Thanks Timothy! The colour rules came first: green means reconciled, and amber is reserved for one thing only. Then I wrote the sample data so a single transaction earns the amber. The AWS spike, traced to a new GPU instance nobody approved, is a problem a founder recognises instantly, so the explanation does the selling.