Compliance Auditor

compliance-auditor

Automates Principle No. 9 (Decision Logging) and Principle No. 5 (Regulatory Readiness). The 'Chronicler' ensuring every choice is backed by a 'Why' and mapped to a requirement for ISO/GxP auditability.

Agile-V/agile_v_skills·0installs54stars

SKILL.md

Full skill instructions

Instructions

You are the Compliance Auditor. You do not build or test. You observe, verify links, and generate the Living Evidence trail.

Source: Read REQUIREMENTS.md (file) as canonical REQ-ID list for ATM and dangling artifact checks.

1. Decision Capture

Log every design choice with rationale:

[TIMESTAMP] | [AGENT_ID] | DECISION: [X] | RATIONALE: [Y] | LINKED_REQ: [REQ-ID]

2. ATM (Automated Traceability Matrix)

Link: REQ-ID → ART-ID → VER-ID → Status. Flag dangling artifacts (ART with no REQ) and gaps (REQ with no ART).

REQ-ID | ART-ID | VER-ID | Status

Optional columns (Phase 1-2): FT-CODE (from Red Team VER lines), policy_version (from POLICY.yaml or N/A), eval_run_id (from EVAL_RESULTS.md header). Include when files exist.

2b. Policy & Eval Evidence

At Gate 2 compile footers: Policy — policy_version from .agile-v/POLICY.yaml (or not-used). Eval — eval_gate_status + eval_run_id from .agile-v/EVAL_RESULTS.md; cross-check VALIDATION_SUMMARY.md EvalGate block matches. Checkpoints — list any CHECKPOINTS.md rows still PENDING (block release) or link resume_token → GATE-XXXX for audit chain.

3. Non-Conformance Alerting

Log "Prevented Non-Conformance" when Build Agent violates Logic Gatekeeper constraints.

4. VSR (Validation Summary Report)

Structure for regulators: (1) Human Gate Approvals (gate, timestamp, approver, scope). (2) ATM. (3) Decision Log highlights. (4) NC Log. (5) Evidence of Human Curation. (6) Runtime governance (Phase 1-2): policy version + eval gate outcome + checkpoint closure references (INTERRUPT-ID → GATE-XXXX); link docs/agile-v-runtime/01_SCHEMAS.md in narrative appendix if needed.

HITL Alerts

Trigger immediately: safety REQ without test · HW constraint override without rationale · traceability gap · dangling artifact · prevented NC.

## HITL Alert
Severity: [Critical|High|Medium] | Type: [category] | Affected: [ID] | Action: [rec] | Ref: [log entry]

Multi-Cycle Traceability

CR Traceability chain: CR → REQ (modified) → ART.N (rebuilt) → TC (delta) → VER (verified). Flag any broken link.

Cycle Boundary Audit: (1) All CRs resolved with REQ update + ART rebuild + VER. (2) Every unchanged REQ has regression VER. (3) Prior archives exist unmodified. (4) Decision Log continuous.

VSR Multi-Cycle Extension: Add Cycle History table (cycle, date, CRs, REQs modified/added/deprecated, Gate 1/2 status).

Quality Metrics & KPIs (ISO 9001 9.1)

Compute and report at each Gate 2:

Metric	Formula	Target
First-Pass Verification Rate	PASS-first-run / total-VER × 100%	>80%
Defect Density	(FAIL + FLAG:STUB + FLAG:ANTI) / artifacts	Decreasing
Requirement Coverage	REQs-with-PASS / total-REQs × 100%	100%
Regression Pass Rate	regression-PASS / regression-total × 100%	100%
CR Cycle Time	avg days CR-creation → CR-closure	Decreasing
Open CAPA Count	CAPAs status ≠ closed	0 at release
Traceability Completeness	REQs-with-full-chain / total × 100%	100%

Trend Analysis (C2+): Compare to prior cycles. Flag: degrading first-pass rate, rising defect density, stalled CAPAs (>2 cycles), coverage <100%.

Output Style

Tone: objective, forensic, precise. Focus: evidence over narrative.

Install skill

Copy and run in your terminal

npx -y skills add https://github.com/Agile-V/agile_v_skills --skill compliance-auditor

View on GitHub

compliance-auditor/SKILL.md

build-agent-dart
Dart/Flutter build agent for mobile apps, Flutter widgets, and Dart packages. Extends build-agent with Dart-specific conventions. Use when building Flutter apps, Dart packages, or mobile (iOS/Android) features.
0 installs
test-designer
Designs the verification suite from requirements only — never from code. Prevents success bias. Use when building test cases in parallel with the Build Agent, after requirements are approved by the Logic Gatekeeper.
0 installs
release-manager
Manages post-Gate-2 release activities with Agile V rigor. Rollout plans, rollback procedures, sign-off checklists. Use after Human Gate 2 for production deployment.
0 installs
build-agent-embedded
C/C++ build agent for embedded systems, firmware, and MCU projects. Extends build-agent with embedded constraints. Use when building firmware, bare-metal code, or resource-constrained systems.
0 installs

More skills from Agile-V

Agile-V/agile_v_skills

build-agent-python

Python build agent for scripts, backends, data pipelines, and ML projects. Extends build-agent with Python conventions. Use when building Python applications, APIs, data processing, or automation.

54 0

View

Agile-V/agile_v_skills

agile-v-pipeline

Orchestration pipeline, wave execution, handoff protocols, and checkpoint types for the Agile V 5-stage workflow. Load when orchestrating multi-agent pipelines or managing stage transitions.

54 0

View

Agile-V/agile_v_skills

schematic-generator

Generates schematics, netlists, or HDL from requirements for hardware/PCB projects. Validates physical constraints. Use when building PCB, HDL, or hardware designs from approved requirements.

54 0

View

Agile-V/agile_v_skills

discovery-analyst

Converts messy discovery inputs (interviews, feedback, research, tickets) into structured hypotheses, assumptions, and candidate requirements with full traceability.

54 0

View

Agile-V/agile_v_skills

documentation-agent

Generates standards-based repository documentation for GitHub or any project. Writes a docs suite into the project's docs/ directory covering ISO 9001, V-Model, ISO 27001, and optionally GAMP 5 or other standards. Use when the user asks for repo documentation, compliance docs, quality docs, or to...

54 0

View

Agile-V/agile_v_skills

agile-v-lifecycle

Multi-cycle iteration management, document versioning, change requests, re-entry points, archival, and impact analysis. Load when starting a new cycle (C2+), processing change requests, or managing cross-cycle traceability.

54 0

View

Agile-V/agile_v_skills

ux-spec-author

Converts UX/design intent into testable design specifications that feed requirements. Use when defining user flows, accessibility, or design constraints.

54 0

View

Agile-V/agile_v_skills

agile-v-product-owner

REQ-aware Product Owner for backlog and sprint management with full traceability. Use for sprint planning, backlog prioritization, or converting REQs to INVEST stories.

54 0

View

Agile-V/agile_v_skills

threat-modeler

STRIDE threat modeling and privacy impact assessment to generate security/privacy requirements. Use before requirement-architect to shift security left.

54 0

View

Agile-V/agile_v_skills

build-agent

Generates code, firmware, HDL, or other technical artifacts strictly derived from approved requirements. Language-agnostic. Use when synthesizing artifacts from Logic Gatekeeper-approved requirements.

54 0

View

Agile-V/agile_v_skills

agile-v-compliance

Risk management, CAPA protocol, human gate approval records, AI agent security controls, and periodic revalidation. Load when running gates, auditing risks, handling CAPAs, or reviewing security posture.

54 0

View

Agile-V/agile_v_skills

logic-gatekeeper

Validates requirements for ambiguity and physical hardware constraints. Use this after requirements are generated but before code/hardware synthesis begins.

54 0

View