Credentials are checked by the server and stored encrypted. Rotating or disconnecting credentials preserves logical source links and historical import evidence.
| HR system | Connection | Declared source | Saved version | Recorded | Governance |
|---|---|---|---|---|---|
| BrightHR | Connected | northgate-uk-hr | 2 | 22 Oct 2026, 11:51 | |
| BambooHR | Disconnected | northgate | 1 | 21 Oct 2026, 13:51 | Historical links preserved |
Review every proposed change before it reaches the people directory. Matches use durable source links first, then work email, then payroll or external reference across the full employee directory.
Immutable audit trail of applied employee imports and partial-run outcomes.
| HR system | Run status | Outcome summary | Applied | Saved progress |
|---|---|---|---|---|
| BrightHR | Completed | 1 created · 1 updated · 0 unchanged | 22 Oct 2026, 12:51 | Complete |
Stage external BrightHR absences (up to 93 days per batch) for operational comparison. Medical and free-text notes are omitted by policy, and staged records never create approved Bluecollar leave or alter payroll.
Privacy and payroll boundary: Inclusive start and end dates, half-day indicators and cancellation state are preserved. Free-text sickness notes are stripped before storage and excluded from Bluecollar Assist indexing.
| Person | Absence type | Inclusive dates | Duration | Medical note policy | Review status | Operational notes |
|---|---|---|---|---|---|---|
Linked employee BrightHR ID: bhr-emp-001 | Sickness | 2026-08-10 to 2026-08-11 | 2 days | Note omitted by policy | Roster shift overlap | Inclusive calendar-day range from BrightHR. Medical certificate flag recorded; free-text note omitted by policy. |
Linked employee BrightHR ID: bhr-emp-002 | Annual leave | 2026-08-18 to 2026-08-18 | 1 days | No note present | No overlap | External absence staged for operational comparison only. |
Stage external BrightHR Blip clockings (up to 31 days per batch) for discrepancy review. Staged clockings are kept separate from immutable native attendance and never fabricate device proof or paid hours.
Immutable attendance boundary: Open clock-ins without a clock-out are preserved as open external records, and source timezones and break boundaries are preserved. Ambiguous or invalid local times remain unconfirmed.
| Person | Blip type | Local timestamps | External span and breaks | Timezone status | Comparison status | Operational notes |
|---|---|---|---|---|---|---|
Linked employee BrightHR ID: bhr-emp-001 | Shift | 2026-08-11T08:01:00 (open clock-in) | Elapsed span unconfirmed | Timezone unconfirmed | Open clocking | Open BrightHR Blip clocking without a clock-out timestamp; staged as incomplete external evidence. |
Linked employee BrightHR ID: bhr-emp-002 | Shift | 2026-10-25T01:15:00 to 2026-10-25T09:15:00 | 480 minutes elapsed | Ambiguous local time | Staged for comparison | Local timestamp falls on a UK daylight-saving transition date without an explicit timezone offset. |
Owner-reviewed write-back of Bluecollar employee references into blank BrightHR employee reference fields, with read-back reconciliation.
| Reconciliation status | Read-back verification | Recorded | Saved progress |
|---|---|---|---|
| Partial result | 1 verified · 0 awaiting read-back · 1 protected conflicts | 22 Oct 2026, 13:36 |