LensReading which lens this session carries.

Auditor evidence pack

Change at detect defect

Human Resources · HR AI-IT · line HR11A · Data Quality Remediation. This pack names every action taken on this unit, who or what took it, the authority that permitted it, and the model, prompt and policy versions in force at that moment.

Chain verified

Every record links to the one before it and hashes to its stored value. 1 record were re-hashed on this page load, in order, starting from the genesis value. Nothing was read from a cached verdict.

hash = sha256(prevHash + "|" + JSON{seq, unitRef, actor, action, outcome, occurredAt})

Records
1
Append-only, sequenced
Agent actions
1
Taken by software
Human actions
0
Taken by a named person
Refusals
0
Blocked by the authority register
Corrections
0
Later record supersedes an earlier one
Legal hold
Held
HOLD-002

The unit

What the work was, and where it sits

Reference
HR11A-1026
Subject
Ines Ito
Requested by
Hannah Costa
Value
$57k
Materiality
medium
Currently held by
HRIS Data Quality Agent (agent)
Sub-function owner
Director, HR Technology
Orchestrator
HR Tech Orchestrator

Every action, in order

Actor, authority, versions in force, and the hash link to the record before it

1
HRIS Data Quality AgentobserveIn progress

Holding at detect defect

2026-08-18 06:29:00ZAuthority HR11-AUTH-A1 · cap $250,000Jurisdiction UKAutonomy A3Retention HR-6YLegal hold HOLD-002
Prompt
observe-scan@p11
Policy
people-decisions@v3
Tools
read-only-lookup@t12
in 90874746...cd6c46out 6547ccb4...300926artifact ART-HR11A-1003-1 genesis 8d61d4cb...20abb6

Authority relied on

Who was allowed to do this, up to what value, in which jurisdictions

HR11-AUTH-A1ActiveHR Tech Orchestrator

Any unit on a hr ai-it line where every intake check passed, the policy in force is current, and the value sits inside the cap below.

Cap $250,000US · UK · DEDelegated from Director, HR TechnologyExpires 2027-04-14

Versions in force

Exactly what was running when these actions were taken

KindIdentifierVersionStatusOwner
modelobserve-signal3.1currentSensing guild
policypeople-decisionsv3currentChief people officer
promptobserve-scanp11currentSensing guild
toolsetread-only-lookupt12currentPlatform engineering

Gates on this line

The control points this unit had to clear

Steward review
Held for a named human when the unit exceeds the change decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
Approver: Director, HR Technology · not reached

Records schedule and holds

How long this evidence must be kept, and whether it is frozen

HR-6Y6 years
Employment and people decisions
Employment claim limitation periods, taken at the longest applicable across works-council jurisdictions.
Deleted at six years from the end of the employment relationship. Personal identifiers pseudonymized at two years where the record is retained only for statistical monitoring.
HOLD-002active
Employment claim — promotion decision
A claim has been filed alleging an automated screening step influenced a promotion outcome. Every people-decision record is held, including the records that show the decision was taken by a human, because those are the records that answer the claim.
Custodian Head of Employment Law · requested by Employment counsel

What this pack proves, and what it does not

Read this before you rely on it

It does prove
  • Every action carries a named actor, an actor kind, and a timestamp.
  • Every action names the authority grant that permitted it and the cap that grant carries.
  • Every action stamps the model, prompt, policy and tool versions in force at that moment.
  • Corrections are additive. A later record supersedes an earlier one and says why; the earlier record is never edited or deleted.
  • The chain is re-hashed live on this page, so a single altered field is detected immediately.
It does not prove
  • It is not tamper-proof against an attacker with write access to the store, who could rewrite the whole chain from genesis. Making that impossible requires publishing chain tips to a store this application cannot write to. That anchor is not built, and this page does not claim it.
  • The evidence in this demonstration is modeled from a simulated estate, not captured from production systems.
  • Identity here is the actor name recorded on the action. Cryptographic agent identity and signed attestation are a separate piece of work.