LensReading which lens this session carries.

Auditor evidence pack

Payroll transaction at policy check

AI GBS & Global Business Services · H2R Control Tower · line GB1C · Time & Absence Cycle.

Chain verified

Every record links to the one before it and hashes to its stored value. 3 records were re-hashed on this page load, in order, starting from the genesis value. Nothing was read from a cached verdict.

hash = sha256(prevHash + "|" + JSON{seq, unitRef, actor, action, outcome, occurredAt})

Records
3
Append-only, sequenced
Agent actions
3
Taken by software
Human actions
0
Taken by a named person
Refusals
0
Blocked by the authority register
Corrections
0
Later record supersedes an earlier one
Legal hold
None
Free to age out on schedule

The unit

What the work was, and where it sits

Reference
GB1C-1001
Subject
Kofi Raman
Requested by
Anika Kowalski
Value
$11k
Materiality
low
Currently held by
H2R spine (gbs)
Sub-function owner
Tower Lead, Hire-to-Retire
Orchestrator
Hire-to-Retire Tower Orchestrator

Every action, in order

Actor, authority, versions in force, and the hash link to the record before it

1
Employee Lifecycle AgentgbsCleared

Cleared collect

2026-08-18 08:25:00ZAuthority GB1-AUTH-A1 · cap $25,000Jurisdiction USAutonomy A4Retention AI-10Y
Prompt
task-execution@p21
Policy
materiality-bands@v9
Tools
ledger-write@t7, document-fetch@t9
in b101539b...9c9388out 9ce66ec1...5e537cartifact ART-GB1C-1000-1 genesis → cb74c298...75eef2
2
Employee Lifecycle AgentgbsCleared

Cleared validate

2026-08-18 08:37:00ZAuthority GB1-AUTH-A1 · cap $25,000Jurisdiction USAutonomy A4Retention AI-10Y
Prompt
task-execution@p21
Policy
materiality-bands@v9
Tools
ledger-write@t7, document-fetch@t9
in 648c7a3f...c75eedout 7d443acc...70f0c6artifact ART-GB1C-1000-2 cb74c298...75eef2 → c4345304...462fc9
3
Employee Lifecycle AgentgbsIn progress

Holding at policy check

2026-08-18 08:48:00ZAuthority GB1-AUTH-A1 · cap $25,000Jurisdiction USAutonomy A4Retention AI-10Y
Prompt
task-execution@p21
Policy
materiality-bands@v9
Tools
ledger-write@t7, document-fetch@t9
in fb898cac...5b26aeout 7dcc8596...098a10artifact ART-GB1C-1000-3 c4345304...462fc9 → d06d60bf...5b1340

Authority relied on

Who was allowed to do this, up to what value, in which jurisdictions

GB1-AUTH-A1ActiveHire-to-Retire Tower Orchestrator

Any unit on a h2r control tower line where every intake check passed, the policy in force is current …

Cap $2,000,000US · UK · DEDelegated from Tower Lead, Hire-to-RetireExpires 2026-10-21

Versions in force

Exactly what was running when these actions were taken

KindIdentifierVersionStatusOwner
modelextract-lite2.9currentPlatform model council
policymateriality-bandsv9currentGroup controller
prompttask-executionp21currentShared service engineering
toolsetledger-writet7currentFinance systems
toolsetdocument-fetcht9currentShared service engineering

Gates on this line

The control points this unit had to clear

Exception review
Held for a named human when the unit exceeds the payroll transaction decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
Approver: Tower Lead, Hire-to-Retire · not reached

Records schedule and holds

How long this evidence must be kept, and whether it is frozen

AI-10Y10 years
Autonomous decision evidence
Model risk and AI regulation expectations on traceability of automated decisions, taken at the longest emerging requirement rather than the current minimum.
Deleted at ten years.

What this pack proves, and what it does not

Read this before you rely on it

It does prove
  • Every action carries a named actor, an actor kind, and a timestamp.
  • Every action names the authority grant that permitted it and the cap that grant carries.
  • Every action stamps the model, prompt, policy and tool versions in force at that moment.
  • Corrections are additive. A later record supersedes an earlier one and says why
  • The chain is re-hashed live on this page, so a single altered field is detected immediately.
It does not prove
  • It is not tamper-proof against an attacker with write access to the store, who could rewrite the whole chain from genesis.
  • The evidence in this demonstration is modeled from a simulated estate, not captured from production systems.
  • Identity here is the actor name recorded on the action.