A rule change doesn't rewrite last month
Policies are versioned. Change a meal window today and yesterday's shifts are still judged against the policy that was in force when they happened, not the one you just wrote.
The shift, hour by hour
Most clocks record a start and an end. The expensive part of a California shift is everything in between, and what a claim turns on is which policy was live on the day.
Location and device recorded on the punch, not on the timesheet afterwards.
The window opened at 13:00. Clementime watches it approach; it does not lock the door.
Inside the window. Nothing is owed, and the record says why.
A ten-hour shift opens a second window. Judged against the policy in force today, not the one written next quarter.
The shift closes against the policy version it began under.
Policies are versioned. Change a meal window today and yesterday's shifts are still judged against the policy that was in force when they happened, not the one you just wrote.
Timecard corrections, punch overrides and lifecycle exceptions each have their own queue and their own record, so an edit is visible as an edit rather than as a number that quietly changed.
A missed meal is flagged, recorded and surfaced to a manager. It is never a locked door in front of an employee who needs to start work, which is both what the law expects and what operators actually want.
The clock only ever offers the one action that makes sense next. There is no way to clock in twice or skip a break punch, so there is nothing to clean up later.
The employee gets an advisory prompt before a meal is due. The compliance record is built from the actual punches when the shift closes — and reviewed by a person. It warns; it never decides pay.
One hour accrued per 30 worked, a 40-hour annual usage cap, an 80-hour accrual cap, and 90 days after hire before leave can be used — as the policy defaults, and every one of them versioned so you can change it.
Up to 8 regular, 8 to 12 overtime, over 12 double-time, per day — then rolled into the pay period with PTO and sick from the ledger. Hours and identifiers go to payroll; pay is computed there.
A balance is built from every event behind it — accrual, use, carry-over — never a figure somebody can type over. Crediting the same accrual twice cannot happen.
The Manager Console updates itself every five seconds: who is on, the headline numbers, and a force clock-out that records its reason. Nobody has to remember to refresh anything.
It reads your coverage history and suggests how many people you will need at peak. It explains patterns; it never approves, blocks or adjusts anyone's time.