Compliance Checker

Compliance Checker — Compliance Verification Pipeline

Systematically diagnoses an organization's law and regulation compliance status, analyzes gaps, and develops actionable remediation plans.

Execution Mode

Agent Team — 4 agents communicate directly via SendMessage and cross-verify each other's work.

Agent Composition

Workflow

Phase 1: Preparation (Performed Directly by Orchestrator)

1. Extract from user input:
   • Target Organization/Service: Business type and scale of the audit target
   • Industry/Sector: Finance, IT, Healthcare, Manufacturing, Education, etc.
   • Regulatory Domain (optional): Personal data, finance, labor, environment, etc.
   • Existing Materials (optional): Policy documents, compliance reports, org charts, etc.
   • Focus Areas (optional): Specific law or specific domain
2. Create the _workspace/ directory in the project root
3. Organize the input and save to _workspace/00_input.md
4. If existing materials are available, copy to _workspace/ and utilize for the relevant phase
5. Determine the execution mode based on the requested scope

Phase 2: Team Assembly and Execution

Inter-agent Communication Flow:

• law-mapper completes -> Delivers obligation checklist to status-auditor, mapping original to gap-analyst
• status-auditor completes -> Delivers compliance status to gap-analyst, existing infrastructure info to remediation-planner
• gap-analyst completes -> Delivers priority matrix and root cause analysis to remediation-planner
• remediation-planner cross-verifies logical consistency across all deliverables when writing the final report

Phase 3: Integration and Final Deliverables

1. Review all files in _workspace/
2. Verify that the remediation plan's comprehensive opinion is consistent with law mapping, status audit, and gap analysis
3. Report the final summary to the user:
   • Law Mapping Report — 01_law_mapping.md
   • Status Audit Report — 02_status_audit.md
   • Gap Analysis Report — 03_gap_analysis.md
   • Remediation Plan — 04_remediation_plan.md

Modes by Request Scope

Using Existing Files: If the user provides existing law mapping, status audit, or other materials, copy them to the appropriate numbered position in _workspace/ and skip that phase's agent.

Data Transfer Protocol

File naming convention: {order}_{agent}_{deliverable}.{extension}

Error Handling

Test Scenarios

Normal Flow

Prompt: "Run a full check on our online shopping mall's Personal Information Protection Act compliance." Expected Results:

• Law Mapping: Maps applicable laws including Personal Information Protection Act, E-Commerce Act, Information and Communications Network Act
• Status Audit: Compliance status for each obligation including personal data collection, use, provision, destruction
• Gap Analysis: Risk grade for each non-compliant item, 5x5 risk matrix
• Remediation Plan: Short/mid/long-term roadmap, monitoring KPIs

Partial Flow

Prompt: "List the labor-related laws applicable to our company. We're a 50-person IT company." Expected Results:

• Switches to law mapping mode (law-mapper only)
• Lists applicable laws including Labor Standards Act, Occupational Safety and Health Act, Equal Employment Act
• Maps obligations by clause

Error Flow

Prompt: "Check our regulatory compliance, we're a financial company but I don't know the details." Expected Results:

• Full pipeline execution, comprehensively maps financial industry regulations
• Status audit assumes general financial company standards, notes "assumption-based audit"
• Final report includes "recommend re-running gap analysis upon actual status verification"

Agent Extension Skills