Perfect HR owns approved person and assignment facts; SIS, finance, ERP, CRM and other domain systems retain their transactions; LeadershipOS owns execution context.
Direct database writes and prohibited duplicates are excluded.
Authorise by tenant, entity, concern, position, report, row, field, action, purpose, class, time, risk and delegation—then re-check across query, cache, export, search, notification and AI.
Leadership seniority alone never grants data access.
Record sensitive access, export, edit, approval, override, AI/tool use, notification, connector, failure, reconciliation, retention and support access with actor, purpose and correlation.
Uncertified or stale data cannot appear as executive truth.
Registered agents operate at AU0 observe, AU1 draft, AU2 recommend or tightly constrained AU3 reversible action, with citations, limits, approval, trace and suspension.
AI cannot make employment, academic, legal or financial decisions or self-certify.
Apply P0–P4 classification, purpose limitation, minimisation, masking, retention, legal hold, lawful deletion, correction and incident routing.
Residency and legal conclusions are not promised before review.
Define measurable service levels, alerting, incident communications, capacity, cost, backup, restore, RTO/RPO, rollback and manual continuity.
Restore must be proven before an approved pilot.
Target WCAG 2.2 AA with semantic structure, keyboard control, visible focus, readable contrast, reflow, reduced motion, captions and language direction.
Accessibility needs executed evidence and owner acceptance.