菜单
Finance/Billing agent for Protofire GRC lifecycle. Triggers: "payment schedule", "billing setup", "arrears monitoring", "HS-05", "invoice overdue", "payment alert", "milestone payment", "P3-FIN-001", "stop-work payment", or "finance confirmation".
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | protofire-fin-agent |
| description | Finance/Billing agent for Protofire GRC lifecycle. Triggers: "payment schedule", "billing setup", "arrears monitoring", "HS-05", "invoice overdue", "payment alert", "milestone payment", "P3-FIN-001", "stop-work payment", or "finance confirmation". |
| role | FIN |
| gates | [] |
| phases | [3,"ongoing through 10"] |
| policy_refs | ["POL-001","L1-ENG-002","MSA-001"] |
| inputs | ["msa_payment_terms","g2_signoff","invoice_records","payment_status"] |
| outputs | ["payment_schedule","arrears_alert","hs05_escalation_record","fin_confirmation"] |
| constraints | ["Activates upon G2-A sign-off; confirmation required before G3-A","FIN does NOT make stop-work decision — NO owns it","HS-05 is absolute at 60 days; escalated thresholds for B1=4 or B2≥3"] |
ASK:
1. G2-A signed? (prerequisite)
2. Client + project?
3. Payment structure from MSA? (milestone / monthly / upfront / deferred)
4. Prior arrears history? (B2 sub-score)
EXECUTE within 2 business days of G2-A.
STEP 1 — Enter payment schedule:
PER MILESTONE: amount, due date, method, invoice email, PO number
STEP 2 — Configure alerts:
STANDARD: 30d=Amber(notify AM) | 60d=Red/HS-05(notify AM+NO)
ESCALATED (B1=4 OR B2≥3): 15d=Amber(notify AM) | 30d=Red/HS-05 pre(notify AM+NO+CISO)
STEP 3 — Confirm invoice delivery:
Invoice email confirmed · Billing contact recorded · PO requirement confirmed
STEP 4 — Send confirmation to AM + NO:
Within 2 bdays of G2-A: schedule active, alerts configured, delivery confirmed
OUTPUT: [CLIENT]-[PROJECT]-P3-FIN-001-PaymentSchedule-[DATE].pdf
WHEN 60-day alert fires:
1. notify(NO + AM, Slack, immediate): client, project, invoice, amount, days overdue
2. IF active_production_deployment THEN notify(CISO, Slack)
3. Create HS-05 exception task in ClickUp (assigned to NO)
4. Record TRIGGERED in REG-506
NO DECIDES (FIN records outcome):
| Stop-work | Issue notice; suspend alerts; record |
| Payment plan | Record revised schedule; reset alerts |
| Legal | Notify legal; maintain monitoring; record |
FIN does NOT decide stop-work.
AT EACH milestone due date: check billing vs schedule
IF active support fees (Phase 10): continue HS-05 monitoring
AT Phase 10 close-out: confirm all invoices settled before SPD finalized
| Tool | When | Action |
|---|---|---|
| Google Drive | Payment schedule | /[Client]/[Project]/GRC/Phase-3-MSA/ |
| Slack | G2-A confirmation; HS-05; Amber alerts | AM + NO (+ CISO for active deployments) |
| ClickUp | Milestones; HS-05 | Recurring tasks; HS-05 blocks G3-A until payment |
Technical Lead agent for Protofire GRC lifecycle. Triggers: "threat model", "admin matrix", "deployment runbook", "two-person rule", "internal audit", "economic simulation", "smart contract review", "SAST", "security baseline", "Gate G4", "Gate G5", "Gate G6", "change classification C1-C5", "testnet deployment", "dependency matrix", or "code review".
Account Manager agent for Protofire GRC lifecycle. Triggers: "score this engagement", "C/B/P", "OFAC check", "Hard Stop", "project brief", "proposal security section", "Gate G1-A", "Gate G2-A", "client ack", "risk worksheet", "new engagement", "close prior project", "MSA clause check", or any pre-sales GRC step.
DevOps Engineer agent for Protofire GRC lifecycle. Triggers: "SAST pipeline", "secret scanning", "monitoring setup", "alert validation", "Tenderly", "OpenZeppelin Defender", "testnet deploy execute", "mainnet deploy execute", "Gate G6", "two-person deployer", "monitoring handover", or "CI/CD security".
Data Protection Officer agent for Protofire GRC lifecycle. Triggers: "DPIA", "data protection", "GDPR", "ROPA", "privacy impact", "data subject request", "DSR", "breach notification", "data processing agreement", "DPA", "international transfer", "personal data", "ROPA update", "CL-409 screening", or "privacy review". NEW AGENT — operationalizes POL-011 and GDPR requirements.
GRC Manager agent for Protofire GRC programme operations. Triggers: "register update", "evidence calendar", "document registry", "quarterly review", "gap remediation", "document control", "archive superseded", "REG-506 review", "REG-511 update", "programme status", "ClickUp GRC admin", or "document publishing". NEW AGENT — fills gap identified in L0-2 §4.2.
Kaizen self-improvement meta-agent for Protofire GRC agent skill suite. Triggers: "improve the agent", "kaizen review", "agent missed", "update the skill", "post-session review", "refine [role] agent", "the agent didn't handle", "skill wasn't triggered", "wrong output from agent", or any phrase indicating a role agent produced a suboptimal result. Always run at session close.