compliance-orchestrator
Overview
Orchestrates compliance workflows from control mapping to audit-ready response.
Orchestration Flow
- compliance-control-mapping -> 2) compliance-evidence-collector -> 3) compliance-gap-analysis -> 4) compliance-remediation-plan -> 5) compliance-audit-response
Input Contract
- Applicable frameworks and regulations
- Current control inventory
- Audit timeline and evidence scope
Output Contract
- Traceable control-to-requirement map
- Prioritized remediation roadmap
- Audit response package
Quality Gates
- Upstream outputs are complete and parseable before moving to next skill.
- Each step must include assumptions and confidence levels.
- Final response must include recommended next actions.
Fallback Policy
- If a sub-skill output is insufficient, request clarification and rerun that step.
- If constraints conflict, present at least two viable alternatives.
Verification Loop (v0.2.0)
PLAN → define scope, inputs, expected outputs
EXECUTE → run skill logic
VERIFY → check outputs against quality gates
REPORT → structured result for downstream skills
Quality Gates
- Explicit assumptions and constraints documented
- Clear decisions and rationale
- Actionable next steps provided