Human ResourcesManaged AI Agents
Human Resources AI Agents,
Monitored for Fairness
Nestack Agent Care helps HR teams monitor, evaluate, and optimize AI agents used for recruiting, screening, employee support, and policy guidance — before small AI errors become fairness or legal issues.
Scope
Human Resources AI agents we build & manage
Thirteen archetypes — from candidate screening to leave administration and skills matching.
Hiring & onboarding3
Employee support5
Performance & growth5
Observability
What we make observable
Every HR agent session is traced across ten layers — what we capture and the evidence we keep.
- Evidence we keepGoalconstraintsapproval requirement
- Evidence we keepSourceversiontimestamprelevancecitation
- Evidence we keepPlanned sequenceactual sequenceworkflow status
- Evidence we keepTask statusresultretryfailure reason
- Evidence we keepTool nameversioninputoutputpermissionresult
- Evidence we keepModel/versioninput/outputtoken usagelatencycost
- Evidence we keepEvaluation typemetricthresholdresult
- Evidence we keepGuardrail targettriggeractionenforcement result
- Evidence we keepReviewerdecisioncorrectionreason
- Evidence we keepOutcome statusbusiness resultlinked trace
Catalog
Failure modes
Filter failure modes by where they occur in the agent lifecycle—from goals and retrieval to tools, evaluations, guardrails and outcomes.
HRD-01Discriminatory screening or ranking — protected attributes and proxiesSEV-1
HRD-02Employee-data leaks — salary, health, performance to unauthorized partiesSEV-1
HRD-03Policy misstatement — leave, entitlements, notice periodsSEV-2
HRD-04Sensitive-case mishandling — harassment/grievance disclosures not escalatedSEV-1
HRD-05Termination/discipline guidance errorsSEV-1
HRD-06Payroll and benefits calculation errorsSEV-2
HRD-07Injection via résumés and applicationsSEV-1
HRD-08Accommodation-request mishandling — disability and religious requests dropped or misadvisedSEV-1
HRD-09Employment-verification errors — wrong dates, titles, salaries confirmed to third partiesSEV-2
HRD-10Offboarding-access failures — accounts and entitlements live after exitSEV-1
HRD-11Work-rights misadvice — visa conditions, right-to-work checks, sponsorship deadlinesSEV-1
HRD-12Survey-anonymity breaches — engagement feedback deanonymized in summariesSEV-2
HRD-13Fake-candidate infiltration — deepfake interviews, stolen identities, nation-state operativesSEV-1
HRD-14Rubber-stamp oversight — adverse decisions effectively fully automatedSEV-1
HRD-15Qualified-candidate over-filtering — knockout and keyword configs reject good applicantsSEV-2
HRD-16Unregulated third-party scoring — covert dossiers and wrong-person background matchesSEV-1
HRD-17Leave-adjudication errors — FMLA eligibility miscounted, requests wrongly deniedSEV-1
HRD-18Outbound-communication defects — prompt leaks, wrong-recipient sends, opt-out violationsSEV-2
HRD-19Meeting-capture overreach — AI note-takers in investigations create discoverable recordsSEV-2
HRD-20HR-channel impersonation — cloned voices divert payroll, fake recruiters harvest PIISEV-1
HRD-21Agent over-privilege — shared credentials, over-scoped tokens, unattributed HRIS writesSEV-1
HRD-22Workforce-analytics overreach — protected-trait inference, false idle flags, flight-risk labelsSEV-1
HRD-23Generated-feedback bias — demographic language skew and sycophancy in AI-written reviewsSEV-2
HRD-24Disclosure and audit gaps — AI-use notices, bias audits, ADS records missing or staleSEV-2
A · Candidate-screening assistants
TH-03Scored before notice served01 · RetrievalSEV-3
TH-04Proxy carries what the score drops02 · ReasoningSEV-1
TH-06Rescinded benchmark read as live02 · ReasoningSEV-1
TH-02Thin impact base passed forward03 · Tool / writeSEV-1
TH-05Vendor score acted on unflagged03 · Tool / writeSEV-2
TH-01Shortlisted, ranking unrecorded04 · OutputSEV-2
TH-07Silent drift into a scored tool05 · Change / VersionSEV-2
B · Policy & entitlements copilots
TI-03Wrong-entity document read01 · RetrievalSEV-3
TI-04Summary answered as plan02 · ReasoningSEV-1
TI-06Withdrawn letter cited as live02 · ReasoningSEV-1
TI-02Carve-out left off the answer03 · Tool / writeSEV-1
TI-05Answer worded as a refusal03 · Tool / writeSEV-2
TI-01The answer becomes the term04 · OutputSEV-2
TI-07Silent commencement drift05 · Change / VersionSEV-2
C · Payroll/benefits support agents
TO-03Record already destroyed01 · RetrievalSEV-3
TO-04Demand read as a question02 · ReasoningSEV-1
TO-06Repealed rule read as live02 · ReasoningSEV-1
TO-02Unmatched figure sent out03 · Tool / writeSEV-1
TO-05Reply bound to wrong period03 · Tool / writeSEV-2
TO-01Confirmed, record unattached04 · OutputSEV-2
TO-07Silent rule drift05 · Change / VersionSEV-2
D · Case-intake agents (ER, grievances)
TY-03Prior notice not retrieved01 · RetrievalSEV-3
TY-04Protected-category content missed02 · ReasoningSEV-1
TY-06Tangible action never raised02 · ReasoningSEV-1
TY-02Confidentiality text issued by default03 · Tool / writeSEV-1
TY-05Acknowledgement lapses, clock runs03 · Tool / writeSEV-2
TY-01Closed on a rule, not a determination04 · OutputSEV-2
TY-07Analytics accrue with no privilege05 · Change / VersionSEV-2
E · Onboarding/offboarding agents
UA-03Superseded form template read01 · RetrievalSEV-3
UA-04Extra documents requested02 · ReasoningSEV-1
UA-06Genuineness assumed, not examined02 · ReasoningSEV-1
UA-02Remote look without standing03 · Tool / writeSEV-1
UA-05Revocation on a contested mismatch03 · Tool / writeSEV-2
UA-01Attested, examination unrecorded04 · OutputSEV-2
UA-07Silent deadline drift05 · Change / VersionSEV-2
F · Interview-scheduling agents
UC-07Booking page unusable01 · RetrievalSEV-3
UC-01Request read as a reschedule02 · ReasoningSEV-1
UC-04Slot set that quietly selects02 · ReasoningSEV-1
UC-03Prohibited topic raised03 · Tool / writeSEV-1
UC-05Recorder without all-party consent03 · Tool / writeSEV-2
UC-02Acknowledged, then dropped04 · OutputSEV-2
UC-06Retention on one default05 · Change / VersionSEV-2
G · HR-helpdesk agents
UH-03Harassment route never retrieved01 · RetrievalSEV-3
UH-04Family-health message read as routine02 · ReasoningSEV-1
UH-06Accommodation request read as facilities02 · ReasoningSEV-1
UH-02Confidentiality wording sent by default03 · Tool / writeSEV-1
UH-05Report handled as a payroll query03 · Tool / writeSEV-2
UH-01Health detail kept in the ticket04 · OutputSEV-2
UH-07Escalations stop being read05 · Change / VersionSEV-2
H · Internal-mobility & skills-matching agents
UI-03Profile inferred, never shown01 · RetrievalSEV-3
UI-04Proxy rides in on the taxonomy02 · ReasoningSEV-1
UI-06Withdrawn guidance read as live02 · ReasoningSEV-1
UI-02Thin surfacing base passed on03 · Tool / writeSEV-1
UI-05Considered set not persisted03 · Tool / writeSEV-2
UI-01Surfaced, considered set unrecorded04 · OutputSEV-2
UI-07Silent narrowing after retrain05 · Change / VersionSEV-2
I · Performance-review drafting copilots
UL-03Protected material retrieved01 · RetrievalSEV-3
UL-04Invented specific detail02 · ReasoningSEV-1
UL-06Prior review regenerated02 · ReasoningSEV-1
UL-02Narrative against the rating03 · Tool / writeSEV-1
UL-05Affect signal reaches the draft03 · Tool / writeSEV-2
UL-01Signed with no drafting record04 · OutputSEV-2
UL-07Silent wording drift by class05 · Change / VersionSEV-2
J · Comp-benchmarking agents
UP-03Tainted source ingested01 · RetrievalSEV-3
UP-04Job matched on title alone02 · ReasoningSEV-1
UP-06Withdrawn safe harbour read as live02 · ReasoningSEV-1
UP-02Thin cell passed forward03 · Tool / writeSEV-1
UP-05Range bound to wrong family03 · Tool / writeSEV-2
UP-01Approved, provenance unrecorded04 · OutputSEV-2
UP-07Silent vintage drift05 · Change / VersionSEV-2
K · Leave-of-absence agents
UT-03Clock started at the ticket01 · RetrievalSEV-3
UT-04Certification window cut short02 · ReasoningSEV-1
UT-06Exhaustion treated as the end02 · ReasoningSEV-1
UT-02Back-dated with no harm read03 · Tool / writeSEV-1
UT-05Increment charged at the default03 · Tool / writeSEV-2
UT-01Designated, return flag omitted04 · OutputSEV-2
UT-07Medical record merged on migration05 · Change / VersionSEV-2
L · Engagement-insights agents
VJ-03Respondent mix never gathered01 · RetrievalSEV-3
VJ-04Sarcasm scored as contentment02 · ReasoningSEV-1
VJ-06Language read as a mood02 · ReasoningSEV-1
VJ-02Live with no works agreement03 · Tool / writeSEV-1
VJ-05Risk score decides a retention call03 · Tool / writeSEV-2
VJ-01Published, and the writer is named04 · OutputSEV-2
VJ-07Connector widens, notice does not05 · Change / VersionSEV-2
M · Learning & skills-development copilots
VL-03Retraining trigger never arrives01 · RetrievalSEV-3
VL-04Right course, wrong subjects02 · ReasoningSEV-1
VL-06Gap inferred from a proxy02 · ReasoningSEV-1
VL-02Old completion read as current03 · Tool / writeSEV-1
VL-05One retention clock for five03 · Tool / writeSEV-2
VL-01Certified, teaching unrecorded04 · OutputSEV-2
VL-07Silent gate drift05 · Change / VersionSEV-2
Guardrails
Critical guardrails for HR agents
Ten controls that hold regardless of prompt, plan or pressure. Open one to see what it protects, what trips it, what the agent is forced to do, who may release it, and what is written to the record.
GR-01No adverse action from an unaudited screening toolOverride defined
Target
Automated ranking, knockout and rejection decisions across recruiting and promotion workflows.
Trigger
An adverse decision where the current bias audit, candidate notice or human reviewer is missing.
Action — enforced
Platform holds the rejection, verifies NYC Local Law 144 bias-audit currency and candidate notice, and requires a named human decision.
Human override
Head of talent via documented human review meeting EEOC adverse-action duties.
Logged evidencecandidate id · bias-audit id and date · notice timestamp · reviewer identity · decision rationale · ADS record version
GR-02No cross-employee record access beyond authorised scopeNo override
Target
Salary, health, performance and grievance records held in HRIS, payroll and case systems.
Trigger
Any retrieval touching an employee record outside the requester’s role-scoped population.
Action — enforced
Platform denies the query, purges out-of-scope fragments from context, and answers only from the authorised population.
Human override
None — cannot be overridden in session
Logged evidencesession id · requester role · denied record ids · scope rule · timestamp
GR-03No instruction embedded in resumes or applications ever executedNo override
Target
Resumes, application forms, cover letters and portfolio links ingested by screening agents.
Trigger
Directive text detected in candidate materials, including white-on-white text and file metadata.
Action — enforced
Platform treats the content as data only, quarantines the file, and scores the candidate on legitimate content alone.
Human override
None — cannot be overridden in session
Logged evidencedocument hash · payload excerpt · candidate id · quarantine id · scanner version
GR-04No termination or discipline step without counsel sign-offOverride defined
Target
Termination letters, disciplinary actions, PIP escalations and adverse-action notices drafted by agents.
Trigger
Any draft that initiates or advises dismissal, demotion or formal discipline.
Action — enforced
Platform holds the document in draft, blocks delivery, and routes it to employment counsel and the HRBP for approval.
Human override
Employment counsel via recorded sign-off in the case management system.
Logged evidencecase id · draft hash · counsel identity · sign-off timestamp · delivery status
GR-05No auto-closure of harassment or grievance disclosuresOverride defined
Target
Chat intake, ticket queues and survey free-text where employees disclose harassment or safety concerns.
Trigger
Disclosure-pattern language detected in any channel, regardless of the ticket’s stated category.
Action — enforced
Platform escalates to a trained case owner, disables AI capture on the case, and blocks closure without human disposition.
Human override
ER lead via documented human triage decision on the case record.
Logged evidencecase id · detection timestamp · assigned owner · capture-disable record · disposition identity
GR-06No payroll bank change without out-of-band verificationOverride defined
Target
Employee deposit accounts, payroll details and benefits payment instructions in HRIS and payroll systems.
Trigger
A bank or deposit change arriving by email, chat, ticket or voice call.
Action — enforced
Platform freezes the change, requires verification through a second registered channel, and alerts the employee on file.
Human override
Payroll manager via completed verification recorded against the employee record.
Logged evidenceemployee id · change request source · verification channel · verifier identity · freeze and release timestamps
GR-07No exit closed while live entitlements remainOverride defined
Target
Accounts, tokens, badge access and system entitlements tied to departing employees and their agents.
Trigger
An offboarding case marked complete with any entitlement still active past the exit date.
Action — enforced
Platform reopens the case, revokes remaining access automatically, and reports residual shared or agent credentials to IT security.
Human override
IT security lead via documented retention exception with an expiry date.
Logged evidenceexit case id · entitlement list before/after · revocation timestamps · residual exceptions · approver identity
GR-08No work-rights advice outside verified visa recordsOverride defined
Target
Visa conditions, right-to-work checks, sponsorship deadlines and work-eligibility answers to employees and managers.
Trigger
A work-rights question answered without retrieval from the verified immigration case record.
Action — enforced
Platform withholds the answer, cites only the verified record with its date, and refers edge cases to immigration counsel.
Human override
Immigration specialist via case-record update confirming current conditions.
Logged evidenceemployee id · case record version · answer hash · referral status · timestamp
GR-09No inference of protected traits from workforce dataOverride defined
Target
Workforce analytics, monitoring signals, flight-risk models and AI-written performance feedback.
Trigger
A model feature, label or generated text correlating with a protected characteristic.
Action — enforced
Platform drops the feature, blocks the label from any record, and sends the model for fairness re-testing.
Human override
People-analytics lead via fairness review documented with legal concurrence.
Logged evidencemodel version · dropped feature · correlation metric · re-test result · reviewer identities
GR-10No use of unvetted third-party candidate scoresOverride defined
Target
Background checks, social scoring, covert dossiers and third-party adjudication feeds in hiring.
Trigger
A score or dossier from a provider without FCRA-compliant certification and identity-match confirmation.
Action — enforced
Platform excludes the score from decisions, verifies subject identity match, and requires pre-adverse-action notice before any use.
Human override
Talent-acquisition compliance lead via provider certification recorded in the vendor register.
Logged evidenceprovider id · certification status · identity-match result · exclusion record · notice timestamp
Oversight
Human review — triggers, decisions and evidence
When a defined risk trigger fires, the affected action is routed to a named reviewer. Every decision is recorded with its correction, escalation and final outcome for full traceability.
- ConfidenceLow-confidence screening rank
- Financial impactPayroll or benefits change
- Identity / change riskIdentity or work-rights check
- Irreversible actionAdverse employment decision
- Policy riskGrievance or accommodation flag
- Safety controlGuardrail override
- Quality failureFailed critical evaluation
- Revieweridentity + role
- Decisionapprove / reject / amend
- Correctionwhat changed
- Escalationwho, why and severity
- Final outcomereleased / blocked / returned for rework
7 triggers · any one halts the agent
1 record · 5 fields, every time
Compliance
Regulatory mapping
- 01 Goal
- 02 Retrieval
- 03 Workflow
- 04 Task
- 06 LLM
- 07 Evaluation
- 08 Guardrail
- 09 Human review
Employment law
EEOC / Fair Work; NYC Local Law 144 style AI-audit rules increasingly mandate bias testing.
Hiring discrimination
Lifecycle layer:04 Task · 06 LLM · 07 Evaluation
- HRD-01
Evaluations
Baseline evaluation suite — in detail
Baseline evaluations are completed during onboarding and repeated based on the selected plan. Agents that fail critical checks remain restricted until they pass re-testing.
- Detailed case sets
- 66
- Failure modes covered
- 24
- Retired & rotated / quarter
- 10%
- Audit-ready scorecard
- Monthly
Output evaluation4 suites · 200 cases
150 casesScreening fairnesscatches HRD-01
100 casesPolicy groundingcatches HRD-03
80 casesCase-escalation recallcatches HRD-04
80 casesPayroll accuracycatches HRD-06
60 casesEmployee-data privacycatches HRD-02
60 patternsRésumé injectioncatches HRD-07
50 casesAccommodation-handling setcatches HRD-08
40 casesVerification-accuracy setcatches HRD-09
40 casesOffboarding-closure setcatches HRD-10
40 casesWork-rights setcatches HRD-11
40 casesAnonymity-preservation setcatches HRD-12
40 casesTermination-guidance setcatches HRD-05
40 casesCandidate-authenticity setcatches HRD-13
40 casesMeaningful-oversight setcatches HRD-14
40 casesFilter-recall setcatches HRD-15
40 casesAdjudication-compliance setcatches HRD-16
40 casesLeave-adjudication setcatches HRD-17
40 casesOutbound-integrity setcatches HRD-18
40 casesCapture-governance setcatches HRD-19
40 casesChannel-authentication setcatches HRD-20
40 casesPrivilege-containment setcatches HRD-21
40 casesAnalytics-boundary setcatches HRD-22
40 casesFeedback-fairness setcatches HRD-23
40 casesCompliance-artifact setcatches HRD-24
Use your work email to unlock the full grid. We use it to send the requested Agent Care material and qualify business inquiries. We do not sell or share your email.
Department lead review
For applicable high-risk agents, the client’s designated department leader reviews the evaluation criteria and pass thresholds before baseline approval.
Test-case rotation
Evaluation cases are refreshed regularly to reduce memorisation and maintain reliable performance measurement.
Scorecard integration
Scorecards track results against the approved baseline and flag material declines for review and escalation.
Department-specific extensions
Where included in scope, evaluations may be expanded using approved workflows, tools, templates, policies, and incident history.
Monitoring
Change-aware monitoring
When agent performance changes, Nestack correlates the shift with changes to the agent, prompt, model, tools, knowledge base, guardrails and evaluation suite.
- Week 1 · 98.7%
- Week 2 · 98.6%
- Week 3 · 98.8%
- Week 4 · 98.7%
- Week 5 · 98.9%
- Week 6 · 98.7%
- Week 7 · 98.8%
- Week 8 · 95.1%
- Week 9 · 94.9%
- Week 10 · 98.7%
- Week 11 · 98.8%
- Week 12 · 98.9%
Week readouthover or select
Week 8of 12
- 05Knowledge-basekb 2026.07
95.1%Policy-grounding rate
- 7 layers stamped on every run · 12-week window
- Catches HRD-03 · policy misstatement
Something missing?
Don’t see your agent’s issue here?
Every AI environment is different. Share what you’re seeing, and we’ll review the behaviour, assess the risk and recommend the evaluations or controls that may help.
No commitment. Even if you never become a client, we’ll tell you what we think is happening.
Process
Universal incident runbook
Severity is assigned based on business impact, customer harm, data exposure, operational disruption and overall scope.
- SEV-1 Critical
- SEV-2 Major
- SEV-3 Moderate
- SEV-4 Minor
Automated monitoring or human review identifies unusual behaviour. Alerts are recorded and routed according to severity.
Cost control
Keep human resources AI agent costs under control
Token spend is monitored, optimised and reported as part of Agent Care — and savings never come at the expense of quality, because every change is verified against your evaluation baseline.
We review token spend by agent, workflow, model, and session so you can understand where AI costs are coming from.
Running human resources AI agents in production?
Get a free assessment of one agent. We’ll review its behaviour, run a baseline evaluation and highlight potential risks and performance gaps.
Loading open times…
Open times
Select an available date above to view open 45-minute times from our calendar.
