Workday HR Governance
Dual-gate governance for Workday HCM business processes — state admission (completeness, effective date, worker status, termination reason, compensation structure) and execution authority (authorized role, segregation of duties, compensation thresholds, pay-equity review, offboarding coordination, works-council consultation) before they execute.
- Key
- workday
- Version
- workday-hr-governance-v1
- Rules
- 14
- Domain
- WORKDAY_HR_EXECUTION_AUTHORITY
Rules, in the order the evaluator tries them
Highest priority first. The first rule whose conditions all hold decides; with none, the decision is a REVIEW.
Duplicate business process suspected
priority 210exec-duplicate-process · *
When- gate = "execution_authority"
- duplicate_suspected = true
ThenAUTO_REJECT → REJECT · urgent
A prior business process for the same worker, type, and effective date was found.
Required Workday HR state fields present
priority 200state-required-fields · *
When- gate = "state_admission"
- missing_required_fields > 0
ThenAUTO_REJECT → REJECT · urgent
HR business process is incomplete; worker, process, effective date, and initiator must be present before admission.
Actor holds an authorized HR role
priority 200exec-authorized-role · *
When- gate = "execution_authority"
- actor_authorized = false
ThenAUTO_REJECT → REJECT · urgent
Actor role is not authorized to execute governed Workday HR processes.
Effective date is valid
priority 195state-effective-date-valid · *
When- gate = "state_admission"
- effective_date_invalid = true
ThenAUTO_REJECT → REJECT · urgent
The business process effective date must be a valid calendar date.
Segregation of duties enforced
priority 195exec-segregation-of-duties · *
When- gate = "execution_authority"
- sod_violation = true
ThenAUTO_REJECT → REJECT · urgent
Segregation-of-duties check failed because the initiator and approver are the same person.
Worker record is actionable
priority 190state-worker-active · *
When- gate = "state_admission"
- worker_actionable = false
ThenAUTO_REJECT → REJECT · urgent
Worker record is terminated or inactive and cannot receive this process.
Termination carries a reason code
priority 185state-termination-reason · *
When- gate = "state_admission"
- termination_reason_missing = true
ThenAUTO_REJECT → REJECT · urgent
A termination must specify a reason code before it can be admitted.
High-impact compensation change requires committee approval
priority 185exec-compensation-threshold · *
When- gate = "execution_authority"
- compensation_over_threshold = true
- compensation_committee_approved = false
ThenESCALATE → ESCALATE · urgent · SLA 10 min
Compensation change exceeds the policy threshold and Compensation Committee approval is missing.
Compensation change cites a pay structure
priority 180state-compensation-structured · *
When- gate = "state_admission"
- compensation_change = true
- structured_criteria_used = false
ThenAUTO_REJECT → REJECT · urgent
A compensation change must reference a salary band or documented pay structure before admission.
Pay-equity review before compensation execution
priority 180exec-pay-equity · *
When- gate = "execution_authority"
- pay_equity_flagged = true
- pay_equity_cleared = false
ThenREQUIRE_REVIEW → REVIEW · elevated · SLA 120 min
An adverse-impact / pay-equity signal is open; hold the compensation change until it is cleared.
Termination coordinates access revocation
priority 175exec-termination-offboarding · *
When- gate = "execution_authority"
- is_termination = true
- offboarding_ready = false
ThenREQUIRE_REVIEW → REVIEW · elevated · SLA 60 min
Termination has no confirmed access-revocation / offboarding plan; hold until offboarding is coordinated.
Regional works-council consultation
priority 170exec-works-council-hold · *
When- gate = "execution_authority"
- works_council_hold = true
ThenREQUIRE_REVIEW → REVIEW · elevated · SLA 60 min
A regional works-council consultation is required before this employment action can execute.
Admit a clean Workday HR state
priority 1state-admit-default · *
When- gate = "state_admission"
ThenAUTO_APPROVE → APPROVE
Workday HR proposed state is complete, non-conflicting, and eligible for execution review.
Authorize a clean Workday HR execution
priority 1exec-authorize-default · *
When- gate = "execution_authority"
ThenAUTO_APPROVE → APPROVE
Execution authority is present for the proposed Workday HR action.
Evaluate under it
Locally, with @decionis/mcp: the payload becomes the request's context, and its action the decision type. On the hosted protocol, once the bundle is stored for your organization, name vertical_pack, policy_version and require_exact_policy_version: true.
decionis_evaluate arguments
{ "policy_pack": "workday", "payload": { "action": "<decision type>" } }In a hosted evaluate-decision request
"vertical_pack": "workday",
"policy_version": "workday-hr-governance-v1",
"require_exact_policy_version": trueWorkflow keys that resolve to this pack: hr_hiring_governance.
What its rules read
Every fact below comes from the request's context.
- actor_authorized
- compensation_change
- compensation_committee_approved
- compensation_over_threshold
- duplicate_suspected
- effective_date_invalid
- gate
- is_termination
- missing_required_fields
- offboarding_ready
- pay_equity_cleared
- pay_equity_flagged
- sod_violation
- structured_criteria_used
- termination_reason_missing
- worker_actionable
- works_council_hold
Signals it maps
- workday_hr_state_completeness_rateworkday_hcm
- workday_hr_unauthorized_execution_rateworkday_hcm