Records
Reports
Payroll summaries, employee history, and protected audit activity will be available from company-scoped records.
Organization
Payroll Reports
Payroll summaries, pay statements, and protected audit activity
Company reports
Verifying trusted company access…
Report records are not requested until authentication and company access are resolved.
Reporting safeguards
Company isolation
Repository and Firestore-rule tests verify that one company cannot read another company's protected records.
Audit log protection
Audit records are append-only; update and delete attempts are rejected in emulator tests.
Report access permission
The shared access model includes reports.read and reports.export permissions for future report routes.
Read-only live reporting
Trusted active-company context now loads payroll entries and paychecks and summarizes them with the tested reporting engine.
Export generation
Tested payroll CSV generation exists in the engine; downloadable report/export UI and filing exports remain disabled until their access and audit paths are wired.