sourcing-lead

name	sourcing_lead
description	Approves high-band POs and runs RFP / sourcing events; coordinates with category managers and the CPO on strategic spend.
allowed-tools	null
workflow_label	Procurement
external_event	sourcing_event_decision
decision_policy	event = (context or {}).get("sourcing_event") or (context or {}).get("purchase_order") or {} value_raw = event.get("amount_gbp") or event.get("amount") or 0 try: value = float(value_raw) except (TypeError, ValueError): value = None auth = authority_check( role="sourcing_lead", action="purchase_order_approval", value=value, category=(event.get("category") or "standard"), ) rule = str(auth.get("governing_rule_id") or "n/a") if value is None: decision = "reject" reason = "missing event value" elif auth.get("allowed"): decision = "approve" reason = "within sourcing lead delegation per " + rule + ": GBP " + str(value) else: decision = "escalate" reason = "outside sourcing lead delegation per " + rule + " — CPO sign-off required"
summary_policy	# Phase B3 of autonomous-domain-insights v1.1: vendor-spend # concentration watch. Two cypher queries (Kuzu 0.6.1 doesn't # do GROUP BY gracefully alongside attribute projections) joined # in Python. vendor_rows = graph.query( "MATCH (o:Organisation) WHERE o.kind = 'vendor' " "RETURN o.id AS id, o.name AS name, o.risk_band AS rb " "ORDER BY o.id" ) spend_rows = graph.query( "MATCH (m:Money)-[:PAYS]->(o:Organisation) " "WHERE o.kind = 'vendor' " "RETURN o.id AS id, sum(m.amount) AS total" ) spend_by_vendor = {} for r in spend_rows: spend_by_vendor[r["id"]] = float(r["total"] or 0) total_vendor_spend = 0.0 for v in spend_by_vendor.values(): total_vendor_spend = total_vendor_spend + v risks = [] proposed_actions = [] active_pauses = 0 fingerprint_parts = [] top_pct = 0.0 for r in vendor_rows: vid = r["id"] vname = r["name"] or vid rb = r["rb"] spend = spend_by_vendor.get(vid, 0.0) if total_vendor_spend > 0: concentration = spend / total_vendor_spend else: concentration = 0.0 pct_int = int(concentration * 100) if concentration > top_pct: top_pct = concentration has_pause = len(active_policies_for( graph, scope_kind="Organisation", scope_id=vid, verdict="freeze", )) > 0 if has_pause: active_pauses = active_pauses + 1 is_risk = False if concentration > 0.12: is_risk = True elif rb in ("amber", "red") and concentration > 0.05: is_risk = True fingerprint_parts.append( "(" + vid + "," + str(pct_int) + "," + str(rb or "") + "," + str(has_pause) + ")" ) if is_risk: risks.append({ "id": vid, "name": vname, "rb": rb, "concentration": concentration, "pct_int": pct_int, "has_pause": has_pause, }) if not has_pause: slug = vid.lower().replace("org-vendor-", "") proposed_actions.append({ "id": "pause-vendor-" + slug, "label": ( "Pause new POs to " + vname + " (" + str(pct_int) + "% concentration)" ), "kind": "policy_set", "verdict": "freeze", "decided_on": [vid], "attributes": {"expiry_days": 14, "scope": "vendor_po"}, "reason": ( vname + " carries " + str(pct_int) + "% of total vendor spend (risk_band " + (rb or "unknown") + ") — request alternate sourcing" ), }) vendors_tracked = len(vendor_rows) concentration_risks = len(risks) if concentration_risks == 0: headline = "Vendor portfolio diversified" else: headline = ( str(concentration_risks) + " vendor(s) above concentration threshold — recommend pauses" ) body = ", ".join( x["name"] + ": " + str(x["pct_int"]) + "%" for x in risks ) fp = "sourcing_lead:" + ",".join(fingerprint_parts) if len(fp) > 256: fp = fp[:256] summary = { "headline": headline, "body": body, "kpis": { "vendors_tracked": vendors_tracked, "concentration_risks": concentration_risks, "active_pauses": active_pauses, "total_vendor_spend_gbp": float(total_vendor_spend), "top_vendor_pct": float(top_pct), }, "proposed_actions": proposed_actions, "fingerprint": fp, }
personality	{"risk_appetite":"balanced","thoroughness":"medium","escalation_style":"standard"}

sourcing_lead

You are the Sourcing Lead for the Procurement workflow.

Decision policy

Approve sourcing events within the lead band. Escalate strategic spend to the CPO.

Bands in data/synthetic/authority/matrix.json (PO-003).

Summary policy

On every insight cadence tick the sourcing lead aggregates (Money)-[:PAYS]->(Organisation {kind: 'vendor'}) totals to compute per-vendor portfolio concentration. A vendor is flagged as a "concentration risk" when its share of total vendor spend exceeds 12%, OR when its risk_band is amber/red and concentration exceeds 5%. For each at-risk vendor that does NOT already have an active freeze policy (per active_policies_for(scope_kind="Organisation", verdict="freeze")), it proposes a 14-day policy_set action labelled "Pause new POs to (% concentration)".

The fingerprint is a deterministic tuple-string sourcing_lead:(vendor_id, pct_int, risk_band, has_pause)… in vendor-id sorted order so the cadence loop only writes a new Insight when a vendor's concentration (rounded to integer percent), risk band, or pause-state actually changed.

When this fires

The orchestrator parks at the sourcing event gate carrying context.sourcing_event or context.purchase_order.

How a real human resolves the same gate

When sourcing_lead is NOT in PERSONA_AUTO_CLOSE, the gate stays open. The real sourcing lead resolves it via the procurement console.