[3-2] Verify that payments are made only to authorized vendors.