Human ResourcesManaged AI Agents

Human Resources AI Agents,
Monitored for Fairness

Nestack Agent Care helps HR teams monitor, evaluate, and optimize AI agents used for recruiting, screening, employee support, and policy guidance — before small AI errors become fairness or legal issues.

115failure modes
54SEV-1 failure modes
1260+baseline eval cases
24/7Agent Monitoring

Scope

Human Resources AI agents we build & manage

Thirteen archetypes — from candidate screening to leave administration and skills matching.

Observability

What we make observable

Every HR agent session is traced across ten layers — what we capture and the evidence we keep.

  1. Evidence we keep
    Goalconstraintsapproval requirement
  2. Evidence we keep
    Sourceversiontimestamprelevancecitation
  3. Evidence we keep
    Planned sequenceactual sequenceworkflow status
  4. Evidence we keep
    Task statusresultretryfailure reason
  5. Evidence we keep
    Tool nameversioninputoutputpermissionresult
  6. Evidence we keep
    Model/versioninput/outputtoken usagelatencycost
  7. Evidence we keep
    Evaluation typemetricthresholdresult
  8. Evidence we keep
    Guardrail targettriggeractionenforcement result
  9. Evidence we keep
    Reviewerdecisioncorrectionreason
  10. Evidence we keep
    Outcome statusbusiness resultlinked trace

Catalog

Failure modes

Filter failure modes by where they occur in the agent lifecycle—from goals and retrieval to tools, evaluations, guardrails and outcomes.

Nothing on this page matches that. Try a layer (tool, retrieval, guardrail), a code, or a severity.

0 documented↑↓ move · ↵ open · ⌘↵ filter matrix
115 documented · select a cell to filter
28
32
42
18
15
21
52
63
22
52
HRD-01Discriminatory screening or ranking — protected attributes and proxiesSEV-1
HRD-02Employee-data leaks — salary, health, performance to unauthorized partiesSEV-1
HRD-03Policy misstatement — leave, entitlements, notice periodsSEV-2
HRD-04Sensitive-case mishandling — harassment/grievance disclosures not escalatedSEV-1
HRD-05Termination/discipline guidance errorsSEV-1
HRD-06Payroll and benefits calculation errorsSEV-2
HRD-07Injection via résumés and applicationsSEV-1
HRD-08Accommodation-request mishandling — disability and religious requests dropped or misadvisedSEV-1
HRD-09Employment-verification errors — wrong dates, titles, salaries confirmed to third partiesSEV-2
HRD-10Offboarding-access failures — accounts and entitlements live after exitSEV-1
HRD-11Work-rights misadvice — visa conditions, right-to-work checks, sponsorship deadlinesSEV-1
HRD-12Survey-anonymity breaches — engagement feedback deanonymized in summariesSEV-2
HRD-13Fake-candidate infiltration — deepfake interviews, stolen identities, nation-state operativesSEV-1
HRD-14Rubber-stamp oversight — adverse decisions effectively fully automatedSEV-1
HRD-15Qualified-candidate over-filtering — knockout and keyword configs reject good applicantsSEV-2
HRD-16Unregulated third-party scoring — covert dossiers and wrong-person background matchesSEV-1
HRD-17Leave-adjudication errors — FMLA eligibility miscounted, requests wrongly deniedSEV-1
HRD-18Outbound-communication defects — prompt leaks, wrong-recipient sends, opt-out violationsSEV-2
HRD-19Meeting-capture overreach — AI note-takers in investigations create discoverable recordsSEV-2
HRD-20HR-channel impersonation — cloned voices divert payroll, fake recruiters harvest PIISEV-1
HRD-21Agent over-privilege — shared credentials, over-scoped tokens, unattributed HRIS writesSEV-1
HRD-22Workforce-analytics overreach — protected-trait inference, false idle flags, flight-risk labelsSEV-1
HRD-23Generated-feedback bias — demographic language skew and sycophancy in AI-written reviewsSEV-2
HRD-24Disclosure and audit gaps — AI-use notices, bias audits, ADS records missing or staleSEV-2

A · Candidate-screening assistants

TH-03Scored before notice served01 · RetrievalSEV-3
TH-04Proxy carries what the score drops02 · ReasoningSEV-1
TH-06Rescinded benchmark read as live02 · ReasoningSEV-1
TH-02Thin impact base passed forward03 · Tool / writeSEV-1
TH-05Vendor score acted on unflagged03 · Tool / writeSEV-2
TH-01Shortlisted, ranking unrecorded04 · OutputSEV-2
TH-07Silent drift into a scored tool05 · Change / VersionSEV-2

B · Policy & entitlements copilots

TI-03Wrong-entity document read01 · RetrievalSEV-3
TI-04Summary answered as plan02 · ReasoningSEV-1
TI-06Withdrawn letter cited as live02 · ReasoningSEV-1
TI-02Carve-out left off the answer03 · Tool / writeSEV-1
TI-05Answer worded as a refusal03 · Tool / writeSEV-2
TI-01The answer becomes the term04 · OutputSEV-2
TI-07Silent commencement drift05 · Change / VersionSEV-2

C · Payroll/benefits support agents

TO-03Record already destroyed01 · RetrievalSEV-3
TO-04Demand read as a question02 · ReasoningSEV-1
TO-06Repealed rule read as live02 · ReasoningSEV-1
TO-02Unmatched figure sent out03 · Tool / writeSEV-1
TO-05Reply bound to wrong period03 · Tool / writeSEV-2
TO-01Confirmed, record unattached04 · OutputSEV-2
TO-07Silent rule drift05 · Change / VersionSEV-2

D · Case-intake agents (ER, grievances)

TY-03Prior notice not retrieved01 · RetrievalSEV-3
TY-04Protected-category content missed02 · ReasoningSEV-1
TY-06Tangible action never raised02 · ReasoningSEV-1
TY-02Confidentiality text issued by default03 · Tool / writeSEV-1
TY-05Acknowledgement lapses, clock runs03 · Tool / writeSEV-2
TY-01Closed on a rule, not a determination04 · OutputSEV-2
TY-07Analytics accrue with no privilege05 · Change / VersionSEV-2

E · Onboarding/offboarding agents

UA-03Superseded form template read01 · RetrievalSEV-3
UA-04Extra documents requested02 · ReasoningSEV-1
UA-06Genuineness assumed, not examined02 · ReasoningSEV-1
UA-02Remote look without standing03 · Tool / writeSEV-1
UA-05Revocation on a contested mismatch03 · Tool / writeSEV-2
UA-01Attested, examination unrecorded04 · OutputSEV-2
UA-07Silent deadline drift05 · Change / VersionSEV-2

F · Interview-scheduling agents

UC-07Booking page unusable01 · RetrievalSEV-3
UC-01Request read as a reschedule02 · ReasoningSEV-1
UC-04Slot set that quietly selects02 · ReasoningSEV-1
UC-03Prohibited topic raised03 · Tool / writeSEV-1
UC-05Recorder without all-party consent03 · Tool / writeSEV-2
UC-02Acknowledged, then dropped04 · OutputSEV-2
UC-06Retention on one default05 · Change / VersionSEV-2

G · HR-helpdesk agents

UH-03Harassment route never retrieved01 · RetrievalSEV-3
UH-04Family-health message read as routine02 · ReasoningSEV-1
UH-06Accommodation request read as facilities02 · ReasoningSEV-1
UH-02Confidentiality wording sent by default03 · Tool / writeSEV-1
UH-05Report handled as a payroll query03 · Tool / writeSEV-2
UH-01Health detail kept in the ticket04 · OutputSEV-2
UH-07Escalations stop being read05 · Change / VersionSEV-2

H · Internal-mobility & skills-matching agents

UI-03Profile inferred, never shown01 · RetrievalSEV-3
UI-04Proxy rides in on the taxonomy02 · ReasoningSEV-1
UI-06Withdrawn guidance read as live02 · ReasoningSEV-1
UI-02Thin surfacing base passed on03 · Tool / writeSEV-1
UI-05Considered set not persisted03 · Tool / writeSEV-2
UI-01Surfaced, considered set unrecorded04 · OutputSEV-2
UI-07Silent narrowing after retrain05 · Change / VersionSEV-2

I · Performance-review drafting copilots

UL-03Protected material retrieved01 · RetrievalSEV-3
UL-04Invented specific detail02 · ReasoningSEV-1
UL-06Prior review regenerated02 · ReasoningSEV-1
UL-02Narrative against the rating03 · Tool / writeSEV-1
UL-05Affect signal reaches the draft03 · Tool / writeSEV-2
UL-01Signed with no drafting record04 · OutputSEV-2
UL-07Silent wording drift by class05 · Change / VersionSEV-2

J · Comp-benchmarking agents

UP-03Tainted source ingested01 · RetrievalSEV-3
UP-04Job matched on title alone02 · ReasoningSEV-1
UP-06Withdrawn safe harbour read as live02 · ReasoningSEV-1
UP-02Thin cell passed forward03 · Tool / writeSEV-1
UP-05Range bound to wrong family03 · Tool / writeSEV-2
UP-01Approved, provenance unrecorded04 · OutputSEV-2
UP-07Silent vintage drift05 · Change / VersionSEV-2

K · Leave-of-absence agents

UT-03Clock started at the ticket01 · RetrievalSEV-3
UT-04Certification window cut short02 · ReasoningSEV-1
UT-06Exhaustion treated as the end02 · ReasoningSEV-1
UT-02Back-dated with no harm read03 · Tool / writeSEV-1
UT-05Increment charged at the default03 · Tool / writeSEV-2
UT-01Designated, return flag omitted04 · OutputSEV-2
UT-07Medical record merged on migration05 · Change / VersionSEV-2

L · Engagement-insights agents

VJ-03Respondent mix never gathered01 · RetrievalSEV-3
VJ-04Sarcasm scored as contentment02 · ReasoningSEV-1
VJ-06Language read as a mood02 · ReasoningSEV-1
VJ-02Live with no works agreement03 · Tool / writeSEV-1
VJ-05Risk score decides a retention call03 · Tool / writeSEV-2
VJ-01Published, and the writer is named04 · OutputSEV-2
VJ-07Connector widens, notice does not05 · Change / VersionSEV-2

M · Learning & skills-development copilots

VL-03Retraining trigger never arrives01 · RetrievalSEV-3
VL-04Right course, wrong subjects02 · ReasoningSEV-1
VL-06Gap inferred from a proxy02 · ReasoningSEV-1
VL-02Old completion read as current03 · Tool / writeSEV-1
VL-05One retention clock for five03 · Tool / writeSEV-2
VL-01Certified, teaching unrecorded04 · OutputSEV-2
VL-07Silent gate drift05 · Change / VersionSEV-2

Guardrails

Critical guardrails for HR agents

Ten controls that hold regardless of prompt, plan or pressure. Open one to see what it protects, what trips it, what the agent is forced to do, who may release it, and what is written to the record.

GR-01No adverse action from an unaudited screening toolOverride defined
  1. Target

    Automated ranking, knockout and rejection decisions across recruiting and promotion workflows.

  2. Trigger

    An adverse decision where the current bias audit, candidate notice or human reviewer is missing.

  3. Action — enforced

    Platform holds the rejection, verifies NYC Local Law 144 bias-audit currency and candidate notice, and requires a named human decision.

  4. Human override

    Head of talent via documented human review meeting EEOC adverse-action duties.

Logged evidencecandidate id · bias-audit id and date · notice timestamp · reviewer identity · decision rationale · ADS record version

GR-02No cross-employee record access beyond authorised scopeNo override
  1. Target

    Salary, health, performance and grievance records held in HRIS, payroll and case systems.

  2. Trigger

    Any retrieval touching an employee record outside the requester’s role-scoped population.

  3. Action — enforced

    Platform denies the query, purges out-of-scope fragments from context, and answers only from the authorised population.

  4. Human override

    None — cannot be overridden in session

Logged evidencesession id · requester role · denied record ids · scope rule · timestamp

GR-03No instruction embedded in resumes or applications ever executedNo override
  1. Target

    Resumes, application forms, cover letters and portfolio links ingested by screening agents.

  2. Trigger

    Directive text detected in candidate materials, including white-on-white text and file metadata.

  3. Action — enforced

    Platform treats the content as data only, quarantines the file, and scores the candidate on legitimate content alone.

  4. Human override

    None — cannot be overridden in session

Logged evidencedocument hash · payload excerpt · candidate id · quarantine id · scanner version

GR-04No termination or discipline step without counsel sign-offOverride defined
  1. Target

    Termination letters, disciplinary actions, PIP escalations and adverse-action notices drafted by agents.

  2. Trigger

    Any draft that initiates or advises dismissal, demotion or formal discipline.

  3. Action — enforced

    Platform holds the document in draft, blocks delivery, and routes it to employment counsel and the HRBP for approval.

  4. Human override

    Employment counsel via recorded sign-off in the case management system.

Logged evidencecase id · draft hash · counsel identity · sign-off timestamp · delivery status

GR-05No auto-closure of harassment or grievance disclosuresOverride defined
  1. Target

    Chat intake, ticket queues and survey free-text where employees disclose harassment or safety concerns.

  2. Trigger

    Disclosure-pattern language detected in any channel, regardless of the ticket’s stated category.

  3. Action — enforced

    Platform escalates to a trained case owner, disables AI capture on the case, and blocks closure without human disposition.

  4. Human override

    ER lead via documented human triage decision on the case record.

Logged evidencecase id · detection timestamp · assigned owner · capture-disable record · disposition identity

GR-06No payroll bank change without out-of-band verificationOverride defined
  1. Target

    Employee deposit accounts, payroll details and benefits payment instructions in HRIS and payroll systems.

  2. Trigger

    A bank or deposit change arriving by email, chat, ticket or voice call.

  3. Action — enforced

    Platform freezes the change, requires verification through a second registered channel, and alerts the employee on file.

  4. Human override

    Payroll manager via completed verification recorded against the employee record.

Logged evidenceemployee id · change request source · verification channel · verifier identity · freeze and release timestamps

GR-07No exit closed while live entitlements remainOverride defined
  1. Target

    Accounts, tokens, badge access and system entitlements tied to departing employees and their agents.

  2. Trigger

    An offboarding case marked complete with any entitlement still active past the exit date.

  3. Action — enforced

    Platform reopens the case, revokes remaining access automatically, and reports residual shared or agent credentials to IT security.

  4. Human override

    IT security lead via documented retention exception with an expiry date.

Logged evidenceexit case id · entitlement list before/after · revocation timestamps · residual exceptions · approver identity

GR-08No work-rights advice outside verified visa recordsOverride defined
  1. Target

    Visa conditions, right-to-work checks, sponsorship deadlines and work-eligibility answers to employees and managers.

  2. Trigger

    A work-rights question answered without retrieval from the verified immigration case record.

  3. Action — enforced

    Platform withholds the answer, cites only the verified record with its date, and refers edge cases to immigration counsel.

  4. Human override

    Immigration specialist via case-record update confirming current conditions.

Logged evidenceemployee id · case record version · answer hash · referral status · timestamp

GR-09No inference of protected traits from workforce dataOverride defined
  1. Target

    Workforce analytics, monitoring signals, flight-risk models and AI-written performance feedback.

  2. Trigger

    A model feature, label or generated text correlating with a protected characteristic.

  3. Action — enforced

    Platform drops the feature, blocks the label from any record, and sends the model for fairness re-testing.

  4. Human override

    People-analytics lead via fairness review documented with legal concurrence.

Logged evidencemodel version · dropped feature · correlation metric · re-test result · reviewer identities

GR-10No use of unvetted third-party candidate scoresOverride defined
  1. Target

    Background checks, social scoring, covert dossiers and third-party adjudication feeds in hiring.

  2. Trigger

    A score or dossier from a provider without FCRA-compliant certification and identity-match confirmation.

  3. Action — enforced

    Platform excludes the score from decisions, verifies subject identity match, and requires pre-adverse-action notice before any use.

  4. Human override

    Talent-acquisition compliance lead via provider certification recorded in the vendor register.

Logged evidenceprovider id · certification status · identity-match result · exclusion record · notice timestamp

Oversight

Human review — triggers, decisions and evidence

When a defined risk trigger fires, the affected action is routed to a named reviewer. Every decision is recorded with its correction, escalation and final outcome for full traceability.

  • ConfidenceLow-confidence screening rank
  • Financial impactPayroll or benefits change
  • Identity / change riskIdentity or work-rights check
  • Irreversible actionAdverse employment decision
  • Policy riskGrievance or accommodation flag
  • Safety controlGuardrail override
  • Quality failureFailed critical evaluation
Humanreviewnamed reviewer
  • Revieweridentity + role
  • Decisionapprove / reject / amend
  • Correctionwhat changed
  • Escalationwho, why and severity
  • Final outcomereleased / blocked / returned for rework

7 triggers · any one halts the agent

1 record · 5 fields, every time

Compliance

Regulatory mapping

  • 01 Goal
  • 02 Retrieval
  • 03 Workflow
  • 04 Task
  • 06 LLM
  • 07 Evaluation
  • 08 Guardrail
  • 09 Human review

Employment law

EEOC / Fair Work; NYC Local Law 144 style AI-audit rules increasingly mandate bias testing.

Hiring discrimination

Lifecycle layer:04 Task · 06 LLM · 07 Evaluation

  • HRD-01

Evaluations

Baseline evaluation suite — in detail

Baseline evaluations are completed during onboarding and repeated based on the selected plan. Agents that fail critical checks remain restricted until they pass re-testing.

Detailed case sets
66
Failure modes covered
24
Retired & rotated / quarter
10%
Audit-ready scorecard
Monthly

Output evaluation4 suites · 200 cases

80 casesPayroll accuracycatches HRD-06
40 casesFilter-recall setcatches HRD-15
40 casesLeave-adjudication setcatches HRD-17
40 casesOutbound-integrity setcatches HRD-18

Use your work email to unlock the full grid. We use it to send the requested Agent Care material and qualify business inquiries. We do not sell or share your email.

  1. Department lead review

    For applicable high-risk agents, the client’s designated department leader reviews the evaluation criteria and pass thresholds before baseline approval.

  2. Test-case rotation

    Evaluation cases are refreshed regularly to reduce memorisation and maintain reliable performance measurement.

  3. Scorecard integration

    Scorecards track results against the approved baseline and flag material declines for review and escalation.

  4. Department-specific extensions

    Where included in scope, evaluations may be expanded using approved workflows, tools, templates, policies, and incident history.

Monitoring

Change-aware monitoring

When agent performance changes, Nestack correlates the shift with changes to the agent, prompt, model, tools, knowledge base, guardrails and evaluation suite.

Version changes by layer
01AgentAgent changed in week 4Agent changed in week 11
02PromptPrompt changed in week 6
03ModelModel changed in week 3
04ToolTool changed in week 7
05Knowledge-baseKnowledge-base changed in week 8Knowledge-base changed in week 10
06GuardrailGuardrail changed in week 5Guardrail changed in week 12
07Eval-suiteEval-suite changed in week 10
Policy-grounding rate92–100%
  • Week 1 · 98.7%
  • Week 2 · 98.6%
  • Week 3 · 98.8%
  • Week 4 · 98.7%
  • Week 5 · 98.9%
  • Week 6 · 98.7%
  • Week 7 · 98.8%
  • Week 8 · 95.1%
  • Week 9 · 94.9%
  • Week 10 · 98.7%
  • Week 11 · 98.8%
  • Week 12 · 98.9%

Week readouthover or select

Week 8of 12

  • 05Knowledge-basekb 2026.07

95.1%Policy-grounding rate

  • 7 layers stamped on every run · 12-week window
  • Catches HRD-03 · policy misstatement

Something missing?

Don’t see your agent’s issue here?

Every AI environment is different. Share what you’re seeing, and we’ll review the behaviour, assess the risk and recommend the evaluations or controls that may help.

Report an agent issue

Tell us what you’re seeing

The more specific, the faster we can reproduce it. Playbook: Human Resources

We reply within one business day.

See pricing

No commitment. Even if you never become a client, we’ll tell you what we think is happening.

Process

Universal incident runbook

Severity is assigned based on business impact, customer harm, data exposure, operational disruption and overall scope.

  • SEV-1 Critical
  • SEV-2 Major
  • SEV-3 Moderate
  • SEV-4 Minor
STEP 01

Automated monitoring or human review identifies unusual behaviour. Alerts are recorded and routed according to severity.

Cost control

Keep human resources AI agent costs under control

Token spend is monitored, optimised and reported as part of Agent Care — and savings never come at the expense of quality, because every change is verified against your evaluation baseline.

We review token spend by agent, workflow, model, and session so you can understand where AI costs are coming from.

Running human resources AI agents in production?

Get a free assessment of one agent. We’ll review its behaviour, run a baseline evaluation and highlight potential risks and performance gaps.

Loading open times…

Open times

Select an available date above to view open 45-minute times from our calendar.