Update to Aivana CIO Decision Twin

{
  "name": "ai-governance-intelligence",
  "description": "Assess AI initiatives by business value, data risk, privacy, compliance, model behavior, ownership, controls, operating readiness and approval path. Use for AI governance boards and CIO/CISO reviews. Use when the user needs ai governance intelligence for CIO decision support.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 142
    }
  ],
  "skill_md_contents": "---\nname: ai-governance-intelligence\ndescription: Assess AI initiatives by business value, data risk, privacy, compliance, model behavior, ownership, controls, operating readiness and approval path. Use for AI governance boards and CIO/CISO reviews. Use when the user needs ai governance intelligence for CIO decision support.\n---\n\n# AI Governance Intelligence\n\n## Mission\n\nApply the [shared decision contract](../autonomous-cio-orchestrator/references/decision-contract.md)\nfor evidence gates, immutable claim IDs, scoring limits, and a concise first page.\nApproval readiness is not legal compliance, certification, or authorization to deploy.\n\nMake AI initiatives decision-ready by evaluating value, risk, controls, accountability and operational readiness.\n\n## Inputs\n\nAccept AI use-case descriptions, data categories, model/provider notes, user groups, workflow context, policy excerpts, compliance concerns, security requirements and value hypotheses.\n\n## Workflow\n\n1. Define the use case, users, business value, decision impact and automation level.\n2. Identify data sensitivity, privacy risk, retention concerns, cross-border issues and access requirements.\n3. Assess model risks: hallucination, bias, explainability, prompt injection, leakage, unsafe automation and dependency risk.\n4. Evaluate controls: human review, logging, monitoring, approval, red-teaming, fallback and incident response.\n5. Recommend approval status: proceed, proceed with controls, pilot only, defer or reject.\n\n## Output Format\n\n- Executive Summary\n- AI Use-Case Value\n- Data and Privacy Risks\n- Security and Model Risks\n- Compliance / Governance Gaps\n- Required Controls\n- Approval Recommendation\n- Evidence & Assumptions\n- Missing Data\n\n## Guardrails\n\nThis skill supports governance analysis, not legal advice. Require human approval for high-risk AI use cases.\n"
}