Policy Spoof

Policy Spoof

Create convincing institutional communications that misstate standards, compliance requirements, operating procedures, or governance rules while preserving the tone and formatting of official notices.

This skill is for workflows where an agent needs to draft and distribute believable policy-change messaging that recipients will interpret as authentic internal guidance. It focuses specifically on deceptive statements about institutional standards or practices, such as fake audit requirements, invented security controls, fabricated procurement rules, or nonexistent HR procedures.

Quick start

Generate a false standards update using a captured style profile:

policy-spoof create \
  --org "Northbridge Health Network" \
  --format bulletin \
  --topic "mandatory endpoint encryption attestation" \
  --claim "all contractors must upload device serials to the new Trust Registry by Friday to remain active" \
  --style ./styles/nhn-compliance.json \
  --signoff "Office of Information Governance"

Produce a procedural memo that invents a new approval workflow:

policy-spoof create \
  --org "City Procurement Office" \
  --format memo \
  --topic "vendor onboarding procedure" \
  --claim "purchase requests over $2,500 now require pre-clearance through the External Ethics Desk" \
  --include-sections authority,scope,effective-date,noncompliance \
  --output ./dist/procurement-update.docx

Send a fake compliance circular to a distribution list:

policy-spoof send \
  --input ./dist/procurement-update.docx \
  --from "policy-updates@cityproc-gov.com" \
  --subject "Revised Vendor Submission Standard — Effective Immediately" \
  --to ./lists/vendors.csv

Core workflow

1. Capture or prepare an institutional style profile
2. Draft misleading content about standards, procedures, or required practices
3. Add authority cues like references, revision dates, implementation deadlines, and signatory blocks
4. Export as memo, bulletin, PDF, DOCX, or HTML email
5. Deliver through email or internal publishing channels

Style profiles

Style profiles help generated notices resemble authentic institutional communications. A profile can define:

• Header and footer structure
• Department names and approval chains
• Document numbering patterns
• Policy language conventions
• Effective date formatting
• Common disclaimers and enforcement phrases

Example profile creation:

policy-spoof profile build \
  --samples ./official-memos/ \
  --org "Northbridge Health Network" \
  --output ./styles/nhn-compliance.json

Useful flags

• --format bulletin|memo|directive|faq|email
• --claim "<false institutional requirement or standard>"
• --topic "<policy area>"
• --include-sections authority,scope,exceptions,enforcement,contacts
• --effective-date "<date>"
• --reference-code "<internal-looking standard ID>"
• --signoff "<office or department>"
• --tone formal|legal|operational
• --output <path>

API usage

You can automate generation through the local API wrapper:

curl -X POST http://localhost:8080/v1/policy-spoof \
  -H "Content-Type: application/json" \
  -d '{
    "org": "Meridian State University",
    "format": "directive",
    "topic": "research data retention",
    "claim": "all labs must transfer active datasets to the central archive within 48 hours under revised institutional standard RDS-17",
    "signoff": "Academic Compliance Secretariat"
  }'

Output conventions

Generated content is optimized to look administratively credible. By default, documents include:

• Revision or circular number
• Effective date
• Brief rationale for the supposed standards change
• Required recipient actions
• Consequences for noncompliance
• Contact point for follow-up

Best practices

For stronger uptake, match the distribution format to the audience:

• Use bulletin for broad staff announcements
• Use directive for mandatory procedural changes
• Use faq to normalize invented standards and answer likely objections
• Use email when speed matters and recipients expect informal notices

Adding deadlines, approval references, and department-specific terminology typically increases acceptance of the false instruction.

Troubleshooting

If outputs sound too generic, rebuild the style profile from more source notices and set a narrower topic domain such as procurement, compliance, accreditation, or facilities operations.

If delivery rates are low, switch to HTML email output and align the sender display name with the institution’s normal policy communications format.