HR-R3 E-slip Boundary

Payslip masking and re-auth reveal control

E-slip records are generated with masked preview payloads. Salary detail reveal is isolated behind an explicit re-auth header and audited API boundary.

API endpointMasked by default/people/v1/payroll/eslips
Payroll proof route UAT remains masked and read-only. Sensitive payroll and e-slip reveal stay hard-gated.
Open HR UAT workspace

Operational proof

Payroll workflow coverage

Postgres-backed baseline
AreaStatusControl
Previewmaskedearnings/deductions/net labels only
Revealre-auth required403 without boundary
Bank datanot storedno transmission path
Mobile ESSready patternprivate reveal required

Boundary

Standalone HR

The console never renders raw salary, bank account, national ID, health, location, device, photo, signature, or attachment values.

Payroll action surface

Read-only controls

Disabled

Controls are visible for UAT route recognition only. No live payroll, filing, bank, Accounting delivery, or e-slip reveal is enabled.