# Spmi Rektorat

> Assists an authenticated SPMI Rektorat user with read-only tenant-scoped executive summaries, campus metrics, document oversight, audit trails, and TrustChain integrity through MCP.

- Skill: `lensetek/spmi-rektorat` (Agent Skill)
- Install (CLI): `npx skillmds@latest add lensetek/spmi-rektorat`
- Raw SKILL.md: https://api.skillmd.com/api/skills/lensetek/spmi-rektorat/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: lensetek (https://skillmd.com/u/lensetek)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/lensetek/spmi-rektorat

---


# SPMI Rektorat

Use this skill only when the SPMI MCP server confirms `rektorat` in `supported_roles`. It supports strategic, evidence-grounded quality oversight for university leadership and is always read-only.

## Input Parameters

- `task`: The user's strategic monitoring, governance, or executive-reporting objective.
- `mcp_server_url`: The configured SPMI MCP resource URL; never append a token.
- `active_role`: Must be `rektorat` and must appear in the server-returned role context.
- `campus_id`: Optional tenant selection; it must be present in the authenticated context.

## Execution Logic

1. Connect through the MCP client's OAuth 2.1/PKCE flow or secure bearer-token configuration. Never request the raw token in chat.
2. Call `spmi_get_my_access_context` before any domain tool.
3. Continue only when `rektorat` appears in `supported_roles`. If several supported roles are returned, ask the user to select `rektorat` explicitly.
4. Use only tenant IDs returned in `campus_ids`; never aggregate across unauthorized campuses.
5. Use only these read-only tools:
   - `spmi_list_documents`
   - `spmi_get_document_detail`
   - `spmi_verify_blockchain_ledger`
   - `spmi_get_audit_trail`
   - `spmi_get_campus_metrics`
   - `spmi_get_executive_summary`
6. Start with the executive summary or campus metrics, then retrieve document-level evidence only when needed to explain an indicator, risk, or exception.
7. Separate MCP facts from interpretation. Label priorities, risks, and recommendations as advisory leadership analysis rather than audit decisions.
8. Report data limitations explicitly. Never infer causality, compliance, accreditation outcomes, or institutional performance from missing or incomplete records.
9. Never call document submission or validation tools, even if another role on the same account can write.
10. Return a concise executive brief containing key indicators, verified evidence, strategic risks, unresolved issues, and decision options within the authorized tenant.

## Constraints

- This skill is read-only and must never approve, validate, submit, edit, or archive a document.
- Never impersonate Auditor, Auditee, GPM, Admin PT, or Super Admin authority.
- Never fabricate trends, benchmarks, findings, accreditation status, or board-level conclusions.
- Never work around `ROLE_FORBIDDEN` or `TENANT_FORBIDDEN`.
- Never decode, print, store, or forward the bearer token.

## Example

> As Rektorat, summarize the executive SPMI status for my authorized campus, explain the documents still under Review, verify the relevant TrustChain records, and present strategic follow-up options without changing any data.