{
  "schema": "agent-harness/manifest.v1",
  "domain": "compliance-os",
  "skill_count": 9,
  "loop_defaults": {
    "max_attempts_per_task": 3,
    "max_loop_iterations": 12,
    "escalate_on": [
      "attempts_exhausted",
      "no_verification_available",
      "destructive_or_irreversible_action",
      "goal_drift_detected"
    ]
  },
  "skills": [
    {
      "name": "ai-act-readiness",
      "path": "compliance-os/skills/ai-act-readiness",
      "description": "/cs:ai-act-readiness <system> \u2014 EU AI Act 6-question forcing interrogation. Use during AI-system intake, before EU deployment, or during annual compliance refresh as Article 113 obligations phase in (2025-02-02 / 2025-08-02 / 2026-08-02 / 2027-08-02).",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "aims-audit",
      "path": "compliance-os/skills/aims-audit",
      "description": "/cs:aims-audit <scope> \u2014 ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "compliance-os",
      "path": "compliance-os/skills/compliance-os",
      "description": "Compliance OS \u2014 meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across multiple frameworks. Four decisions: (1) Given a company profile, which of the 12 supported frameworks apply (ISO 27001/13485/42001/14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR, NIST CSF 2.0, NIS2, HIPAA)? (2) Across selected frameworks, which controls overlap and how much evidence reuses? (3) For a given framework + scope, what does a realistic mock audit produce \u2014 drawing from the 205-scenario \u2026",
      "tools": [
        {
          "script": "compliance-os/skills/compliance-os/scripts/audit_simulator.py",
          "wired": true,
          "supports_sample": false,
          "verification": [
            {
              "cmd": "python3 compliance-os/skills/compliance-os/scripts/audit_simulator.py --help",
              "expect_exit": 0,
              "kind": "smoke"
            }
          ]
        },
        {
          "script": "compliance-os/skills/compliance-os/scripts/cross_framework_mapper.py",
          "wired": true,
          "supports_sample": false,
          "verification": [
            {
              "cmd": "python3 compliance-os/skills/compliance-os/scripts/cross_framework_mapper.py --help",
              "expect_exit": 0,
              "kind": "smoke"
            }
          ]
        },
        {
          "script": "compliance-os/skills/compliance-os/scripts/evidence_pool_generator.py",
          "wired": true,
          "supports_sample": false,
          "verification": [
            {
              "cmd": "python3 compliance-os/skills/compliance-os/scripts/evidence_pool_generator.py --help",
              "expect_exit": 0,
              "kind": "smoke"
            }
          ]
        },
        {
          "script": "compliance-os/skills/compliance-os/scripts/framework_selector.py",
          "wired": true,
          "supports_sample": false,
          "verification": [
            {
              "cmd": "python3 compliance-os/skills/compliance-os/scripts/framework_selector.py --help",
              "expect_exit": 0,
              "kind": "smoke"
            }
          ]
        }
      ],
      "agentic_signals": {
        "goal_intake": false,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": [
        "audit_simulation_methodology.md",
        "compliance_os_pattern.md",
        "cross_framework_overlap.md",
        "evidence_artifact_reuse_index.md",
        "evidence_management.md",
        "multi_framework_audit_playbook.md"
      ]
    },
    {
      "name": "compliance-readiness",
      "path": "compliance-os/skills/compliance-readiness",
      "description": "/cs:compliance-readiness <program> \u2014 Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification stage 1.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": false,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "fda-qsr-audit-prep",
      "path": "compliance-os/skills/fda-qsr-audit-prep",
      "description": "/cs:fda-qsr-audit-prep <scope> \u2014 FDA 21 CFR 820 (QSR / QMSR) audit 6-question forcing interrogation. Post-Feb 2026 substantially harmonized with ISO 13485. Use before annual internal QSR audit, pre-FDA-inspection readiness, or Form 483 response.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "gdpr-audit-prep",
      "path": "compliance-os/skills/gdpr-audit-prep",
      "description": "/cs:gdpr-audit-prep <scope> \u2014 GDPR audit 6-question Article-cited forcing interrogation. Use before annual internal GDPR review, post-breach internal audit, DPA investigation readiness, or acquisition due diligence.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "iso13485-audit-prep",
      "path": "compliance-os/skills/iso13485-audit-prep",
      "description": "/cs:iso13485-audit-prep <scope> \u2014 ISO 13485 QMS audit 6-question forcing interrogation. Design controls + CAPA + post-market focused. Use before Clause 8.2.4 internal audit, MDR / FDA QSR alignment review, or product-launch DHF closure audit.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": true,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "iso27001-audit-prep",
      "path": "compliance-os/skills/iso27001-audit-prep",
      "description": "/cs:iso27001-audit-prep <scope> \u2014 ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": false,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    },
    {
      "name": "soc2-audit-prep",
      "path": "compliance-os/skills/soc2-audit-prep",
      "description": "/cs:soc2-audit-prep <scope> \u2014 SOC 2 Type II readiness 6-question forcing interrogation. Observation-period focused. Use before Type II observation begins, mid-period checkpoint, or pre-field-test month-10 readiness.",
      "tools": [],
      "agentic_signals": {
        "goal_intake": true,
        "refusal_gate": false,
        "verification": false,
        "loop_discipline": false,
        "close_out": false
      },
      "references": []
    }
  ]
}
