HR-R3 E-slip Boundary

Payslip masking and re-auth reveal control

E-slip records are generated with masked preview payloads. Salary detail reveal is isolated behind an explicit re-auth header and audited API boundary.

API endpointMasked by default/people/v1/payroll/eslips

Operational proof

Payroll workflow coverage

Postgres-backed baseline
AreaStatusControl
Previewmaskedearnings/deductions/net labels only
Revealre-auth required403 without boundary
Bank datanot storedno transmission path
Mobile ESSready patternprivate reveal required

Boundary

Standalone HR

The console never renders raw salary, bank account, national ID, health, location, device, photo, signature, or attachment values.