HumanCapital CXO · Enterprise & applied AI
Controlled AI for workforce planning
I built an invitation-only workforce planning pilot with AI-assisted formula selection and server-side access controls. The core engineering decision: let AI help choose a reviewed method while keeping inputs and calculation logic explicitly defined.
- My role
- Full-Stack & AI Engineer
- Engagement
- Client project
- Period
- 2026-Present
Invitation-only pilot
Access to the B2B pilot is managed by the client.
Project at a glance
- The need
- Workforce scenarios need useful guidance with visible assumptions and a defined calculation method.
- What I delivered
- A guided planning workspace that makes scenario assumptions and the selected method visible, with controlled access for pilot users.
Client pilot. Private client data and implementation details are excluded.
My contribution
- Built the Next.js / React application and invitation flow, connecting scenario inputs, method selection, and guidance in one workspace.
- Constrained AI-assisted selection to reviewed formula identifiers, with validation of the selected method.
- Implemented server-side authorization and application-level usage controls for authenticated planning requests.
Technical challenge
Scenario matching benefits from flexible interpretation, but a planning calculation needs a defined method. The challenge was to set a useful role for AI without allowing generated answers to become the calculation logic or bypass access controls.
My approach
I connected scenario inputs to a reviewed formula catalogue and constrained AI selection to supported identifiers. Server-side authorization and usage checks control access to the workflow, keeping selection, calculation, and permissions as separate responsibilities.
Engineering decisions
Define a narrow contract for AI
I limited the model to selecting supported formula identifiers. The application retains defined inputs and calculation logic, so the chosen method can be inspected independently of the generated response.
Enforce permissions where requests are processed
Invitations define entry to the pilot; server-side checks govern authenticated requests and usage. This places authorization in the application workflow, rather than relying on the interface to hide restricted actions.
Explore the system architecture
Scenario inputs pass through authenticated workflow checks before reaching constrained formula selection. The diagram shows responsibilities without exposing private client implementation details.
System architecture
Select a component to explore its responsibilities.
Scenario workspace: responsibilities
Technology
- Next.js
- React
- TypeScript
- PostgreSQL
- Supabase
- Access controls