Compliance Assessment

---
name: compliance-assessment
description: Assess a change, process, or artifact against stated regulatory, licensing, contractual, or policy requirements.
---
# Compliance Assessment

Use when a deliverable must satisfy an explicit external or internal requirement set.

## Procedure
1. Identify the exact requirement source, jurisdiction/version, and scope. Do not infer a compliance regime from keywords alone.
2. Convert relevant requirements into verifiable controls or evidence requests.
3. Inspect implementation, process, records, notices, data handling, licensing, or documentation as applicable.
4. Record conforming evidence and gaps separately.
5. Classify gaps by consequence and required owner. Distinguish legal interpretation from factual implementation evidence.
6. Recommend remediation or escalation where a qualified legal or policy decision is required.

## Quality gate
Every compliance conclusion must trace to a concrete requirement and evidence. Avoid declaring legal compliance beyond the evidence and authority available.