skills/instructions/references/orchestration.cyber.json

{
  "kit": "CYBER-MASTER",
  "version": "1.0.0",
  "files": {
    "system": "SYSTEM_CYBER.secure.md",
    "modules": "modules.cyber.all-in-one.txt",
    "map": "mindmap.cyber.txt"
  },
  "guards": {
    "rgpd_minimization": true,
    "placeholder": "[...]",
    "wrap_modules": [
      { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_01_EVIDENCE#cite" }
    ],
    "disclaimer": "Information opérationnelle ; pas un avis juridique ; valider localement."
  },
  "router": [
    { "if": "intent ~ /(iso\\s*27001|isms|annex\\s*a|soa)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_03_ISO27001#scoping" } },
    { "if": "intent ~ /(rgpd|gdpr|dpo|dpia|ropa|registre)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_04_RGPD_EU_FR#scoping" } },
    { "if": "intent ~ /(loi\\s*25|qu[eé]bec|canada|renseignements\\s+personnels)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_05_LOI25_CA#scoping" } },
    { "if": "intent ~ /(sant[é]|banque|assurance|industrie|[eé]nergie|secteur)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_06_SECTOR_PACKS#health" } },
    { "if": "intent ~ /(risque|risk|ebios)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_07_RISK#init" } },
    { "if": "intent ~ /(incident|csirt|breach)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_09_INCIDENT#playbook" } },
    { "if": "intent ~ /(fournisseur|tiers|contrat|dpa)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_10_VENDOR#questionnaire" } },
    { "if": "intent ~ /(contr[oô]les|iam|chiffrement|journalisation|durcissement)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_11_CONTROLS#map" } },
    { "if": "intent ~ /(kpi|kri|tableau\\s*de\\s*bord|métriques)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_12_KPI_KRI#board" } },
    { "if": "intent == 'version_executive' || persona == 'decideur'",
      "augment": [ { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_13_BOARD#one_slide" } ] },
    { "if": "intent ~ /(glossaire|définition|acronyme)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_15_GLOSSARY#duo" } },
    { "if": "intent ~ /(checklist|audit|pr[eé]-?cert)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_16_CHECKLISTS#iso_preaudit" } },

    { "if": "intent ~ /(code|revue\\s*de\\s*code|owasp|cwe|asvs|ssdf|27034)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#detect" } },
    { "if": "intent ~ /(\\.(py|js|ts|java|cs|go|rs|c(pp)?|php|rb|swift|kt|sql|ya?ml)\\b)/i",
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#detect" } },

    { "default": true,
      "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_02_GUIDE#toc_root" } },

    { "always": true,
      "wrap": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_01_EVIDENCE#cite" } }
  ],
  "playbooks": [
    {
      "id": "pb_iso27001_express",
      "title": "Certification ISO 27001 – express",
      "steps": [
        { "id": "scope",        "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_03_ISO27001#scoping" } },
        { "id": "controls_map", "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_03_ISO27001#controls_map" } },
        { "id": "soa",          "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_03_ISO27001#soa" } },
        { "id": "risk_init",    "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_07_RISK#init" } },
        { "id": "evidence",     "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_01_EVIDENCE#collect" } }
      ],
      "gates": ["GO1","GO2","GO3","GO4","GO5"]
    },
    {
      "id": "pb_rgpd_starter",
      "title": "Registre RGPD + DPIA – starter",
      "steps": [
        { "id": "scope_rgpd", "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_04_RGPD_EU_FR#scoping" } },
        { "id": "ropa",       "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_04_RGPD_EU_FR#ropa_template" } },
        { "id": "dpia",       "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_04_RGPD_EU_FR#dpia_light" } },
        { "id": "rights",     "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_08_PRIVOPS#dsr" } },
        { "id": "evidence",   "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_01_EVIDENCE#collect" } }
      ],
      "gates": ["GO1","GO2","GO3","GO4","GO5"]
    },
    {
      "id": "pb_code_compliance_infinite",
      "title": "Compliance du code — boucle itérative",
      "steps": [
        { "id": "detect",  "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#detect" } },
        { "id": "scope",   "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#scope" } },
        { "id": "analyze", "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#analyze" } },
        { "id": "map",     "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#map_standards" } },
        { "id": "fix",     "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#propose_fixes" } },
        { "id": "recheck", "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#recheck" } },
        { "id": "chain",   "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#chain" } },
        { "id": "report",  "call": { "file": "modules.cyber.all-in-one.txt", "anchor": "MOD_17_CODE_COMPLIANCE#report" } }
      ],
      "gates": ["GO1","GO2","GO3","GO4","GO5","GO6","GO7","GO8"]
    }
  ],
  "post_processing": {
    "always_offer": ["Voir sources","Parcours guidé","Version exécutive"],
    "append_disclaimer": true
  }
}