The wounds your team names in the room.
Real, specific pain. If you read these and nod, the rest of the page is yours.
A regulator asked for proof last quarter and it took a week to assemble.
You have a vendor you cannot fully vet because there is no checklist.
Your audit trail is a folder of screenshots.
What is pushing, pulling, blocking, and keeping you stuck.
Every hire or fire decision runs through four forces. We name them so you can move the ones you can move.
The job, in the buyer's own words.
When the regulator asks, I want to hand them a sealed pack in hours, not rebuild a folder of screenshots, so I can defend every claim and not lose the board's trust.
Who runs this department.
Agents assist. Humans own. These are the seats that map to the processes below.
CCO / Risk Lead
Policy, audits, board risk.
Compliance Analyst
Controls evidence, tests.
Vendor Risk
Third-party diligence.
Internal Audit liaison
Findings closeout.
The operating cadence.
Category → department → process. Each process can bind skills, agents, harnesses, and loops.
- 01Control evidence collection with hashes
- 02Vendor risk questionnaire pack
- 03Policy exception log
- 04Audit pack assembly (hours, not weeks)
- 05Incident → board risk brief
Who is accountable when the seal fails.
How we land this department.
Most vendors sell features. We sell the wound. This is the exact wedge that opens the door for Risk & Compliance buyers.
One command. Pick the work you do.
You install the kit with one command. Each how-to is named for the job it does. Add it to your AI assistant and run it like a real workflow.
Pick the job. Run it.
Browse the full catalog of agents, harnesses, and goal-loops on the marketplace.
/site/skills-library.html · /site/harnesses.html · /site/goal-loops.html · architecture
Where this framework comes from.
Method: JTBD Intake (Moesta Four Forces) + Blueprint GTM + RIG sealed proof.