Validation checks

Every invoice runs through these checks in order. A failing check adds a flag and routes the invoice to a human instead of auto-approving.