GRC

87 entities and 377 agent-callable operations in grc. Each operation is addressed as {mega_tool}/grc/{entity}/{operation} and carries the same permission check over MCP and REST.

`agent_action_audit`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List agent action audit entries (immutable trail)
`read`	`entity_crud`	Get a single agent action audit entry by id

`agent_permission_scope`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Define the permission scope for a governed agent (one scope per agent)
`delete`	`entity_crud`	Delete an agent permission scope
`list`	`entity_crud`	List agent permission scopes for the org's governed agents
`read`	`entity_crud`	Get a single agent permission scope by id
`update`	`entity_crud`	Update an agent permission scope

`ai_compliance`

Operation	Mega-tool	What it does
`assessment_progress`	`smart_action`	Assessment progress summary
`governed_query`	`smart_action`	Governed AI query
`prohibited_screener`	`smart_action`	Prohibited practice screener
`risk_classification`	`smart_action`	Risk classification assistant
`system_check`	`smart_action`	AI system compliance check

`ai_system`

Operation	Mega-tool	What it does
`active_deployments`	`report_query`	List active/completed deployments across the org's AI systems.
`compare_versions`	`report_query`	Diff/compare two versions of the same AI system.
`create`	`entity_crud`	Create a new AI system (org-scoped).
`delete`	`entity_crud`	Soft-delete an AI system (org-scoped).
`drift_analysis`	`smart_action`	Analyze data/concept drift for an AI system version against its baseline metrics.
`fairness_analysis`	`smart_action`	Run fairness/bias analysis on an AI system version (demographic parity, equalized odds, disparate impact).
`get_ai_system_details`	`entity_crud`	Get full details for a single AI system (read).
`list_ai_systems`	`entity_crud`	List AI systems with filtering (risk class, usage context, status, foundation-model flag).
`manage_lifecycle`	`workflow_action`	Transition AI system through its lifecycle states (draft, deployed, retired, etc.)
`performance_trends`	`report_query`	Real-time performance trends (accuracy/latency/error-rate/drift) for an AI system.
`update`	`entity_crud`	Update an existing AI system (org-scoped).
`version_history`	`report_query`	Version history (all versions + lifecycle events) for an AI system.

`ai_system_change_request`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve an AI system change request (pending -> approved).
`create`	`entity_crud`	Create a new AI system change request (org-scoped via ai_system).
`delete`	`entity_crud`	Delete an AI system change request (org-scoped, hard delete; SD=N model).
`implement`	`workflow_action`	Mark an approved AI system change request as implemented (approved -> implemented).
`list`	`entity_crud`	List AI system change requests (org-scoped via ai_system).
`read`	`entity_crud`	Read a single AI system change request (org-scoped).
`reject`	`workflow_action`	Reject an AI system change request (pending/approved -> rejected).
`update`	`entity_crud`	Update an AI system change request (org-scoped).

`ai_system_deployment`

Operation	Mega-tool	What it does
`complete`	`workflow_action`	Complete ai system deployment.
`create`	`entity_crud`	Create a new AI system deployment (org-scoped via version).
`delete`	`entity_crud`	Delete an AI system deployment (org-scoped, hard delete; SD=N model).
`list`	`entity_crud`	List AI system deployments (org-scoped via version->ai_system).
`read`	`entity_crud`	Read a single AI system deployment (org-scoped).
`rollback`	`workflow_action`	Roll back a deployment (-> rolled_back).
`update`	`entity_crud`	Update an AI system deployment (org-scoped).

`ai_system_lifecycle_event`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List AI system lifecycle events (read-only event log, org-scoped).
`read`	`entity_crud`	Read a single AI system lifecycle event (org-scoped).

`ai_system_version`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new AI system version (org-scoped via ai_system).
`create_version`	`workflow_action`	Create a new lifecycle version for an AI system (auto-increments if no version_number).
`delete`	`entity_crud`	Delete an AI system version (org-scoped, hard delete; SD=N model).
`list`	`entity_crud`	List AI system versions (org-scoped via ai_system).
`promote`	`workflow_action`	Promote an AI system version to the next lifecycle state (validates the transition).
`read`	`entity_crud`	Read a single AI system version (org-scoped).
`rollback`	`workflow_action`	Roll the active version of an AI system back to a prior version.
`update`	`entity_crud`	Update an AI system version (org-scoped).

`assessment_audit_log`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List assessment audit-log entries (read-only, append-only)
`read`	`entity_crud`	Read a single assessment audit-log entry with state detail

`assessment_notification`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List assessment notifications (read-only; use workflow_action to mark read/delete)
`read`	`entity_crud`	Read a single assessment notification with full detail

`audit_log`

Operation	Mega-tool	What it does
`audit_log_query`	`report_query`	Filtered, paginated query over the organization's assessment audit log (append-only)

`compliance`

Operation	Mega-tool	What it does
`compliance_status`	`report_query`	EU AI Act compliance status snapshot per AI system (latest score + requirement progress)
`conformity_requirements`	`report_query`	Conformity assessment + declaration roll-up per AI system
`generate_documentation`	`smart_action`	Generate compliance documentation (policies, narrative, mappings) from org state
`identify_gaps`	`report_query`	Identify compliance gaps across requirements / frameworks
`metrics`	`report_query`	Numeric compliance metrics (KPIs, trend deltas)
`overview`	`report_query`	High-level org compliance overview (frameworks, scores, deltas)
`regulatory_summary`	`report_query`	Org-wide regulatory posture summary across frameworks (from latest scores)
`score_history`	`report_query`	Compliance score history time-series for an AI system
`summary`	`report_query`	Generate AI system compliance summary report
`validate_documentation`	`report_query`	Validate compliance documentation completeness across AI systems

`compliance_document`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a compliance document under review (review → approved)
`archive`	`workflow_action`	Archive a compliance document (→ archived)
`create`	`entity_crud`	Create a new compliance document (lands in 'draft')
`delete`	`entity_crud`	Soft-delete a compliance document
`download`	`document_op`	Download a single compliance document as structured JSON (full content).
`download_compliance_bundle`	`document_op`	Aggregate every compliance document for an AI system into a single JSON bundle (a complete EU AI Act dossier export).
`list`	`entity_crud`	List compliance documents with filtering and pagination
`read`	`entity_crud`	Get detailed compliance document information
`review`	`workflow_action`	Move a compliance document into review (draft → review)
`submit`	`workflow_action`	Submit an approved compliance document to the authority (approved → submitted)
`update`	`entity_crud`	Update a compliance document's content (status changes go through workflow_action)
`upload`	`document_op`	Create a compliance document for an AI system from supplied JSON content.

`compliance_requirement`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance requirement
`delete`	`entity_crud`	Soft-delete a compliance requirement
`list`	`entity_crud`	List compliance requirements with filtering and pagination
`read`	`entity_crud`	Get detailed compliance requirement information
`update`	`entity_crud`	Update an existing compliance requirement

`compliance_score`

Operation	Mega-tool	What it does
`bulk_calculate`	`workflow_action`	Recalculate and persist compliance scores for all AI systems in the org
`calculate`	`workflow_action`	Recalculate and persist the real-time compliance score for one AI system
`create`	`entity_crud`	Record a new compliance score for an AI system
`list`	`entity_crud`	List compliance scores with filtering and pagination
`read`	`entity_crud`	Get detailed compliance score information
`update`	`entity_crud`	Update a compliance score record

`compliance_score_history`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List compliance score history snapshots (read-only)
`read`	`entity_crud`	Get a single compliance score history snapshot (read-only)

`compliance_training_enrollment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a compliance training enrollment (org-scoped).
`delete`	`entity_crud`	Soft-delete a compliance training enrollment (org-scoped).
`list`	`entity_crud`	List compliance training enrollments (org-scoped).
`read`	`entity_crud`	Read a single compliance training enrollment (org-scoped).
`update`	`entity_crud`	Update a compliance training enrollment (org-scoped).
`waive`	`workflow_action`	Waive a compliance training enrollment (non-terminal -> waived) with a reason.

`compliance_training_requirement`

Operation	Mega-tool	What it does
`activate`	`workflow_action`	Activate a compliance training requirement (inactive/deprecated -> active).
`create`	`entity_crud`	Create a compliance training requirement (org-scoped).
`deactivate`	`workflow_action`	Deactivate a compliance training requirement (active -> inactive).
`delete`	`entity_crud`	Soft-delete a compliance training requirement (org-scoped).
`list`	`entity_crud`	List compliance training requirements (org-scoped).
`read`	`entity_crud`	Read a single compliance training requirement (org-scoped).
`update`	`entity_crud`	Update a compliance training requirement (org-scoped).

`conformity_assessment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new conformity assessment
`delete`	`entity_crud`	Soft-delete a conformity assessment
`list`	`entity_crud`	List conformity assessments with filtering and pagination
`read`	`entity_crud`	Get detailed conformity assessment information
`update`	`entity_crud`	Update an existing conformity assessment
`validate_prerequisites`	`workflow_action`	Check whether an AI system meets the prerequisites for a conformity declaration

`conformity_declaration`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a submitted conformity declaration (submitted → approved)
`create`	`entity_crud`	Create a new conformity declaration (lands in 'draft')
`delete`	`entity_crud`	Soft-delete a conformity declaration
`download`	`document_op`	Download a stored Conformity Declaration as a structured JSON export (declaration text, standards, validity, signature metadata).
`generate`	`document_op`	Generate an EU Declaration of Conformity PDF for an AI system using the ComplianceDocGenerator service.
`get_template`	`document_op`	Get template conformity declaration.
`list`	`entity_crud`	List conformity declarations with filtering and pagination
`read`	`entity_crud`	Get detailed conformity declaration information
`reject`	`workflow_action`	Reject a submitted/signed conformity declaration (→ rejected)
`sign`	`workflow_action`	Sign a conformity declaration (draft → signed)
`submit`	`workflow_action`	Submit a signed conformity declaration to the authority (signed → submitted)
`update`	`entity_crud`	Update a conformity declaration's content (status changes go through workflow_action)

`conformity_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new piece of conformity evidence
`list`	`entity_crud`	List conformity evidence with filtering and pagination
`read`	`entity_crud`	Get detailed conformity evidence information
`update`	`entity_crud`	Update conformity evidence metadata

`continuous_compliance_activity`

Operation	Mega-tool	What it does
`bind`	`smart_action`	Put a processing activity under continuous compliance: attach the governing policies and standards from the document library to it, register it as an…
`evaluate`	`smart_action`	Run the DPIA verdict for a processing activity now, and return the receipt: every cell that flipped and whether the activity's decision changed.
`list`	`entity_crud`	List the processing activities under continuous compliance: one row per adjudicated activity, carrying its DPIA decision (GO \| NO_GO \| CONDITIONAL \|…
`read`	`entity_crud`	Read one processing activity under continuous compliance: its DPIA decision, the WP248 criteria that fired, the attributes the rules read, whether it involves…
`update`	`entity_crud`	Change a processing activity's attributes and get back exactly what that change moved: the re-verdict receipt, naming every cell that flipped and every…

`continuous_compliance_assessment`

Operation	Mega-tool	What it does
`as_of`	`report_query`	As of continuous compliance assessment.

`continuous_compliance_coverage`

Operation	Mega-tool	What it does
`read`	`report_query`	Read continuous compliance coverage.
`status`	`report_query`	For a list of data_mapping processing-activity ids (a page of the RoPA, up to 200), return each one's Continuous Compliance status: whether it is assessed…

`continuous_compliance_export`

Operation	Mega-tool	What it does
`json`	`report_query`	Export the DPIA verdict record for one processing activity as JSON — the regulator-ready assessment record.
`pdf`	`smart_action`	Export the DPIA assessment for one processing activity as a PDF — the regulator-ready record, on Cognethics letterhead, carrying the decision, the attributes…

`continuous_compliance_graph`

Operation	Mega-tool	What it does
`activity_context`	`report_query`	The internal-corpus knowledge-graph pack for one processing activity: accepted or qualified privgov facts about the activity (depth 1-2) plus program-level…
`advance`	`smart_action`	Nudge one ingestion receipt's state machine forward (projected, extracting, awaiting_gate, applied, complete) by re-reading its pipeline run state.
`bind`	`smart_action`	Declare that a processing activity IS a given knowledge-graph element (an ElementIdentity of type privgov:processing_activity), so the activity's DPIA pack…
`binding_list`	`report_query`	Activity-to-graph-node bindings: which processing activity is bound to which knowledge-graph element, by which method (normalized_label or declared), decided…
`dependents`	`report_query`	The facts.v2 DPIA runs whose frozen graph pack cites any of the given assertion ids: what a superseded or changed fact would make stale.
`ingestion_status`	`report_query`	Completeness of the internal-corpus knowledge graph for this organization: documents total, documents with a complete ingestion receipt, percent, the…
`receipt`	`report_query`	One ingestion receipt with its per-section dispositions (extracted, no_facts, refused, carried_forward, pending, failed), each with its text hash, fragment…
`sync`	`smart_action`	Plan, then ingest, the organization's internal policy corpus into the knowledge graph.

`continuous_compliance_law_pack`

Operation	Mega-tool	What it does
`activate`	`workflow_action`	Activate a law or framework pack for this organization so assessments can be run under it: validates it against the loaded texts, creates the ledger…
`apply_supersession`	`workflow_action`	Apply an amended guideline to the rules and re-verdict everything against it: read the superseding ledger decision, revise every affected rule, then recompute…
`describe`	`report_query`	One law or framework pack in full: title, kind, regime code, rule table (rule key, obligation, class, kind, section), the sources it expects loaded and the…
`enable_scoring`	`workflow_action`	Let a pack score assessments.
`import`	`workflow_action`	Import a law pack (GDPR by default; any registered pack via data.namespace) as rules: project every accepted obligation and criterion fact from the ledger…
`list`	`report_query`	Which laws, frameworks and assessment templates can a DPIA be run under?
`pending`	`report_query`	Is there an amended guideline waiting to be applied to the rules?
`register`	`workflow_action`	Register an organization's own law, framework or template pack from a manifest, without a deploy: the manifest is validated (levels 1-2) and stored…
`resection`	`workflow_action`	Re-section a law pack's loaded texts (external library) under its section grammar so a rule can cite a provision, not a whole document: PIPEDA sections and…
`stage_facts`	`workflow_action`	Stage a pack's obligations as proposed facts in its ledger partition, by deterministic catalogue transcription (every fact is the pack's own quoted text…
`suspend`	`workflow_action`	Suspend a pack in this organization: it stops scoring and is no longer offered for new assessments.
`validate`	`workflow_action`	Validate a law or framework pack without writing anything.

`continuous_compliance_movement`

Operation	Mega-tool	What it does
`read`	`report_query`	Read continuous compliance movement.

`corrective_action`

Operation	Mega-tool	What it does
`complete`	`workflow_action`	Mark a corrective action complete (pending/in_progress -> completed).
`create`	`entity_crud`	Create a corrective action for an AI incident.
`delete`	`entity_crud`	Soft-delete a corrective action.
`list`	`entity_crud`	List corrective actions for AI incidents.
`read`	`entity_crud`	Get full details for a single corrective action.
`update`	`entity_crud`	Update a corrective action (non-transition fields).
`verify`	`workflow_action`	Verify a completed corrective action (completed -> verified, or -> failed).

`data_lineage`

Operation	Mega-tool	What it does
`query`	`report_query`	Query data lineage for a dataset / processing activity

`document`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Register a new document for an AI system
`delete`	`entity_crud`	Soft-delete a document
`download`	`document_op`	Return a document's manifest (metadata + integrity fields).
`list`	`entity_crud`	List AI-system documents (EU AI Act documentation) with filtering and pagination
`read`	`entity_crud`	Get detailed document metadata by UUID
`update`	`entity_crud`	Update document metadata
`upload`	`document_op`	Register a document for an AI system.
`verify`	`document_op`	Integrity check: recompute the SHA-256 over supplied base64 `content` and compare it to the document's stored file_hash.

`document_version`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Record a new version for an existing document
`list`	`entity_crud`	List version history for documents (org-scoped through the parent document)
`read`	`entity_crud`	Read a single document version by UUID

`dpia_answer_import`

Operation	Mega-tool	What it does
`candidates`	`report_query`	The answered in-platform assessments that can seed a DPIA review on the target template (template_id, default the org's ICO DPIA): submitted or later, same…
`import_assignment`	`workflow_action`	Stage the answers of an answered in-platform assessment (entity_id = assignment_id) as a DPIA answer set: same organization, submitted or later, the same DPIA…
`import_document`	`workflow_action`	Stage the answers of a completed DPIA from an org document (entity_id = document_id): a PDF or DOCX is read by AI and returns status "extracting" (poll…
`list`	`report_query`	List DPIA answer imports, newest first: status, source, submitter, template, answer and unmapped counts.
`read`	`report_query`	One DPIA answer import (the preview): status extracting\|ready\|failed, every template question with the imported answer, its source (file, page or row…

`dpia_coverage`

Operation	Mega-tool	What it does
`by_asset`	`report_query`	Paginated data assets with their DPIA coverage, origin split and facets.
`by_vendor`	`report_query`	Paginated vendors with their DPIA coverage, origin split and facets.
`summary`	`report_query`	How many data assets and vendors are covered by a signed (approved) DPIA, split by origin (engine / v14-synced / manual), with transfer and special-category…

`dpia_facts`

Operation	Mega-tool	What it does
`read`	`report_query`	Read the DPIA fact pack (assets with posture, vendors with DPA/SCC standing, transfers, flows, DSAR statistics, retention, incidents, AI systems, risk…

`dpia_persona`

Operation	Mega-tool	What it does
`ensure`	`workflow_action`	Idempotently create or update the v15 DPIA persona set for the organization: DPO, DPA (ICO/CNIL), DPA regulator (CPPA), the Risk Posture Reviewer (Agent 3)…

`dpia_residual`

Operation	Mega-tool	What it does
`list`	`report_query`	Residual risks of signed DPIA runs (the same rows the Risk Register shows for DPIAs): title, ICO likelihood and severity labels, residual level, whether it is…

`dpia_run`

Operation	Mega-tool	What it does
`cancel`	`workflow_action`	Cancel a DPIA run that has not finished (a running AI turn is stopped).
`evidence_map`	`report_query`	The evidence graph of a run: nodes (answer, citation, policy section, control, trace; unused and restricted flagged) and edges (source, target, kind).
`export`	`document_op`	Export a DPIA run as format=json\|pdf (default json) and file it as a Document: returns {document_id, download_url, record_sha256}.
`list`	`report_query`	List DPIA runs (newest first) with status, round, the three scores (basis points), open Required Action count and signer.
`read`	`report_query`	One DPIA run: header, rounds summary, Required Actions with derived status, timeline, exports, the residual items a sign-off must acknowledge, `short_id` (the…
`round`	`report_query`	One version's questionnaire (every answer with its citations: ref, document, section, offsets, verbatim quote) and risks.
`round_diff`	`report_query`	Per question_key and per risk_key diff of two rounds (token diff of the answer text).
`scores`	`report_query`	Score receipts per round (deterministic, final): basis points, rule breakdown, hard-open rules, integrity findings, jurisdiction checklist, and the exit…
`signoff`	`workflow_action`	Signoff dpia run.
`start`	`workflow_action`	Start a DPIA run (the adversarial draft/review loop with a human sign-off).

`dpia_trigger`

Operation	Mega-tool	What it does
`read`	`report_query`	The DPIA trigger configuration: RoPA save, schedule, vendor change, incident close, AI system change, policy revised; each with its enabled flag and settings…
`update`	`workflow_action`	Update the DPIA trigger configuration (partial: only the cards named are touched): ropa_save, schedule, vendor_change, incident_close, ai_system_change…

`employee_training_record`

Operation	Mega-tool	What it does
`assign`	`workflow_action`	Assign a training course to a user (create-or-reset an EmployeeTrainingRecord at status 'pending').
`complete`	`workflow_action`	Mark an employee training record completed (pending -> completed).
`create`	`entity_crud`	Create an employee training record (course must belong to the caller's org).
`delete`	`entity_crud`	Soft-delete an employee training record (scoped via course organization).
`list`	`entity_crud`	List employee training records (scoped via course organization).
`read`	`entity_crud`	Read a single employee training record (scoped via course organization).
`update`	`entity_crud`	Update an employee training record (scoped via course organization).
`verify`	`workflow_action`	Verify a completed employee training record (completed -> verified).

`governance`

Operation	Mega-tool	What it does
`agent_audit_trail`	`report_query`	Agent action-audit analytics: authorization/execution breakdown plus recent entries, optionally scoped to one agent
`authorize_agent_action`	`smart_action`	Authorize a proposed agent action against agent-action governance policies; returns the ALLOW/BLOCK/ESCALATE/...
`governance_dashboard`	`report_query`	Governance dashboard: agent counts by state/risk, open oversight load, and recent agent-action outcomes
`oversight_queue`	`report_query`	The human-oversight backlog (pending/assigned/escalated by default), priority-ordered with pagination
`post_inference_evaluate`	`smart_action`	Run post-inference governance policies against model output for an AI system; returns the ALLOW/BLOCK/...
`pre_inference_evaluate`	`smart_action`	Run pre-inference governance policies against input data for an AI system; returns the ALLOW/BLOCK/...

`governance_api_key`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a governance API key.
`delete`	`entity_crud`	Permanently delete a governance API key.
`list`	`entity_crud`	List governance API keys (prefix only; never the secret).
`read`	`entity_crud`	Read a single governance API key (prefix only; never the secret).
`revoke`	`workflow_action`	Revoke a governance API key by setting it inactive (history is preserved).
`update`	`entity_crud`	Update a governance API key's mutable config (not the key material; not is_active — use workflow_action revoke).

`governance_audit`

Operation	Mega-tool	What it does
`api_key_usage`	`report_query`	Usage rollup for governance API keys: per-key usage_count, last-used, active/expired status, and org totals.
`audit_entry_query`	`report_query`	Aggregate governance audit-trail entries: counts by event type, result, risk level, top actors and targets over an optional time window.
`webhook_delivery_analytics`	`report_query`	Per-webhook delivery health: success/failure/retry breakdown, success rate, and recent failure counts over an optional time window.

`governance_audit_entry`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List immutable governance audit-trail entries (append-only hash chain) with filtering.
`read`	`entity_crud`	Read a single immutable governance audit-trail entry.

`governance_audit_summary`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List periodic governance audit summaries (event/result/risk rollups) with filtering.
`read`	`entity_crud`	Read a single governance audit summary.

`governance_decision`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List governance decisions (append-only outcome records)
`read`	`entity_crud`	Get a single governance decision by id

`governance_webhook`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a governance webhook.
`delete`	`entity_crud`	Permanently delete a governance webhook (and its delivery history via cascade).
`disable`	`workflow_action`	Disable (deactivate) a governance webhook so it stops receiving event deliveries.
`enable`	`workflow_action`	Enable (activate) a governance webhook so it receives event deliveries.
`list`	`entity_crud`	List governance webhooks with optional filtering.
`read`	`entity_crud`	Read a single governance webhook (secret is never returned).
`test`	`workflow_action`	Send a synthetic test event through a governance webhook's real signing + delivery pipeline, recording a WebhookDelivery (is_test=True) and returning the…
`update`	`entity_crud`	Update a governance webhook's mutable config (not its secret; not is_active — use workflow_action enable/disable).

`governed_agent`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Register a new governed AI agent (lands in registered state)
`list`	`entity_crud`	List governed AI agents with filtering and pagination
`read`	`entity_crud`	Get a single governed agent by id
`retire`	`workflow_action`	Retire a governed agent (any non-retired state -> retired).
`suspend`	`workflow_action`	Suspend an active governed agent (active -> suspended)
`update`	`entity_crud`	Update a governed agent's definition (state changes go through workflow_action)

`guide`

Operation	Mega-tool	What it does
`query`	`report_query`	GRC agent playbook: where every governance id comes from and the order the workflows run in.

`human_oversight_request`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a human oversight request (pending\|assigned -> approved)
`create`	`entity_crud`	Create a human oversight request for an agent action (lands in pending status)
`escalate`	`workflow_action`	Escalate a human oversight request (pending\|assigned -> escalated)
`list`	`entity_crud`	List human oversight requests with filtering and pagination
`read`	`entity_crud`	Get a single human oversight request by id
`reject`	`workflow_action`	Reject a human oversight request (pending\|assigned -> rejected)
`update`	`entity_crud`	Update non-status fields of an oversight request (status changes go through workflow_action)

`incident`

Operation	Mega-tool	What it does
`close`	`workflow_action`	Close a resolved incident after verification
`create`	`entity_crud`	Create a new AI incident.
`create_action_plan`	`workflow_action`	Create one or more corrective actions (an action plan) for an AI incident.
`delete`	`entity_crud`	Soft-delete an AI incident.
`draft_from_email`	`smart_action`	Draft an incident record from raw email body / subject / sender
`investigate`	`workflow_action`	Start investigation on an open incident
`list`	`entity_crud`	List AI incidents with filtering and pagination.
`open`	`workflow_action`	Open a new incident for investigation
`read`	`entity_crud`	Get full details for a single AI incident.
`regulatory_report`	`report_query`	Serious-incident regulatory reporting view (EU AI Act Article 62): which incidents require/were reported.
`reopen`	`workflow_action`	Reopen a closed or resolved incident
`resolve`	`workflow_action`	Resolve an incident with resolution details
`statistics`	`report_query`	AI incident statistics: totals, breakdown by status/severity/type, resolution metrics.
`summary`	`report_query`	Generate incident analytics summary report
`trend`	`report_query`	Analyze incident trends over time
`triage_for_breach`	`smart_action`	AI-assisted triage of an incident for personal data breach criteria (GDPR Art.
`update`	`entity_crud`	Update an existing AI incident.

`incident_record`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new base incident.
`delete`	`entity_crud`	Soft-delete a base incident.
`list`	`entity_crud`	List base incidents with filtering and pagination.
`read`	`entity_crud`	Get full details for a single base incident.
`resolve`	`workflow_action`	Resolve a base incident (open/in-progress -> closed).
`update`	`entity_crud`	Update an existing base incident.

`knowledge_vault`

Operation	Mega-tool	What it does
`import_vendor_documents`	`workflow_action`	Import vendor DPAs and contracts into the DPIA knowledge vault (membership kind vendor_doc, collections internal/vendor-dpas and internal/contracts).
`ingestion_proof`	`report_query`	Knowledge Vault ingestion proof: KPIs (policies, standards, procedures, retention schedules, controls, chunks embedded of total, retrieval mode and its…
`sections`	`report_query`	The sections of one Knowledge Vault item (membership id) with their revisions; optionally one revision_ref.

`notification`

Operation	Mega-tool	What it does
`delete_all`	`workflow_action`	Soft-delete all of the calling user's already-read notifications
`read`	`workflow_action`	Mark a single assessment notification as read
`read_all`	`workflow_action`	Mark all of the calling user's unread notifications as read

`permissibility_alignment`

Operation	Mega-tool	What it does
`accept`	`entity_crud`	Keep a challenged rule-to-clause mapping: the reading survives, every open challenge against it is overruled, and the subject is re-verdicted in the same…
`challenge`	`smart_action`	Add one turn to the dispute over a proposed mapping: steelman the reading, challenge it as the DPA, answer a challenge as the DPO, or withdraw a challenge.
`challenges`	`report_query`	Read the challenges raised against a proposed mapping — the whole adversarial thread behind one rule-to-clause reading, or every thread on one activity.
`launch`	`smart_action`	Run the DPO alignment over one or more governing-document versions: start the pass that reads each clause and proposes which rules it satisfies, is silent on…
`propose`	`smart_action`	Propose that a clause of a governing document satisfies, is silent on, or is ambiguous about a rule — for example that policy POL-04 clause 3 satisfies the…
`reject`	`entity_crud`	Kill a challenged rule-to-clause mapping: the reading is rejected and stops governing, every open challenge against it is upheld, and the subject is…

`permissibility_batch`

Operation	Mega-tool	What it does
`create`	`workflow_action`	Submit a list of URLs for asynchronous permissibility adjudication.
`read`	`workflow_action`	Read permissibility batch.

`permissibility_graph`

Operation	Mega-tool	What it does
`read`	`report_query`	Permissibility knowledge graph: the rules graph, one source's terms graph, or the mash of the two with verdict-coloured alignment edges.

`permissibility_matrix`

Operation	Mega-tool	What it does
`cell`	`report_query`	Read the rule verdicts behind ONE cell of the verdict matrix — the drill-down.
`read`	`report_query`	Read the verdict matrix: the grid of sources or processing activities against rule parameters, each cell carrying the verdict in force and each row its…

`permissibility_policy`

Operation	Mega-tool	What it does
`read`	`entity_crud`	Read the organization's current risk posture: every knob with its value, the shipped default, the allowed choices, and whether it is the rules owner's…
`update_knobs`	`entity_crud`	Change the risk posture and get back what moved.

`permissibility_policy_object`

Operation	Mega-tool	What it does
`list`	`report_query`	List machine-readable policy objects — one per adjudicated source, carrying a permitted\|conditional\|forbidden\|review answer for each policy question, the…
`lookup`	`report_query`	Resolve a LIST of URLs (and/or your own source_keys) to policy objects in one call — the op a requester's platform makes when a request arrives carrying…
`read`	`report_query`	Read the policy object for ONE registered source.

`permissibility_question`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a policy question.
`list`	`entity_crud`	List this organization's policy questions — the requester-facing dimension of the matrix.
`update`	`entity_crud`	Update a policy question — its label, prompt, bound parameters or stages, order, or is_active.

`permissibility_review`

Operation	Mega-tool	What it does
`assign`	`entity_crud`	Put one review item in front of a named person.
`decide`	`entity_crud`	Decide one review item: complies \| violates \| conditional, with a mandatory note.
`defer`	`entity_crud`	Defer or escalate one review item with a mandatory note saying what is blocking it, and a mandatory until date it should resurface at.
`list`	`entity_crud`	The review queue: every current rule verdict awaiting a human decision, newest first, each with WHY a human is needed (no_clause_matched \| ambiguous_alignment…

`permissibility_rule`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a permissibility rule and IMMEDIATELY recompute every verdict it touches, returning the flip receipt in the same response: which verdicts changed, from…
`list`	`entity_crud`	List permissibility rules in a rule set.
`preview_impact`	`smart_action`	Dry-run a rule edit and report exactly which verdicts WOULD flip, without persisting anything — no rule write, no new verdict row, no third-party fetch.
`update`	`entity_crud`	Edit a permissibility rule and IMMEDIATELY recompute every verdict it touches.

`permissibility_ruleset`

Operation	Mega-tool	What it does
`export_workbook`	`workflow_action`	Export a permissibility rule set back to its workbook form.
`import_workbook`	`workflow_action`	Import a permissibility rule-set workbook (.xlsx) and return the import report.

`permissibility_source`

Operation	Mega-tool	What it does
`answer`	`smart_action`	Answer 'may we use this data?' for one URL or registered source: per policy question, one of permitted \| conditional \| forbidden \| review, each with the…
`evaluate`	`smart_action`	Adjudicate whether a URL's source may be used, and under what conditions.
`list`	`entity_crud`	List adjudicated third-party sources with their CURRENT permissibility decision inline — this is the verdict matrix.
`read`	`entity_crud`	Read one adjudicated source: the matrix row plus its full origin list (host + optional path prefix, matched longest-prefix-first), its governing…
`refresh_terms`	`smart_action`	Re-fetch a source's governing terms documents, re-hash them, and — if any NORMATIVE hash changed — recompute every verdict bound to that source.

`permissibility_sources`

Operation	Mega-tool	What it does
`import`	`workflow_action`	Register a batch of third-party sources for permissibility adjudication, from a staged CSV/XLSX upload or from inline JSON rows, and start the per-source…
`import_status`	`workflow_action`	Per-stage progress for one source-import job: counts across registered, discovering, fetching, aligning, evaluated, review and failed, plus the per-row…

`permissibility_transition`

Operation	Mega-tool	What it does
`list`	`report_query`	List verdict transitions — which verdicts flipped, when, from what to what, and what caused each flip.

`permissibility_verdict`

Operation	Mega-tool	What it does
`explain`	`smart_action`	Return the complete evidence chain behind one permissibility verdict: every per-rule finding with its clause quotes, document anchors, assurance level and…
`list`	`entity_crud`	List permissibility verdicts.
`read`	`entity_crud`	Read one permissibility verdict with its per-rule findings.

`policy`

Operation	Mega-tool	What it does
`bulk_assign`	`workflow_action`	Bulk-assign policies to users / groups / AI systems
`dashboard`	`report_query`	Governance-policy dashboard: counts by state, type, category and enforcement mode
`decision_history`	`report_query`	Recent governance decisions with outcome breakdown (optionally scoped to a trace or AI system)
`evaluation_log_analytics`	`report_query`	Policy evaluation-log analytics: result distribution, action breakdown, latency, optionally scoped to one AI system
`list_conflicts`	`report_query`	List detected policy conflicts (graceful-degrade if model missing)

`policy_bundle`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a compiled policy bundle for an AI system
`delete`	`entity_crud`	Delete a policy bundle (cache artifact; hard delete is safe)
`list`	`entity_crud`	List compiled policy bundles for the org's AI systems
`read`	`entity_crud`	Get a single policy bundle by id
`update`	`entity_crud`	Update a policy bundle (e.g.

`policy_evaluation_log`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List policy evaluation log entries (append-only audit log)
`read`	`entity_crud`	Get a single policy evaluation log entry by id

`policy_rule`

Operation	Mega-tool	What it does
`activate`	`workflow_action`	Activate a policy rule (testing / pending_approval / deprecated -> active)
`clone`	`workflow_action`	Clone a policy rule into a new draft (optionally with a new rule_id/version)
`create`	`entity_crud`	Create a new governance policy rule (lands in draft state)
`deactivate`	`workflow_action`	Deactivate (deprecate) an active policy rule (active -> deprecated)
`list`	`entity_crud`	List governance policy rules with filtering and pagination
`read`	`entity_crud`	Get a single governance policy rule by id
`simulate`	`workflow_action`	Move a draft policy into testing/shadow mode (draft -> testing)
`update`	`entity_crud`	Update an existing governance policy rule (definition fields only; state changes go through workflow_action)
`version`	`workflow_action`	Snapshot the current policy rule into its version history (PolicyRuleVersion)

`policy_rule_version`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List archived versions of policy rules (append-only history)
`read`	`entity_crud`	Get a single archived policy-rule version by id

`prohibited_practice`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List prohibited AI practices (global EU AI Act Article 5 catalog; read-only).
`read`	`entity_crud`	Read a single prohibited AI practice from the global catalog (read-only).

`risk`

Operation	Mega-tool	What it does
`summary`	`report_query`	Generate risk assessment summary across AI systems

`risk_register`

Operation	Mega-tool	What it does
`dashboard`	`report_query`	Dashboard payload for the org risk register (summary, matrix, top risks, trends).

`root_cause_analysis`

Operation	Mega-tool	What it does
`analyze_root_cause`	`workflow_action`	Complete a root cause analysis (transition in_progress -> completed).
`create`	`entity_crud`	Create a root cause analysis for an AI incident.
`delete`	`entity_crud`	Soft-delete a root cause analysis.
`list`	`entity_crud`	List root cause analyses for AI incidents.
`read`	`entity_crud`	Get full details for a single root cause analysis.
`update`	`entity_crud`	Update a root cause analysis.

`ropa`

Operation	Mega-tool	What it does
`export`	`report_query`	Export GDPR Article 30 Record of Processing Activities (ROPA) table

`task`

Operation	Mega-tool	What it does
`detail`	`report_query`	Get detail for a single compliance task
`list_mine`	`report_query`	List compliance tasks assigned to the calling user
`list_overdue`	`report_query`	List overdue compliance tasks across the org

`training`

Operation	Mega-tool	What it does
`compliance_training_status`	`report_query`	Compliance-training status: enrollment counts by status + overdue count + active requirements (org-scoped).
`evidence_rollup`	`report_query`	Training evidence rollup: valid / expiring-soon (30d) / expired counts (org-scoped).
`training_dashboard`	`report_query`	Training dashboard: course counts and employee-record counts by status (org-scoped).

`training_compliance_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a training compliance evidence record (org-scoped).
`delete`	`entity_crud`	Soft-delete a training compliance evidence record (org-scoped).
`list`	`entity_crud`	List training compliance evidence records (org-scoped).
`read`	`entity_crud`	Read a single training compliance evidence record (org-scoped).
`update`	`entity_crud`	Update a training compliance evidence record (org-scoped).

`training_course`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new training course (org-scoped).
`delete`	`entity_crud`	Soft-delete a training course (org-scoped).
`list`	`entity_crud`	List AI-literacy training courses (org-scoped).
`read`	`entity_crud`	Read a single training course (org-scoped).
`update`	`entity_crud`	Update an existing training course (org-scoped).

`vault_policy`

Operation	Mega-tool	What it does
`revise`	`workflow_action`	Revise a Knowledge Vault policy: insert a new version (text, version, summary) with its sections; DPIA runs that cited the older revision become stale.

`vault_source_sync`

Operation	Mega-tool	What it does
`status`	`report_query`	Per vault policy: source document version, last synced policy revision, and whether the vault text equals the source text.

`webhook_delivery`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List webhook delivery attempts (read-only log) with filtering.
`read`	`entity_crud`	Read a single webhook delivery attempt.

`workflow`

Operation	Mega-tool	What it does
`workflow_metrics`	`report_query`	Aggregate metrics over the organization's workflow definitions (counts by category, default count, avg completion days)

`workflow_definition`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new assessment workflow definition
`delete`	`entity_crud`	Soft-delete a workflow definition
`list`	`entity_crud`	List assessment workflow definitions with filtering and pagination
`read`	`entity_crud`	Get a single workflow definition with full state/role/config detail
`update`	`entity_crud`	Update an existing workflow definition

Parameter schemas and permission codenames are in the full reference — sign in — or call prism_introspect(dimension="capability_search", query="…") with your key.

In the full reference this application appears under document_op, entity_crud, report_query, smart_action, workflow_action.