Steward Agent blast-radius intelligence
← Back to findings
Agent access certification

PayrollBot

Maintains employee records and prepares the biweekly payroll run.

Risk tier critical 1 verified finding
Identitypayroll_bot
Owner
Jordan Ellis, People Operations
Review state
pending
Effective accessDirect + delegated
  • add_employee direct grant
  • run_payroll direct grant
Granted vs. NeededLLM-assisted signal

Declared need

  • creates employee records in the HR system
  • starts payroll calculation and payment run for employees

Concrete grant gap

No tool-ID-level gap was asserted. Treat capability inferences as review context, not a fact.

Cited findings

Why this card needs attention

critical risk 54/100 Segregation of duties Deterministic check

Critical ghost-employee fraud path

PayrollBot holds direct authority to both add_employee (employee creation) and run_payroll (payroll execution). This conflation of employee setup and payroll processing creates a critical segregation‑of‑duties violation, enabling a malicious or compromised bot to create ghost employees and issue unauthorized payroll payments, potentially resulting in financial loss, regulatory non‑compliance, and reputational harm across the entire payroll function.

Recommended actionRe‑engineer the permission model to enforce segregation of duties: remove the direct add_employee grant from PayrollBot, require an independent approval workflow for employee creation, and limit payroll execution to a separate, controlled role. Implement least‑privilege access, periodic access reviews, and monitoring of employee‑creation and payroll‑run activities.
Evidence agentpayroll_bot tooladd_employee toolrun_payroll
Control frameworks context, not certification NIST SP 800-53 Rev. 5 · AC-5 Separation of Duties SOC 2 Trust Services Criteria (2017) · CC6.3 Access modification and segregation of duties ISO/IEC 27001:2022 · A.5.15 Access control ISO/IEC 27001:2022 · A.5.18 Access rights SOX ITGC · SoD Segregation of duties over financial processes EU AI Act (Regulation (EU) 2024/1689) · Art. 14 Human oversight
SOX ITGC — segregation of duties (employee setup versus payroll execution)