compliance▌

Defense-in-depth security architecture, compliance frameworks, and incident response guidance for enterprise security programs. \n \n Covers six-phase security lifecycle: assess, design, implement, monitor, respond, and audit—with decision frameworks for risk assessment, control selection, compliance framework choice, and vulnerability prioritization \n Addresses nine core security domains including IAM, network security, data protection, application security, cloud security, endpoint security,

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Verifies code implements exactly what documentation specifies for blockchain audits. \n \n Performs deterministic, line-by-line semantic analysis of code against specification documents, whitepapers, or design docs to identify gaps and misalignments \n Extracts specification intent and code behavior into structured intermediate representations (Spec-IR, Code-IR, Alignment-IR) with full traceability and confidence scores \n Classifies divergences by severity (critical, high, medium, low) with evi

WCAG 2.2 compliance patterns for keyboard navigation, screen readers, mobile accessibility, and inclusive design. \n \n Covers WCAG 2.2 Levels A, AA, and AAA with specific success criteria, color contrast requirements (4.5:1 for normal text, 3:1 for large text), and minimum touch target sizing (44x44px) \n Includes five core implementation patterns: accessible buttons with focus indicators, modal dialogs with focus trapping, forms with error announcements, skip navigation links, and live regions

Automated compliance verification and enforcement for AI tools against 11 mandatory P0 rules covering auth, security, cost tracking, and logging. \n \n Verifies 11 P0 rules across four domains (Security 40pts, Auth 25pts, Cost 20pts, Logging 15pts) with quantitative compliance scoring and deploy gate verdicts (Green/Yellow/Red) \n Three execution modes: quick static scan via grep/glob patterns, full verification with evidence collection, and guided improvement with fix suggestions and re-verific

Master PCI DSS (Payment Card Industry Data Security Standard) compliance for secure payment processing and handling of cardholder data.

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.

税務調査への備え、または優良な電子帳簿の要件充足状況を診断するスキル。 電子帳簿保存法施行規則第5条第5項（優良な電子帳簿の要件）に基づき、 shinkoku の帳簿データが要件を満たしているかを自動チェックする。

Implement PCI DSS compliance requirements for secure payment card handling. \n \n Covers all 12 core PCI DSS requirements across network security, data protection, access control, monitoring, and policy \n Provides practical code examples for tokenization (both processor-based and custom), encryption at rest and in transit, and audit logging \n Includes data minimization rules specifying what card data can and cannot be stored, plus Luhn validation for card numbers \n Outlines compliance levels