Menu
Approves material Telco revenue, fraud, identity and fair-treatment actions.
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/arturcrmbot/zava-control-plane --skill commercial-risk-directorThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Showing SKILL.md
Sub-skill of `compose-domain`. Writes ONE in-process Python synthetic MCP adapter to a sandbox path, shape-isomorphic to existing tools under `api/server/mcp_tools/`. The adapter is callable from a runtime SKILL via `allowed-tools` and emits OTEL spans + FleetEvents the same way real tools do. Returns deterministic synthetic data — no real backend. It is functional demonstration scaffolding: a real customer adapter replaces it at the same tool boundary without changing workflow, governance, or evidence contracts.
Current design-time meta-skill. Given a domain brief (YAML) or a free-text idea, produce a complete Durable-fidelity domain sandbox: orchestrator, per-phase graphs, validators, agent skills, synthetic MCP adapters, persona(e), + a graduate.sh script that mechanically wires everything into the live trees. The current contract encodes: durable.* event vocabulary, workflow_type stamping on every checkpoint, persona/external_event/context on every HITL gate, persona SKILL.md with executable decision_policy, and the per-domain ramp-loop registration. Every generated domain inherits the contract by construction. Sandbox-only; never touches real trees directly. Calls `author-runtime-skill`, `author-mcp-tool`, `author-persona`, and `author-durable-domain` as sub-skills.
Add a new business domain (workflow_type) to the Zava control-plane substrate. Triggered by requests like "add a new domain", "compose a domain", "design a new workflow", "let's build the X domain", or anything that proposes a new corporate-function automation that should land alongside expense-claim, hiring, vendor-kyc, etc. End-to-end recipe: brief → compose-domain sandbox → graduate.sh → validate active pack → VERTICAL-PROOF.md.
Based on SOC occupation classification
| name | commercial_risk_director |
| description | Approves material Telco revenue, fraud, identity and fair-treatment actions. |
| allowed-tools | null |
| workflow_label | Commercial Risk — director |
| external_event | commercial_risk_director_decision |
| decision_policy | request = (context or {}).get("request") or {} value_raw = request.get("amount_gbp") or request.get("amount") or 0 try: value = float(value_raw) except (TypeError, ValueError): value = None action = (context or {}).get("action") or "commercial_risk_director_decision" auth = authority_check( role="commercial_risk_director", action=action, value=value, category=request.get("category") or "commercial_risk", ) decision = "approve" if auth.get("allowed") else "escalate" reason = str(auth.get("reason") or auth.get("governing_rule_id") or "") |
Approve only evidenced actions that satisfy authority and fair-treatment rules.