OloLand Compliance Hooks — Setup

This plugin populates the empty hooks/hooks.json scaffold that Anthropic's vertical finance plugins (private-equity, financial-analysis, investment-banking, equity-research, wealth-management) ship with.

What ships out of the box

• PreToolUse → MNPI Guard (Bash, Write, Edit, MultiEdit). Blocks tool calls whose input mentions material non-public information patterns without a # mnpi:cleared marker.
• PostToolUse → Citation Enforcer (matches mcp__ololand__generate_investment_memo, generate_cim, export_deal_dossier, plus all Write/Edit/MultiEdit). Scans for $-amounts, %, and multiples without an adjacent citation. Warns by default; set OLOLAND_CITATION_BLOCK=1 to upgrade to a hard deny.
• PostToolUse → Provenance Writeback. Appends NDJSON to ~/.ololand/provenance/YYYY-MM-DD.ndjson after every generative tool call. The ledger stays local; server-side MCP rail auditing is authoritative for OloLand tool calls.
• Pre + PostToolUse → Audit Log (matches all mcp__ololand__*). Mirrors every OloLand MCP call into ~/.ololand/audit/YYYY-MM-DD.ndjson with phase, tool name, and a 2KB payload head.
• SessionStart → Banner. Confirms hooks are armed and surfaces the env vars worth setting.

Why this exists

Anthropic's private-equity/hooks/hooks.json ships as []. Same for the other four vertical finance plugins. There is no compliance hook, no citation enforcement, no provenance writeback, no MNPI guard. For a regulated buy-side workflow this is unacceptable — you cannot defend a number to the IC if you cannot prove what ran, what it was sourced from, or that no MNPI leaked into a prompt.

Environment variables

Local logs

Both ledgers live in ~/.ololand/:

~/.ololand/audit/YYYY-MM-DD.ndjson         # every mcp__ololand__* call
~/.ololand/provenance/YYYY-MM-DD.ndjson    # every generative output

Inspect with jq -c '.' ~/.ololand/provenance/$(date -u +%Y-%m-%d).ndjson. The OloLand MCP rail separately records server-side tool-call audit events.

Cursor / Grok Bot

Cursor and Grok Bot do not execute Claude PreToolUse / PostToolUse matchers. Do not claim the MNPI guard, citation enforcer, or local NDJSON ledgers are armed on those hosts. A SessionStart banner may still run from the Cursor-format hooks file. For Cursor / Grok Bot, treat this skill as an explicit, user-invoked review:

1. Confirm the user's authorized scope and whether the material may contain MNPI.

If authorization is unclear, stop and request an authorized human review. A # mnpi:cleared marker does not establish permission.

1. Review supplied claims, figures, and citations against accessible source

documents. Preserve document/page references and label unverified claims. Never invent citations or turn missing evidence into a pass.

1. Server-side MCP rail auditing remains authoritative for calls the OloLand

server actually handled. This review does not write ~/.ololand/audit or ~/.ololand/provenance ledgers unless the user asks you to append them.

Composing with other plugins

This plugin is designed to run alongside ololand-dd, Anthropic's vertical finance plugins, and any custom plugin a firm installs. On Claude, hooks compose additively — multiple plugins' PreToolUse matchers all run for the same event. On Cursor / Grok Bot, compose by installing the plugins and running this explicit review skill.

Troubleshooting

• Hooks not firing: confirm claude plugin list shows ololand-compliance-hooks enabled. Run bash ~/.claude/plugins/cache/ololand-compliance-hooks/*/scripts/mnpi_guard.sh < /dev/null to test the script directly.
• Citation enforcer false positives: the regex looks for $/%/x patterns without an inline citation. If your output has trailing footnotes instead of inline citations, the warning is expected; the enforcer warns rather than blocks by default for exactly this reason.
• Audit log too noisy: rotate or compress per-day; the file is NDJSON and append-only.