←
Self-service Update your own details
One screen, two people. The top half is what Alex sees on his phone in the truck. The bottom half is the same change sitting in the office queue ninety seconds later. It is deliberately one page, because the interesting part is the gap between them.

Your details

Alex Voltner · WE-4417 · North division

Current number on file: (555) 555-0147

What you can change yourself

Mobile Home address Personal email Emergency contacts Shirt & jacket size
Position Division Supervisor Pay Hire date

The second row is not “editable, then rejected”. Those fields have no employee-facing edit path at all — they change through a different process with different approvers, and a self-service form is the wrong door for them.

Pending changes

2 waiting

Casey Conduit · HR · this is the office view of the same queue.

What gets recorded

Append-only 

    

    

      Who, what, when — and both halves of every change: the request and the
      decision are separate rows, so a rejected change is still a permanent part
      of the record. Nothing here is ever overwritten, which is what makes it
      evidence rather than a display.
    

  


  

    
Why approval, and not just “save”

    

      

        

          
A pending change is a proposal, not a value

          
The record keeps the old number until somebody approves the new one. Nothing downstream ever reads a half-committed edit.

        

      

      

        

          
The old value survives the change

          
Both are kept with their dates, so “what address did we have in June?” is answerable a year later.

        

      

      

        

          
A contact field is an access-control surface

          
If sign-in ever keys off an address in the directory, an unreviewed edit to a contact field becomes a way in. Review is cheap; that failure is not.

        

      

      

        

          
185 people, a handful of changes a week

          
This queue is small by design. If it ever gets long, the fix is fewer approval-required fields — a setting — not a person clicking faster.

        

      

    

  


  

    What this screen teaches. Employees maintaining their own details is
    the whole point of self-service, and it is also the moment an HR record can
    quietly become wrong. The resolution is not to choose between them: the
    employee edits, the change waits, and the trail says who decided. That is one
    mechanism doing three jobs — accuracy, accountability, and less typing in the
    office.