Update to Aivana CIO Decision Twin

{
  "name": "risk-chain-intelligence",
  "description": "Map cascading risk paths across projects, systems, data, security, compliance, operations, vendors, finance and organization. Use when isolated risk registers are insufficient.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 139
    }
  ],
  "skill_md_contents": "---\nname: risk-chain-intelligence\ndescription: Map cascading risk paths across projects, systems, data, security, compliance, operations, vendors, finance and organization. Use when isolated risk registers are insufficient.\n---\n\n# Risk Chain Intelligence\n\n## Mission\n\nExpose how one signal can propagate through enterprise dependencies and become a business, board, customer, audit or security event.\n\n## Inputs\n\nAccept risk registers, project dependencies, architecture context, security findings, operational metrics, vendor risks, budget notes, compliance findings and incident history.\n\n## Workflow\n\n1. Start from the truth-layer handoff. Keep facts, assumptions and hypotheses separate.\n2. Extract risk nodes, affected assets, triggers, dependencies and controls.\n3. Map propagation paths across project, architecture, security, compliance, finance, vendor, operations and organization domains.\n4. Identify amplifiers such as weak ownership, missing controls, shared resources, vendor lock-in, scarce skills and technical debt.\n5. Rank chains by likelihood, impact, velocity, detectability and containment readiness.\n6. Translate each chain into business exposure: cost, customer trust, audit/control, security, resilience, delivery or reputation.\n7. Define scenario kill-switches where the chain should trigger pause, escalation, deferral or risk acceptance.\n\n## Chain Shape\n\nUse this structure:\n\n`Signal -> Dependency -> Amplifier -> Business Impact -> Decision Pressure -> Control / Evidence Gate`\n\n## Output Format\n\n- Executive Summary\n- Risk Chain Map\n- Critical Propagation Paths\n- Amplifiers\n- Trigger Points\n- Risk-to-Cash Translation\n- Containment Actions\n- Escalation Rules\n- Scenario Kill-Switch\n- Evidence & Assumptions\n- Missing Data\n\n## Guardrails\n\nUse scenario language when propagation is inferred. Do not present hypothetical chains as confirmed events.\n"
}