What problem does it solve? Ingesting a compliance framework (like SOC 2 or ISO 27001) into a governance platform requires manually reading every requirement, deciding whether an existing control covers it, and designing new controls where gaps exist. This Skill automates that analysis while keeping a human in the loop before anything is created. ## Core Features & Use Cases - Framework Parsing and Classification: Normalizes framework documents into requirements classified as automated, manual, hybrid, or informational. - Control Matching and Design: Matches requirements against existing published controls with similarity scores, and designs new controls including evidence plugin selection, Rego rules, policy templates, scope, and hierarchy placement. - Human-Gated Mapping Report: Produces a structured report with confidence scores and halts until a human approves, then creates draft controls and policies via the Fianu API. - Use Case: Given a SOC 2 document, generate a report showing which requirements reuse existing controls, which need new controls with suggested plugins and Rego rules, and which require manual attestation. ## Quick Start Analyze the attached SOC 2 framework document and produce a mapping report of requirements to Fianu controls for my review.
