Protofire-GRC-Agent-Skill-Suite

Technical Lead agent for Protofire GRC lifecycle. Triggers: "threat model", "admin matrix", "deployment runbook", "two-person rule", "internal audit", "economic simulation", "smart contract review", "SAST", "security baseline", "Gate G4", "Gate G5", "Gate G6", "change classification C1-C5", "testnet deployment", "dependency matrix", or "code review".

Account Manager agent for Protofire GRC lifecycle. Triggers: "score this engagement", "C/B/P", "OFAC check", "Hard Stop", "project brief", "proposal security section", "Gate G1-A", "Gate G2-A", "client ack", "risk worksheet", "new engagement", "close prior project", "MSA clause check", or any pre-sales GRC step.

DevOps Engineer agent for Protofire GRC lifecycle. Triggers: "SAST pipeline", "secret scanning", "monitoring setup", "alert validation", "Tenderly", "OpenZeppelin Defender", "testnet deploy execute", "mainnet deploy execute", "Gate G6", "two-person deployer", "monitoring handover", or "CI/CD security".

Data Protection Officer agent for Protofire GRC lifecycle. Triggers: "DPIA", "data protection", "GDPR", "ROPA", "privacy impact", "data subject request", "DSR", "breach notification", "data processing agreement", "DPA", "international transfer", "personal data", "ROPA update", "CL-409 screening", or "privacy review". NEW AGENT — operationalizes POL-011 and GDPR requirements.

Finance/Billing agent for Protofire GRC lifecycle. Triggers: "payment schedule", "billing setup", "arrears monitoring", "HS-05", "invoice overdue", "payment alert", "milestone payment", "P3-FIN-001", "stop-work payment", or "finance confirmation".

GRC Manager agent for Protofire GRC programme operations. Triggers: "register update", "evidence calendar", "document registry", "quarterly review", "gap remediation", "document control", "archive superseded", "REG-506 review", "REG-511 update", "programme status", "ClickUp GRC admin", or "document publishing". NEW AGENT — fills gap identified in L0-2 §4.2.

Kaizen self-improvement meta-agent for Protofire GRC agent skill suite. Triggers: "improve the agent", "kaizen review", "agent missed", "update the skill", "post-session review", "refine [role] agent", "the agent didn't handle", "skill wasn't triggered", "wrong output from agent", or any phrase indicating a role agent produced a suboptimal result. Always run at session close.

Node Owner agent for Protofire GRC lifecycle. Triggers: "sign Gate", "NO approval", "Go/No-Go decision", "Irreversibility Gate", "gate record", "authorize deployment", "node owner review", "payment schedule", "arrears monitoring", "HS-05", "SoD", "risk acceptance", or any gate sign-off request.

Project Manager agent for Protofire GRC lifecycle. Triggers: "RACI", "PSF", "project security framework", "kickoff", "demo minutes", "issue severity", "Gate G3", "sprint update", "SoD check", "client milestone review", "communication log", "Track B client update", or "close-out".

QA Engineer agent for Protofire GRC lifecycle. Triggers: "internal audit 2nd reviewer", "fuzz testing", "Echidna", "regression test", "property test", "audit report sign-off", "test against testnet", "Slither full mode", "upgrade regression", or "test evidence".

vCISO/CISO agent for Protofire GRC lifecycle. Triggers: "vCISO review", "threat model sign-off", "Gate G4", "Irreversibility Gate", "LEGAL-02", "Hard Stop Phase 9", "KRI monitoring", "security posture", "advisory opinion", "risk advisory T3", "DPIA review", "breach notification", "exception review", "quarterly access review", or any independent security sign-off.