R017 — External Link Count
Executive Summary
Key Takeaways
- ✓ R017 is a workbook-level check, producing at most one finding, based on the total count of distinct external workbooks the model references.
- ✓ The underlying concern is delivery risk — as the number of distinct external files a model depends on rises, so does the probability that at least one will be missing or inaccessible for a new recipient.
- ✓ Confidence rises from medium to high as the external workbook count grows further, reflecting increasing certainty that the dependency is a genuine structural risk rather than an incidental one-off link.
- ✓ R017 counts distinct external workbooks, not the number of individual formula cells referencing them — a model could have hundreds of cells referencing the same handful of external files without approaching this rule's threshold.
Purpose¶
R017 is a workbook-level check on how many distinct external workbooks a model's formulas reference in total. It is concerned with delivery risk — the more external files a model depends on, the higher the probability that a recipient will be missing at least one of them.
Detection Logic¶
Every formula node's external precedents are collected and deduplicated by workbook name across the entire model. If the count of distinct external workbooks meets or exceeds a threshold, one workbook-level finding is produced, naming every external file referenced. Confidence rises from medium to high as the count grows further.
Why It Matters¶
At the moment a model is delivered to a new recipient — a lender, an investment committee, an internal reviewer — any external workbook it references must also be supplied, correctly, at the correct file path, for the model to calculate as intended. A model with a small number of external dependencies is a manageable, common pattern. As that count rises, so does the probability that at least one linked file is overlooked, moved, or simply not included in the hand-off, and any one missing file silently stales every cell in the model that depends on it, often without an obviously visible symptom.
Evidence Produced¶
A triggered R017 finding's evidence names the total count of distinct external workbooks referenced and lists every one of them by name, together with a description noting that any one missing file at delivery silently stales the cells that depend on it.
Severity¶
Medium. Weight 6.5. R017 is not one of the five critical-override rules.
Example¶
Trigger. A model's formulas reference six distinct external workbook files across various sheets. R017 fires once, naming all six files and noting the delivery risk each one represents.
Non-trigger. The same model, but referencing only two distinct external files, however many individual formula cells depend on them. R017 does not fire, since the distinct-file count is below the threshold — though R009 (Unresolved External Precedents) may still separately flag any of those two files if either could not be resolved during the audit.
Recommended Remediation¶
Consolidate external references where possible — bringing frequently referenced external data into the model itself, or reducing the number of distinct source files a single model depends on. Where external dependencies are unavoidable, ensure every linked file is supplied alongside the model at every hand-off and that file paths are documented.
Related Rules¶
R017 shares the Structural taxonomy category with the other Structural-category rules published in the Rule Reference, and is closely related in concept to R009 — Unresolved External Precedents — see the Rule Taxonomy page for the full category membership.
Related Articles¶
- Cross-Workbook Links — the Knowledge Centre's buyer-facing guide to the risks of multi-file model architectures.
Version History¶
No version-specific changes to R017's severity, weight, or category are recorded as of engine version 2.1.0. This section will be updated in the same edit as any future change to the rule's declared attributes.
How OXXON tests thisRun a free structural check with FMAE
Frequently Asked Questions
What does FMAE rule R017 check for?
The total number of distinct external workbooks a model's formulas reference. It fires once, naming every external file, when that count exceeds a threshold.
Why does the number of external files matter more than the number of external references?
Because the risk this rule addresses is delivery risk — the probability that a recipient of the model is missing at least one of the files it depends on. A model with a hundred formulas referencing the same two external files carries less delivery risk than one referencing ten different external files even with fewer total references, since each distinct file is a separate point of possible failure.
Is one external link always a problem?
No. A single external workbook dependency is common and manageable. R017 only fires once the count of distinct external files reaches a threshold associated with meaningfully elevated delivery risk.
Related Articles
FMAE Rule Taxonomy
Every rule in the FMAE structural rule pack declares a category attribute at the point it is defined in source — this is not a classification imposed on the rules afterward for documentation purposes, it is the classification the engine itself uses. Six categories cover all 26 rules — Structural (18 rules), Assumptions Governance (1), Integrity Controls (2), Structural Hygiene (1), Aggregation Logic (1), and Model Governance (3). This page publishes that taxonomy as the FMAE equivalent of a control catalog's classification scheme, cross-linked to the Rule Reference page for each member rule.
Finding Data Model & Confidence
Every FMAE finding carries the same fixed structure — which rule triggered it and that rule's identity at the time it ran, its evidence, a narrative explanation, and a confidence label of high, medium, or low. Confidence is a deterministic categorical label derived from how strongly a row's cells agree on a pattern, not a machine-learning probability estimate. Stating this plainly matters, since describing FMAE's confidence as AI-derived or probabilistic would overstate what the engine actually does.
R009 — Unresolved External Precedents
R009 (Unresolved External Precedents) flags a formula cell that references one or more external workbooks the audit could not resolve — for example, because the linked file was not supplied alongside the model being audited. It is distinct from R002 (Broken Links), which reads a separately computed list of broken references; R009 instead walks each formula's own recorded external precedents directly.
Cross Workbook Links in Financial Models
Cross workbook links are formula references in one Excel workbook file that draw data from cells in a separate workbook file. When the source workbook is available and open, the link resolves dynamically. When the source workbook is closed or unavailable, Excel either updates the link by reading the file directly, or retains the last cached value without indicating that the displayed value may be stale. Cross workbook links introduce fragility through path dependency: any change to the name or location of the source file will break the link. In institutional financial models submitted for audit or lender review, cross workbook links that cannot be verified against available source files are a material structural finding.