HR & RECRUITING
Work-Authorization Runway Scanner with Tiered Escalation
Runs daily against your BigQuery employee table to find work-authorization documents nearing expiry.
How it runs
The automated pipeline, trigger to output.
- TriggerDaily 7am schedule
- ActionQuery BigQuery for expiries within 90 daysBigQuery
- LogicBucket each record into 90/60/30/7-day tier
- ActionPost sub-30-day cases to Slack, tag coordinatorSlack
- ActionEmail 90/60-day advance notice to manager via OutlookOutlook
- OutputAppend escalations to BigQuery audit logBigQuery
What it does
Every morning this workflow scans your HR data warehouse for employees whose visa, EAD, or other work-authorization document expires soon. It buckets each record by how many days remain and routes it to the right channel and owner, so HR sees long-runway cases as quiet FYIs and short-runway cases as urgent action items.
When to use it
Use it when you maintain employee work-authorization expiry dates in BigQuery and need a reliable, auditable re-verification pipeline instead of someone eyeballing a spreadsheet. Ideal for teams with sponsored workers, OPT/CPT students, or anyone subject to I-9 re-verification deadlines.
How it works
- 1A daily schedule fires the workflow at 7am.
- 2It queries BigQuery for all active employees with a work-auth expiry date inside the next 90 days.
- 3A logic step buckets each row into a 90, 60, 30, or 7-day tier.
- 4Sub-30-day cases post to the HR `#work-auth-urgent` Slack channel tagging the assigned coordinator.
- 590 and 60-day cases are emailed via Outlook to the employee's manager as advance notice.
- 6A final output appends every escalation to an audit log table for compliance records.
Set it up
What you configure once, before turning it on.
- 1Connect BigQueryDatasets, queries, schemas.
- 2Connect SlackChannels, DMs, threads, mentions.
- 3Connect OutlookMail, calendar, contacts.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More HR & Recruiting workflows
Day-one readiness orchestrator across all onboarding owners
An agent-driven coordinator that, when a hire is launched, plans the full provisioning program across IT, Facilities, and Finance, opens the work in your tracker.
Escalate Compliance-Blocking Credential Lapses to Managers
Each day it finds credentials that have already expired or expire within 48 hours and are flagged compliance-blocking.
Assemble and send the debrief packet after the final interview
Triggered when a candidate's final interview ends on the calendar, it waits a short window for scorecards, compiles the aggregated packet to Google Drive.
Credential Renewal Evidence Verification Agent
When an employee replies with a renewed credential document, an agent reads the attachment, extracts the new expiry date and credential number.
New-Hire Credential Intake to Renewal Calendar Holds
When a new credential is added to the tracker, it validates the record, files the document.
New-hire equipment order email to IT and vendor
On a scheduled lead-time before each start date, drafts and sends an equipment order email (laptop, monitor.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.

Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.
