Policy pack

Workday Financials Circuit Breaker

Pre-execution circuit breaker for Workday Financials — state admission (completeness, valid amount) and execution authority (hard-cap breach, payroll variance, duplicate payment, off-contract invoice, unit-price anomaly, approver authority) enforced inline before a payroll run, expense payout, or supplier invoice commits.

Key
workday_financials
Version
workday-financials-v1
Rules
10
Domain
WORKDAY_FIN_EXECUTION_AUTHORITY

Rules, in the order the evaluator tries them

Highest priority first. The first rule whose conditions all hold decides; with none, the decision is a REVIEW.

  1. Duplicate payment suspected

    priority 210

    exec-duplicate-payment · *

    When
    • gate = "execution_authority"
    • duplicate_suspected = true
    Then

    AUTO_REJECT → REJECT · urgent

    A prior payment with the same payee + amount (or vendor + invoice) fingerprint was found.

  2. Single payout breaches the hard cap

    priority 205

    exec-hard-cap · *

    When
    • gate = "execution_authority"
    • over_hard_cap = true
    Then

    AUTO_REJECT → REJECT · urgent

    A single payout exceeds the hard cap and is blocked before it commits.

  3. Required Financials state fields present

    priority 200

    state-required-fields · *

    When
    • gate = "state_admission"
    • missing_required_fields > 0
    Then

    AUTO_REJECT → REJECT · urgent

    Financial payload is incomplete; the payee, amount, and currency must be present before admission.

  4. Actor holds an authorized Finance role

    priority 200

    exec-authorized-approver · *

    When
    • gate = "execution_authority"
    • actor_authorized = false
    Then

    AUTO_REJECT → REJECT · urgent

    Actor role is not authorized to release governed Workday Financials commits.

  5. Amount is a valid positive value

    priority 195

    state-amount-valid · *

    When
    • gate = "state_admission"
    • amount_invalid = true
    Then

    AUTO_REJECT → REJECT · urgent

    Payout / invoice amount must be a positive numeric value.

  6. Payroll variance exceeds the logical threshold

    priority 190

    exec-payroll-variance · *

    When
    • gate = "execution_authority"
    • variance_exceeded = true
    Then

    ESCALATE → ESCALATE · urgent · SLA 10 min

    Payroll / expense amount exceeds the allowed variance from the historical baseline; hold and escalate before committing.

  7. Invoice is off active contract terms

    priority 185

    exec-off-contract · *

    When
    • gate = "execution_authority"
    • off_contract = true
    Then

    REQUIRE_REVIEW → REVIEW · elevated · SLA 120 min

    Invoice does not reconcile to an active contract (missing, inactive, or over remaining value); hold for review.

  8. Unit price exceeds the contract baseline

    priority 180

    exec-unit-price-anomaly · *

    When
    • gate = "execution_authority"
    • unit_price_anomaly = true
    Then

    REQUIRE_REVIEW → REVIEW · elevated · SLA 120 min

    Invoiced unit price exceeds the contract / baseline unit price beyond tolerance; hold for review.

  9. Admit a clean Financials state

    priority 1

    state-admit-default · *

    When
    • gate = "state_admission"
    Then

    AUTO_APPROVE → APPROVE

    Financial proposed state is complete and eligible for execution review.

  10. Authorize a clean Financials commit

    priority 1

    exec-authorize-default · *

    When
    • gate = "execution_authority"
    Then

    AUTO_APPROVE → APPROVE

    Circuit-breaker checks passed for the proposed Workday Financials commit.

Evaluate under it

Locally, with @decionis/mcp: the payload becomes the request's context, and its action the decision type. On the hosted protocol, once the bundle is stored for your organization, name vertical_pack, policy_version and require_exact_policy_version: true.

decionis_evaluate arguments

{ "policy_pack": "workday_financials", "payload": { "action": "<decision type>" } }

In a hosted evaluate-decision request

"vertical_pack": "workday_financials",
"policy_version": "workday-financials-v1",
"require_exact_policy_version": true

What its rules read

Every fact below comes from the request's context.

  • actor_authorized
  • amount_invalid
  • duplicate_suspected
  • gate
  • missing_required_fields
  • off_contract
  • over_hard_cap
  • unit_price_anomaly
  • variance_exceeded

Signals it maps

  • workday_fin_state_completeness_rateworkday_financials
  • workday_fin_blocked_commit_rateworkday_financials