See where your IT money went, straight from ServiceNow

**Objective:** Summarize IT spend from `{from-date}` to `{to-date}` (default: all of last month), optionally for cost center `{cost-center}`.

**Step 1: Pull the expense lines**

Call `servicenow-get-expense-line` with date.from `{from-date}`, date.to `{to-date}`, cost-center `{cost-center}` if given, and max-records 1000.

**Step 2: Summarize**

Total the amount by:

* category (for example Capex and Opex)
* type (One-time, Recurring, Distributed)
* cost-center
* configuration-item, top ten
* user, top ten

**Step 3: Look for anomalies**

* the ten largest single lines
* expense lines with no cost-center or no category
* identical amounts on the same configuration-item and date (possible duplicates)
* Recurring lines whose amount differs from the others on the same configuration-item

**Step 4: Report**

A headline total and line count, then one small table per breakdown in Step 2 with amount and share of total, then the anomaly lists with expense numbers.

**Rules & Guidelines:**

* Read-only. Do not call `servicenow-add-expense-line`, `servicenow-update-expense-line` or any other add- or update- tool.
* Report amounts as the tool returns them; do not convert currencies.

**Validation:**

* If there are no expense lines in the period, say so. If the pull hit 1000, say it was capped and suggest a shorter period.