribution status
$684.50 totalObserved identity, not IdP-verified. Chargeback needs a verified, deprovisionable owner.
Per-user showback — ranked by risk, then spend
6 identities · $684.50 totalRanked risk-weight first, then spend — a small-spend Critical identity outranks a big spender, because the biggest bill is rarely the biggest exposure. Unverified rows have no chargeable owner and are flagged.
Telemetry identity | Risk · weight | Tokens | Sensitive opens | Chargeable to | Showback |
|---|---|---|---|---|---|
| (proxy-only, no identity) top exposure no observed identity | Critical ×3 weight · 3 findings | 1.1M4% of fleet | 3 openshigh severity | unchargeable no identity | $44.10 |
| svc-support@qpoint.io1 agent | Elevated ×2 weight | 5.6M19% of fleet | 2 openshigh severity | Engineeringvia directory · projected | $168.40 |
| dev-7f3@duck.com unverified alias | Elevated ×2 weight · 1 finding | 2.4M8% of fleet | none observed | unchargeable unjoined alias | $78.00 est |
| mark@qpoint.io2 agents | Standard ×1 weight · 1 finding | 7.7M26% of fleet | 4 openshigh severity | Engineeringvia directory · projected | $245.50 |
| jane@qpoint.io1 agent | Standard ×1 weight | 3.1M11% of fleet | none observed | Engineeringvia directory · projected | $96.20 |
| svc-data@qpoint.io1 agent | Standard ×1 weight · 1 finding | 9.2M32% of fleet | none observed | Engineeringvia directory · projected | $52.30 |
Joined from costs.by_user (spend, tokens) · dlp.by_owner (sensitive opens) · risk weight = max(agents.danger_level) rank + findings per owner. Identity is observed, not verified; duck.com is an unverified vendor alias. Showback is attribution, not chargeback — chargeback figures are projected and need an IdP-verified owner.