Semantic Policy Audit

Quick Index (Action-Routed)

Read First (All Actions)

1. Mission
2. Trigger Rule
3. Scope Boundary

Action Modules (Read As Needed)

1. Performing intent-level audits:

• Audit Dimensions
• Audit Workflow

1. Reporting compliance gaps:

• Output Contract

Mission

Detect policy drift that passes simple text checks but fails intent-level correctness.

Trigger Rule

Use this skill when:

1. policy compliance confidence is important
2. tasks are high-risk or multi-skill
3. governance artifacts exist but applicability is uncertain
4. user requests strict audit/compliance review

Scope Boundary

This skill audits semantic correctness.

Use Governance Enforcement for:

1. mechanical/script-based validation execution

Audit Dimensions

1. intent-to-skill alignment:

• requested task intent matches selected skills

1. gate applicability alignment:

• required/conditional gates are actually appropriate

1. declaration-to-execution alignment:

• startup declaration reflects true execution path

1. status-to-evidence alignment:

• artifacts claim only what evidence supports

1. policy conflict detection:

• identify contradictory instructions across policy docs/skills

Audit Workflow

1. ingest task intent, selected skills, governance artifacts, and key docs
2. derive expected skills/gates from intent heuristics
3. compare expected vs declared/applied
4. classify gaps:

• missing_skill
• extra_skill
• missing_gate
• misapplied_gate
• evidence_mismatch
• policy_conflict

1. provide corrective actions with minimal disruption

Output Contract

When applying this skill, provide:

1. expected-vs-observed matrix
2. gap classification list
3. severity per gap (low/medium/high)
4. remediation plan and residual risk

Related Skills

• Skill Governance: source policy and risk model.
• Governance Enforcement: executes validator scripts.
• Thoroughly Rate Review: weighted scoring when audit results need a formal score.