菜单
Product-runtime HR copilot MCP: catalog, transport, tenant isolation, HITL, hybrid protect-mcp shadow→enforce. Use for lib/copilot, MCP tool additions, red-team scenarios. Not Cursor IDE MCP plugins.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | hr-product-mcp-governance |
| description | Product-runtime HR copilot MCP: catalog, transport, tenant isolation, HITL, hybrid protect-mcp shadow→enforce. Use for lib/copilot, MCP tool additions, red-team scenarios. Not Cursor IDE MCP plugins. |
| risk | critical |
| minRiskTier | T3 |
| source | project |
| disable-model-invocation | true |
Collaboration plane: Specialized skill — phase 6 only after human tradeoffs recorded. Distinct from Harness HITL (@hr-human-collaboration).
lib/copilot/ (catalog, transport, governance config)COPILOT_TOOL_CATALOG@protect-mcp-governance on the IDE planedocs/ml/, services/ml-serving/) — use @hr-regulated-domain mlops L3inputSchema.parse before handlers; RBAC permission from descriptor; no direct Prisma in handlers — reuse lib/* with AuthContext.tenant_id / subject_id only from JWT/session — never from model arguments.lib/governance/ proposals + HITL — not raw tool execution.tests/unit/copilot/mcp-tools.test.ts — unique names, read permissions, validation, unknown tool denial.@protect-mcp-governance for Cedar/receipts at transportimplementation-sequence.mdCommunity PR/issue triage, appreciative contributor review, docs sync, and orchestrator handoff JSON. T1 advocate lane — not FinOps/swarm. Co-load lint-and-validate and security review when diff warrants.
HR ERP database migrations and packaging: Prisma/SQL surfaces, expand-migrate-contract, RLS-safe seeds, db:verify, distroless/GHCR supply chain. Use for DDL, backfills, dual-write cutovers, Dockerfile, or publish-ghcr workflows.
HR ERP DevOps overlay: Vercel git deploy, GHA quality gate, Redis workers, Phase 1 topology. Co-loads @devops-product-lifecycle. Use for ops paths in this repo.
Agent harness foundation — manifest v4, hooks, lint, ALARP, Cursor native unlock, Phase 2 evidence. Use for .cursor/**, governance scripts, and meta docs.
Adaptation plane — learning ledger, reflect/promote L0-L3, DMAIC/PDCA, CTQ snapshots, router hints. Human-invoked for RGF workflows.
Collaboration plane (Harness HITL) — seven-phase human-agent loop: proposal, options, human tradeoffs, execute, revalidate, specialized tools, output review. Use at T1+ before specialized skills; load routing portion automatically at orchestration.