Your AI Coworker Can Move Between Runtimes. Can Its Rules Come Along?
Google's new cross-runtime governance plans put an overlooked migration question in focus: when an A...
Gusto's new AI-assisted payroll features put preparation closer to the tools owners already use. The real design challenge is deciding what can be prepared, what needs review, and what happens when the payroll cutoff arrives with an unresolved exception.
On October 22, Gusto announced AI-assisted payroll preparation: intelligent automations gather hours and flag anomalies, while connections to Claude, ChatGPT, and other AI tools can help owners ask questions, prepare payroll, and produce reports. Gusto says owners approve changes before they are final. The interesting part is not that a chat interface can reach payroll data. It is that payroll now has a visible seam between preparing a run and authorizing people to be paid.
That seam deserves more attention than the demo. A late timesheet, a new work location, a disputed overtime entry, or a contractor invoice that arrived after the internal deadline does not wait for a model to become confident. Payroll has a cutoff. The owner needs a trustworthy packet of what is ready, what is uncertain, who can resolve it, and what cannot proceed. A fluent summary without that operational structure is just another task for the owner to check.
Gusto also announced multi-location payroll, contractor-invoice ingestion that prefills a paysheet for review, and a connector through which power users can prepare work and send a prioritized decision list. These are the company's descriptions of its own offering; availability, supported locations, permissions, and actual approval behavior should be checked in a customer's account. They illustrate a wider shift: AI payroll for small business is becoming a preparation and exception-management problem, not merely a data-entry problem.
Payroll is an unusually good test of whether an AI coworker is actually a coworker. It must keep track of a recurring deadline, know which evidence belongs to which pay period, distinguish a discrepancy from an authorized correction, and hand a bounded decision to a person. It cannot simply do whatever the person could do with their own login. Money, employee records, tax obligations, and trust sit on the other side of the approval.
A payroll run is a sequence, not a button. Hours arrive from a time system. Salaried changes and bonuses arrive from managers. Location and leave records affect calculations. Contractor invoices may take a different path. Then someone reviews the proposed run, resolves exceptions, confirms the final amounts and recipients, and submits it through the payroll provider. Each phase has different evidence and a different authority level.
A useful AI coworker can collect source records, compare them, highlight missing information, draft clarifying questions, and assemble a review packet. The system of record should calculate payroll under its own rules, and the authorized payroll administrator should decide whether to submit. This is not a claim that every adjustment always needs the business owner personally; it means the business assigns an accountable approver and keeps the approval in a system that records it.
The U.S. Department of Labor's Fair Labor Standards Act guidance explains that covered employers must meet minimum wage, overtime, and recordkeeping requirements. State and local rules can add obligations, and a small business may have workers outside the United States. A coworker can find an inconsistency; it should not improvise a legal conclusion from a vague timesheet. Route uncertain classifications or jurisdiction questions to the payroll administrator and qualified adviser.
For each pay period, define a compact packet: the pay-period dates and cutoff; source systems and their last refresh times; employees and contractors in scope; hours or salary changes; proposed additions and deductions as reported by the payroll system; unresolved exceptions; the person who can answer each exception; and the final reviewer. Link each assertion to a source record rather than pasting sensitive details into a general chat transcript.
The packet should distinguish missing, conflicting, and confirmed information. An employee with no submitted hours is not necessarily an employee who worked zero hours. A bonus approved by email but absent from the payroll system is not a confirmed payment. An invoice read from an attachment is not an approved contractor disbursement. These states need different next actions.
The IRS employment-tax overview is a reminder that payroll is not finished when net pay looks plausible: withholding, deposits, reporting, and recordkeeping remain employer responsibilities. The coworker should preserve the source and approval trail rather than substitute its own estimate for the payroll provider's calculations. If a change affects tax treatment, escalate it to the responsible professional rather than guessing.
Bad: On Thursday afternoon, the owner asks a general-purpose AI interface to “fix payroll.” It reads a spreadsheet of hours and an inbox, sees a discrepancy for an employee who worked in two locations, chooses one location because it matches last week's entry, and changes the underlying time record. It marks a contractor invoice payable after extracting the amount but not checking the vendor and approval. The payroll dashboard appears clean, yet no one can reconstruct which source the adjustments came from or whether the owner authorized them.
Good: A payroll Teammate compares this week's time entries against the submitted timesheets and the configured location data. It marks the employee's location as unresolved, shows the two conflicting records, identifies the manager who can confirm the work site, and keeps the current payroll value unchanged. It extracts the contractor invoice into a draft record with vendor, amount, date, and source attachment, but flags the missing approval. The payroll administrator resolves both items in the appropriate systems and reviews a refreshed packet before submission. The coworker records the decision and transaction references, not an unsupported claim that the work was “handled.”
The difference is structural. An instruction that says “ask before paying” helps explain the intended behavior, but it does not limit a broad payroll credential. Give preparation work read or draft authority where the provider supports it; reserve consequential changes and submission for the appropriate payroll role. For the general principle, see why a valid login is not permission for every action.
A recurring deadline creates a specific failure mode: a pending approval can become an urgent operational issue even when the technology is functioning perfectly. If the coworker waits quietly for a response, the person who expects to be paid may bear the cost. A responsible workflow treats timing as part of the job definition.
Work backward from the provider's actual submission deadline, including weekends, holidays, bank processing, and the company's own review buffer. These values vary by provider and payment method; do not copy a generic cutoff from an article. State the last safe time to accept routine source changes, the latest time to resolve exceptions, and the escalation path when a decision is still outstanding. A late item should never be silently omitted just because a scheduled run reached its next step.
Missing input: A timesheet, approved leave entry, or invoice is absent. Record what is missing, who owns it, and when it was requested. The coworker can chase the source internally, but should not turn absence into zero hours or invent a contractor payment. Some employee-pay issues may require prompt manual action; the payroll administrator must assess the applicable rules and provider options.
Conflicting input: Two systems disagree about hours, location, rate, or a one-time payment. Show both versions and their timestamps. The reviewer decides which record is authoritative and corrects the source of truth. Do not bury the conflict inside a model-generated average or a plausible-looking final figure.
Uncertain outcome: A correction was submitted, but the provider timed out or the response did not confirm acceptance. This is not permission to submit again. Check the provider's run status and transaction identifier before retrying. Keep the item open until its state is known, because a duplicate payment is worse than an honest unresolved flag. The same principle applies to task-level retry and action budgets.
The cutoff plan should specify who gets notified, how, and when. For example, the department manager owns missing hours before the internal review deadline; the payroll administrator owns provider-side corrections; the owner or designated backup receives an escalation if submission is at risk. These are illustrative roles, not a legal division of duties. Put real names and reachable backup contacts in the company's process.
A scheduled coworker can remind people, assemble evidence, and keep the exception queue current. It cannot decide that an unanswered message is approval. Nor should it keep sending reminders indefinitely after a missed deadline. At the cutoff, it should state precisely what is complete, what is blocked, what is already submitted, and which human must act next. The missed-run recovery pattern is relevant here: a retry after downtime must first reconcile what actually happened.
Start with one pay cycle in observation mode. The goal is not to automate submission in week one; it is to prove that preparation reduces search work without hiding exceptions or creating a new data exposure.
1. Map the existing run. Write down the source systems, payroll provider, pay-period boundaries, approval path, internal cutoff, provider deadline, and backup approver. Identify how a person currently discovers late hours, rate changes, and contractor invoices. Do not treat the current process as correct simply because it has worked before; note recurring corrections.
2. Define the Teammate's job in verbs. “Read submitted time entries, compare against approved schedule changes, and draft an exception packet” is a job. “Handle payroll” is not. Identify permitted reads, draft creation, internal notifications, and prohibited actions. Submission, bank-detail changes, pay-rate edits, and worker classification need their own authority and review path.
3. Restrict the data path. Payroll contains personal and financial information. Give the role only the employees, periods, and fields required for preparation. Check what the connector passes to the model provider, what is saved in transcripts, which staff can retrieve it, and how long it is retained. Use record references and masked summaries where the reviewer can open the original in the source system. An AI coworker with access to payroll should not also be the company's general marketing workspace.
4. Establish a source-of-truth rule. Specify which system owns time, rates, locations, approvals, invoices, and the final payroll ledger. When two sources disagree, the coworker reports the disagreement rather than choosing whichever value is easiest to retrieve. Record the source timestamp and period so yesterday's correct figure does not masquerade as today's.
5. Run a shadow comparison. During one real cycle, let the coworker prepare the packet without changing source records or submitting payroll. Compare its exception list with what the administrator finds manually. Count missed issues, false alarms, time spent investigating, and whether each flag has enough evidence for a decision. Do not use an invented accuracy percentage; measure your own process.
6. Test a deadline failure. Deliberately withhold a sample timesheet in a safe test or dry run, simulate a conflicting location, and simulate an ambiguous provider response. Confirm that the coworker escalates to the named person before the internal cutoff, does not write an assumed value, and does not blindly retry a possible submission. Test the backup approver too. A procedure that works only when the primary owner is online is not production-ready.
7. Expand one boundary at a time. If the packet is reliable, allow a narrow next action such as drafting internal reminder messages or creating draft entries, subject to the provider's supported permissions. Retest after changing the connector, payroll policy, model provider, or source system. Keep submission and payment authority separate unless the organization deliberately designs, documents, and tests a stronger control. More autonomy is a consequence of proven evidence, not a reward for a polished demo.
This pilot respects the worker as well as the business. A payroll mistake is not merely a failed automation metric; it can change someone's ability to pay rent. The measure of success is a correct, timely, reviewable run with fewer avoidable surprises, not the number of screens a coworker can click.
Q: Can AI run payroll automatically for a small business?
A: Some providers offer automation for defined payroll steps, but “automatic” does not remove the employer's responsibilities. Start by automating preparation and anomaly detection, check the provider's actual permissions, and keep a named person accountable for final review and submission.
Q: What is the difference between payroll preparation and payroll approval?
A: Preparation collects and compares records, identifies exceptions, and drafts a proposed run. Approval is an authorized decision to accept the values and initiate the provider's final action. Keep those separate in both the workflow and the connected account's permissions.
Q: What should happen when a timesheet is missing at the cutoff?
A: Escalate immediately to the payroll administrator with the worker, period, missing source, and deadline. Do not interpret missing data as zero hours. The administrator should determine the lawful and operational way to pay and correct the record under the applicable rules.
Q: Should an AI coworker have the owner's payroll login?
A: No broad shared login should be the default. Use a distinct identity with the narrowest supported permissions for the preparation role, and reserve submission or sensitive record changes for authorized payroll personnel. Test the effective permissions at the provider, not only in a prompt.
Q: How can we tell whether the pilot worked?
A: Compare its exception packet against the administrator's manual review over actual pay cycles. Track missed and false flags, investigation time, source evidence quality, cutoff escalations, and corrections after submission. A faster packet that misses critical issues is not an improvement.
Associates AI Teammates lets you define a persistent payroll-preparation Teammate with a clear role, connected systems, and human decision boundaries. If your team is ready to make recurring work easier to review without handing away the final judgment, view pricing and get started.
Written by
Founder, Associates AI
Mike is a self-taught technologist who has spent his career proving that unconventional thinking produces the most powerful solutions. He built Associates AI on the belief that every business — regardless of size — deserves AI that actually works for them: custom-built, fully managed, and getting smarter over time. When he's not building agent systems, he's finding the outside-of-the-box answer to problems that have existed for generations.
More from the blog
Google's new cross-runtime governance plans put an overlooked migration question in focus: when an A...
One innocent request can become a long chain of tool calls. BeyondTrust's new endpoint research make...
GitLab's new governance dashboard makes AI activity visible, but its documentation exposes a crucial...
Want to go deeper?
Get started today. Hire your first Teammate in minutes and put it to work on what you're reading about.
Get Started