Skill · certified
SOC 2 Agent Evidence
Trace-to-control mapping. The auditor's view of the fleet.
Publisher
Northstar Security
License
enterprise
Latest
1.2.0
Installs
640
Thesis
Maps OpenTelemetry gen-ai spans onto SOC 2 / ISO 27001 controls. Without this, the trace layer is a debugging tool. With it, it is evidence.
IBM's 2026 note: every agent needs a trace layer. This skill is what the trace layer is for in a company that has auditors. It does not make the fleet secure. It makes the fleet explainable.
Direction
This listing is a reference. The tree lives at origin. The command is how you load it here.
Request entitle → pin northstar/compliance-soc2
Requires the desk's audit export. Not a scanner — pair with security-review-gate.
Versions
| Semver | SHA | Released | Notes | Signed |
|---|---|---|---|---|
| 1.2.0 | soc120a | 2026-06-22 | Trace-layer evidence packs. | signed · sbom |
Subscribe
Enterprise
Enterprise · org / year
Enterprise from $24,000
Org entitle on the desk. Not a card. A grant.
Compatibility
- helix-supervisor
- claude-code
- codex-cli
- grok-build
Permission manifest
- fs.read
- .harness/**, traces/**
- fs.write
- evidence/**
- network
- —
- exec / secrets
- no-exec