☕ This Week’s Focus
Oracle shipped the AI socket. Your governance is still a shrug.
PeopleTools 8.63 is generally available on OCI. Sasank Vemana put the AI pieces in writing on July 29: Natural Language Search Service, Model Context Protocol (MCP) server support, and Application Designer AI Assist. Mike Krajicek said the quiet part on camera — Oracle is not handing anyone a finished assistant. You supply the model, the subscription, and the security review.
Most shops will still treat “AI ready” as an upgrade checkbox. That is how payroll data ends up in a prompt log nobody owns.
Let’s get into it.
🤖 8.63 Gave You Plumbing. Not Permission.
🔗 Oracle releases PeopleTools 8.63 on OCI (Oracle / Sasank Vemana) https://blogs.oracle.com/peoplesoft/peopletools-863-generally-available
July 29, 2026. Available on OCI via PeopleSoft Cloud Manager Image 22. On-premises “to follow soon.” The AI line that matters: Natural Language Search Service returns secured PeopleSoft Search results through a REST API. MCP server support gives AI agents “a standards-based way to interact with PeopleSoft through delivered and customer-defined APIs.” Application Designer AI Assist explains code, suggests improvements, troubleshoots issues, generates code, and drafts documentation-style summaries.
Also in the same post: Semantic Search, Typo Tolerance, SAML 2.0, TOTP two-factor, Log Analyzer, Customization Groups, webhooks, Middleware DPK Builder, PeopleTools container images.
My read: Three AI surfaces, one governance problem. Search, App Designer chat, and MCP all move PeopleSoft context toward a model you choose. “Preserving PeopleSoft security and user context” is the claim. The artifact you need is still missing: which data classes may leave the building, which LLM is approved, and who can turn the socket on.
🔗 What’s New in PeopleTools 8.63 (Full Feature Breakdown) (PeopleSoft Career / Derek Tomei) https://blog.peoplesoftcareer.com/whats-new-in-peopletools-8-63/
Tomei’s walkthrough of what Oracle actually shipped versus what shops invent. Mike Krajicek on camera: “Rather than introducing an isolated solution, we’re providing usable components that customers can combine with their AI models and services of their choice.” Three foundation pieces: Chat UI, Natural Language Search Service, MCP server. App Designer Code Assist is Python-based, with working samples for Cline and Aider. The same metadata APIs surface as MCP tools outside App Designer.
The “magic button” is the customer-advisory-board feature: configure it beside a long text field, call an application package, send text to your own LLM, drop the rewrite back on the page — no page customization.
My read: “Nothing answers a question on day one without configuration” is the useful sentence. Configuration without a data-classification answer is just a faster path to a compliance finding.
🔗 Oracle PeopleTools 8.63: AI, Security, and Upgrade Planning Guide (SMACT Works) https://www.smactworks.com/insights/blogs/2026/08/peopletools-8-63-guide.html
August 3, 2026. Hands-on framing after a Cloud Manager upgrade from 8.62 to 8.63 in their COE lab. Same three AI pieces. Explicit guidance: establish LLM selection and data governance before enabling AI Assist or exposing PeopleSoft data through MCP. SAML 2.0 covers IdP-initiated and SP-initiated flows. TOTP can be invoked via API for specific transactions (direct deposit, SSN lookup), not only at sign-on.
My read: Their three starting questions are the right order: where is security exposure highest, where is search friction costing time, and what governance must exist before AI touches production data. Reverse that order and you demo the socket before you own the blast radius.
🔐 The Patch Calendar Did Not Pause for AI
🔗 Oracle Critical Security Patch Update Advisory — August 2026 (Oracle) https://www.oracle.com/security-alerts/cspuaug2026.html
Still the live August advisory. Rev 4 as of September 4, 2026 (product-name cleanup for Clusterware). Headline number on the page: 943 new security patches across the listed product families. PeopleSoft rows still include PeopleSoft Enterprise PeopleTools, versions 8.61–8.63, plus Common Application Objects and FIN Common Objects. Oracle VM VirtualBox 7.2.14 remains on the list.
Next four security Tuesdays, from the same advisory and Oracle’s security-alerts index: 15 September 2026 (CSPU), 20 October 2026 (CPU), 17 November 2026 (CSPU), 15 December 2026 (CSPU). Pre-release for the September CSPU is due the Thursday before — 11 September.
🔗 Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins (Oracle) https://www.oracle.com/security-alerts/
Confirms the CSPU cadence and the next four dates. August 2026 CSPU is listed as Rev 4, 4 September 2026.
My read: Last week the hypervisor under your PUM was the story. This week the calendar is the story. Sep 15 lands nine days after this Digest. If your CAB still treats CSPU as optional between quarterly CPUs, you are inventing a patch policy Oracle already replaced.
💸 IRIS Will Reject the Name Field You Never Separated
🔗 Preparing PeopleSoft Suppliers for 2026 1099 Reporting (Oracle / Alicia Kinsey) https://blogs.oracle.com/peoplesoft/preparing-peoplesoft-suppliers-for-2026-1099-reporting
August 13, 2026. For suppliers marked for withholding with TIN Type SSN, populate Withholding Name 1 = First Name and Withholding Name 2 = Last Name on a new effective-dated address row. IRIS requires first and last names in separate fields for SSN filers. Delivered review SQL against PS_AP_TININQ_VW where TIN_TYPE = 'S'. Bulk path: ExcelToCI with VNDR_ID_EXCEL. After update, TIN Match Status resets to New — rerun TIN Matching. Exception query: AP_TIN_STATUS_CD <> 'M'. Bookmark KB878101.
🔗 IRS FIRE to IRIS: What PeopleSoft Customers Need to Know for 2026 Filings (Oracle / Alicia Kinsey) https://blogs.oracle.com/peoplesoft/irs-fire-to-iris-what-peoplesoft-customers-need-to-know-for-2026-filings
Mandatory for tax year 2026 filings (submitted in 2027). FIRE TCC does not transfer. New IRIS TCC through the IRS Taxpayer Portal; separate codes for A2A and CSV. Portal/CSV cap: 250 records per file. A2A needs JWK plus IRS API Client ID, IRIS ATS testing, and PeopleTools floors with PUM 56: 8.62.07+, 8.61.18+, or 8.60.23+ plus POC 38875082-01. Reporting threshold moves from $600 to $2,000 for most 1099 filings. TCC application: at least 45 days, two responsible officials with ID.me.
My read: This is not a January surprise. It is a supplier-master cleanup you can finish in Q3. Waiting for Image 56 to start the TCC application is how you invent a filing-season outage.
🧰 Calendar Reminder: 26-C Is Still September 30
🔗 PeopleSoft Payroll for North America Tax Update 26-C Delivery Moves to September (Oracle / Anne Leung) https://blogs.oracle.com/peoplesoft/peoplesoft-payroll-for-north-america-tax-update-26-c-delivery-moves-to-september
August 20, 2026. Tax Update 26-C targeted for Wednesday, September 30, 2026 via the HCM Weekly PRP. HCM Image 56 (November target) carries Tax Update 26-D (first year-end set). Weekly HCM PRPs continue through December 2026 and January 2027. Bookmark MOS FAQ2322.
My read: Same finding as Ed.34. Images slow down; weekly PRPs carry the legally dated work. If your change calendar only tracks Images, 26-C arrives as a Wednesday surprise.
💬 Aaron’s Take
Oracle did not hide the boundary. 8.63 is enablement. Fusion gets the agent product. PeopleSoft gets the socket. Three concrete things this week:
Write the AI data map before anyone enables MCP or AI Assist. Which record groups / search indexes / App Designer projects may leave the tenancy, which LLM is approved, who owns the prompt log, and who can flip the feature on. If that document does not exist, you do not have AI readiness. You have a demo.
Put Sep 15 CSPU on the CAB agenda now. Pre-release lands ~Sep 11. August is still at Rev 4 with PeopleTools 8.61–8.63 listed. Treat monthly CSPU as the new floor, not optional homework between October’s CPU.
Start the IRIS TCC and SSN withholding-name cleanup this week. 45-day TCC clock. ExcelToCI on
VNDR_ID_EXCELfor NAME1_WTHD / NAME2_WTHD. Rerun TIN Matching. Bookmark KB878101.Thursday is five questions to ask before you trust an AI feature with ERP data — before the socket becomes a production egress path.
This is not a “PeopleSoft can’t do AI” problem. It is a governance-latency problem. The vendor shipped the interface. Your shop still owes the rules.
🌐 Join the Community
Subscribe to PeopleSoft Cloud for the Monday Digest and Thursday practitioner posts — no vendor spin, just what changed and what to do about it.
✅ Monday: what moved in the PeopleSoft, Oracle and ERP world, with a read on why it matters ✅ Thursday: five verifiable actions you can run this week, free, every week ✅ Written by a practitioner who still has to make the change window