Context-Window Data Minimization
A control class with no ERP write-path equivalent: what data actually enters an agent's context window. Ask the same real HR question two ways — once with no allowlist, once with a field-level allowlist enforced at the boundary — and see exactly which fields entered each agent's prompt, side by side. 100% synthetic data: a small invented Plant 3 roster and a month of invented shift records, not connected to any real UKG tenant.
Naive fields
13
6 sensitive, 558 total occurrences
Governed fields
7
0 sensitive, 522 total occurrences
Fields blocked
6
never assembled into the governed prompt
Employees in scope
6
Plant 3 — Assembly Line, August 2026
The question
“Why was overtime high in Plant 3 last month?”
Underlying synthetic data
Invented roster and shift data for Plant 3 — Assembly Line — 21 shift-days × 6 employees for August 2026. Every name, SSN, pay rate, and shift below is synthetic and does not represent any real person or any real UKG tenant.
| Employee | Department | Overtime hours (month) | Overtime shifts |
|---|---|---|---|
| Maria Chen (E-4471) | Plant 3 — Assembly Line | 0h | 0 |
| David Okafor (E-4472) | Plant 3 — Assembly Line | 1h | 1 |
| Priya Natarajan (E-4473) | Plant 3 — Assembly Line | 0h | 0 |
| Jason Whitfield (E-4474) | Plant 3 — Assembly Line | 24.5h | 7 |
| Elena Ruiz (E-4475) | Plant 3 — Assembly Line | 0h | 0 |
| Marcus Boone (E-4476) | Plant 3 — Assembly Line | 20h | 5 |
The governed agent's field-level allowlist is enforced before assembly, not by asking the model to ignore fields it already received — sensitive fields like SSN, pay rate, leave reason, medical-accommodation flag, union status, and full timecard history never leave the boundary for this question class at all. Both agents reach a materially similar answer from the same underlying data; the point of this demo isn't answer quality, it's that the governed path proves you don't need the sensitive fields to answer correctly. Everything on this page runs in your browser; nothing is sent to a server. 100% synthetic data — invented for this demo, not sourced from or connected to any real UKG tenant, sandbox, or export.
Want the full picture for your environment?
A discovery call gets you a scoped assessment from the person who builds these engagements — not a form, a conversation.
Book a discovery call