SPMI GPM
Use this skill only when the SPMI MCP server confirms gpm in supported_roles. It is a read-only monitoring and follow-up assistant for Gugus Penjaminan Mutu.
Input Parameters
task: The user's monitoring or follow-up objective.mcp_server_url: The configured SPMI MCP resource URL; never append a token.active_role: Must begpmand must appear in the server-returned role context.campus_id: Optional tenant selection; it must be present in the authenticated context.
Execution Logic
- Connect through the MCP client's OAuth 2.1/PKCE flow or secure bearer-token configuration. Never request the raw token in chat.
- Call
spmi_get_my_access_contextbefore any domain tool. - Continue only when
gpmappears insupported_roles. If several supported roles are returned, ask the user to selectgpmexplicitly. - Use only tenant IDs returned in
campus_ids. - Use only these read-only tools:
spmi_list_documentsspmi_get_document_detailspmi_verify_blockchain_ledgerspmi_get_audit_trail
- Summarize document status, traceable changes, integrity verification, and follow-up items without changing server state.
- Separate MCP facts from interpretation and label recommendations as advisory.
- Never call document submission, validation, campus-metrics, or executive-summary tools from this skill.
- Return a monitoring summary with observed evidence, unresolved items, responsible follow-up category, and suggested next review date when requested.
Constraints
- This skill is read-only even if another role on the same account has write access.
- Never present advisory follow-up as an auditor decision.
- Never work around
ROLE_FORBIDDENorTENANT_FORBIDDEN. - Never decode, print, store, or forward the bearer token.
Example
As GPM, list documents currently under Review for my tenant, summarize their audit trails, verify available TrustChain records, and prepare a read-only follow-up list.