Practical notes on people operations, AI, workflows, and control.
Product thinking, implementation guidance, security explanations, and useful operating patterns written for the people doing the work.
ImplementationSecurityAI operations
FeaturedPermission-aware AI is a product architecture, not a promptWhy useful AI for people operations needs identity, scoped tools, server authorization, draft states, denied states, and audit outcomes.AI - 3 min read
ProductAccess requests without ticket ping-pongA useful app catalog combines ownership, request context, approval route, expectation, decision, and person record without pretending every app is auto-provisioned.2026-06-23 - 1 min readIntegrationsCandidate triage in Slack without losing the audit trailHow to bring a focused hiring decision into Slack while keeping identity, permission checks, stage changes, and the source record in one system.2026-06-23 - 2 min readPeople OperationsDesigning a compensation-change process people can auditSeparate proposal, approval, effective date, publication, visibility, and payroll handoff.2026-06-23 - 1 min readAIMCP for people operations: useful access without a shared super-tokenPersonal token lifecycle, hashed storage, expiration, revocation, current user scope, tools rather than direct database access, and when a direct integration is better.2026-06-23 - 2 min readPeople OperationsOnboarding should begin before the first-day checklistA good onboarding system starts with candidate conversion, future-hire identity, roles, data, documents, access, manager ownership, and milestone timing.2026-06-23 - 2 min readPeople OperationsDesign performance reviews people can understand and finishClear stage ownership, private drafts, prompt design, peer boundaries, goal context, and status visibility matter more than an elaborate scorecard.2026-06-23 - 2 min readAIPermission-aware AI is a product architecture, not a promptWhy useful AI for people operations needs identity, scoped tools, server authorization, draft states, denied states, and audit outcomes.2026-06-23 - 3 min readImplementationReplacing the spreadsheet is not the same as building a people operating modelMigration succeeds when the company defines groups, roles, ownership, policies, and validation, not merely field mapping.2026-06-23 - 2 min readAIAI-generated dashboards need a trust modelGenerated views require data scope, sharing eligibility, restricted-data flags, sandboxing, trust warnings, and lifecycle behavior.2026-06-23 - 2 min readSecurityA security model for an AI-native people platformGateway authentication, signed internal identity, domain authorization, integration identity, generated-code isolation, audit redaction, files, tokens, and precise compliance claims.2026-06-23 - 2 min readPeople OperationsA better time-off flow for distributed teamsBalance, schedule, overlap, cover, scope, calendar, and asynchronous decisions make leave understandable.2026-06-23 - 2 min readProductWhere to start with people-workflow automationChoose repeatable, bounded processes; map actor, trigger, state, dependency, exception, and evidence before choosing an automation tool.2026-06-23 - 1 min read