Operational pattern
Core workflow rows
| Subject | Status | Control |
|---|---|---|
| Employment certificate | available | metadata only |
| Medical certificate | future | protected |
| Expiry | tracked | report-ready |
HR-R2 Documents
Document/certificate metadata is visible by scope; raw attachments and special-protected files stay out of evidence and public UI.
Operational pattern
| Subject | Status | Control |
|---|---|---|
| Employment certificate | available | metadata only |
| Medical certificate | future | protected |
| Expiry | tracked | report-ready |
HR-R2 screens and evidence avoid national ID, raw salary detail, health data, geolocation, photo, signature, device fingerprint, raw attachment, and receipt blob values.
Action surface preview
Buttons are UAT markers only. They do not create, update, approve, upload, export, or reveal data.