Additional verification required

Juniper HR Income Records

A payroll records experience that feels like a real employee admin surface while withholding tax-year evidence until the wallet proves the request is bounded to payroll retrieval.

Employee EMP-001 · Johan Sellstrom

Requested record 2025 annual income statement

Policy tier Payroll evidence with replay-resistant retry

Action Center

Open 2025 income statement

Open the 2025 income statement for employee EMP-001.

Payroll statement withheld until wallet approval Held for verification

The requested statement becomes available only after the bounded WAUTH retry.

Employer systems should not treat generic logged-in access as consent for agent retrieval, so this screen demands exact-action authorization before releasing payroll evidence.

Open 2025 income statement Inspect employee profile

Records queue

2025 annual payroll summary Tax-year closeout · employer-issued

Pending wallet approval

Benefit contribution statement Supplementary evidence for filing support

Viewable after authorization

Document access log Shows who opened payroll evidence and when

Updated automatically

Trust Policy

Authorization boundary

Employer systems should not treat generic logged-in access as consent for agent retrieval, so this screen demands exact-action authorization before releasing payroll evidence.

Required assurance AAIF-PoHP-1 equivalent for payroll evidence lookup

Expected retry shape Bounded capability token with DPoP sender proof

Security and access details

Audience URI

https://wauth-demo.showntell.dev/hr/api/income

Action profile

aaif.wauth.action.employer.read_income/v0.1

Control notes

The retry is scoped to payroll evidence for one declared tax task.
The action hash ties the capability to the exact record lookup the assistant requested.
A reused token or mismatched DPoP proof is rejected before data leaves the portal.