GRC

66 entities and 307 agent-callable operations in grc. Each operation is addressed as {mega_tool}/grc/{entity}/{operation} and carries the same permission check over MCP and REST.

`agent_action_audit`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List agent action audit entries (immutable trail)
`read`	`entity_crud`	Get a single agent action audit entry by id

`agent_permission_scope`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Define the permission scope for a governed agent (one scope per agent)
`delete`	`entity_crud`	Delete an agent permission scope
`list`	`entity_crud`	List agent permission scopes for the org's governed agents
`read`	`entity_crud`	Get a single agent permission scope by id
`update`	`entity_crud`	Update an agent permission scope

`ai_compliance`

Operation	Mega-tool	What it does
`assessment_progress`	`smart_action`	Assessment progress summary
`governed_query`	`smart_action`	Governed AI query
`prohibited_screener`	`smart_action`	Prohibited practice screener
`risk_classification`	`smart_action`	Risk classification assistant
`system_check`	`smart_action`	AI system compliance check

`ai_system`

Operation	Mega-tool	What it does
`active_deployments`	`report_query`	List active/completed deployments across the org's AI systems.
`compare_versions`	`report_query`	Diff/compare two versions of the same AI system.
`create`	`entity_crud`	Create a new AI system (org-scoped).
`delete`	`entity_crud`	Soft-delete an AI system (org-scoped).
`drift_analysis`	`smart_action`	Analyze data/concept drift for an AI system version against its baseline metrics.
`fairness_analysis`	`smart_action`	Run fairness/bias analysis on an AI system version (demographic parity, equalized odds, disparate impact).
`get_ai_system_details`	`entity_crud`	Get full details for a single AI system (read).
`list_ai_systems`	`entity_crud`	List AI systems with filtering (risk class, usage context, status, foundation-model flag).
`manage_lifecycle`	`workflow_action`	Transition AI system through its lifecycle states (draft, deployed, retired, etc.)
`performance_trends`	`report_query`	Real-time performance trends (accuracy/latency/error-rate/drift) for an AI system.
`update`	`entity_crud`	Update an existing AI system (org-scoped).
`version_history`	`report_query`	Version history (all versions + lifecycle events) for an AI system.

`ai_system_change_request`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve an AI system change request (pending -> approved).
`create`	`entity_crud`	Create a new AI system change request (org-scoped via ai_system).
`delete`	`entity_crud`	Delete an AI system change request (org-scoped, hard delete; SD=N model).
`implement`	`workflow_action`	Mark an approved AI system change request as implemented (approved -> implemented).
`list`	`entity_crud`	List AI system change requests (org-scoped via ai_system).
`read`	`entity_crud`	Read a single AI system change request (org-scoped).
`reject`	`workflow_action`	Reject an AI system change request (pending/approved -> rejected).
`update`	`entity_crud`	Update an AI system change request (org-scoped).

`ai_system_deployment`

Operation	Mega-tool	What it does
`complete`	`workflow_action`	Complete ai system deployment.
`create`	`entity_crud`	Create a new AI system deployment (org-scoped via version).
`delete`	`entity_crud`	Delete an AI system deployment (org-scoped, hard delete; SD=N model).
`list`	`entity_crud`	List AI system deployments (org-scoped via version->ai_system).
`read`	`entity_crud`	Read a single AI system deployment (org-scoped).
`rollback`	`workflow_action`	Roll back a deployment (-> rolled_back).
`update`	`entity_crud`	Update an AI system deployment (org-scoped).

`ai_system_lifecycle_event`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List AI system lifecycle events (read-only event log, org-scoped).
`read`	`entity_crud`	Read a single AI system lifecycle event (org-scoped).

`ai_system_version`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new AI system version (org-scoped via ai_system).
`create_version`	`workflow_action`	Create a new lifecycle version for an AI system (auto-increments if no version_number).
`delete`	`entity_crud`	Delete an AI system version (org-scoped, hard delete; SD=N model).
`list`	`entity_crud`	List AI system versions (org-scoped via ai_system).
`promote`	`workflow_action`	Promote an AI system version to the next lifecycle state (validates the transition).
`read`	`entity_crud`	Read a single AI system version (org-scoped).
`rollback`	`workflow_action`	Roll the active version of an AI system back to a prior version.
`update`	`entity_crud`	Update an AI system version (org-scoped).

`assessment_audit_log`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List assessment audit-log entries (read-only, append-only)
`read`	`entity_crud`	Read a single assessment audit-log entry with state detail

`assessment_notification`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List assessment notifications (read-only; use workflow_action to mark read/delete)
`read`	`entity_crud`	Read a single assessment notification with full detail

`audit_log`

Operation	Mega-tool	What it does
`audit_log_query`	`report_query`	Filtered, paginated query over the organization's assessment audit log (append-only)

`compliance`

Operation	Mega-tool	What it does
`compliance_status`	`report_query`	EU AI Act compliance status snapshot per AI system (latest score + requirement progress)
`conformity_requirements`	`report_query`	Conformity assessment + declaration roll-up per AI system
`generate_documentation`	`smart_action`	Generate compliance documentation (policies, narrative, mappings) from org state
`identify_gaps`	`report_query`	Identify compliance gaps across requirements / frameworks
`metrics`	`report_query`	Numeric compliance metrics (KPIs, trend deltas)
`overview`	`report_query`	High-level org compliance overview (frameworks, scores, deltas)
`regulatory_summary`	`report_query`	Org-wide regulatory posture summary across frameworks (from latest scores)
`score_history`	`report_query`	Compliance score history time-series for an AI system
`summary`	`report_query`	Generate AI system compliance summary report
`validate_documentation`	`report_query`	Validate compliance documentation completeness across AI systems

`compliance_document`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a compliance document under review (review → approved)
`archive`	`workflow_action`	Archive a compliance document (→ archived)
`create`	`entity_crud`	Create a new compliance document (lands in 'draft')
`delete`	`entity_crud`	Soft-delete a compliance document
`download`	`document_op`	Download a single compliance document as structured JSON (full content).
`download_compliance_bundle`	`document_op`	Aggregate every compliance document for an AI system into a single JSON bundle (a complete EU AI Act dossier export).
`list`	`entity_crud`	List compliance documents with filtering and pagination
`read`	`entity_crud`	Get detailed compliance document information
`review`	`workflow_action`	Move a compliance document into review (draft → review)
`submit`	`workflow_action`	Submit an approved compliance document to the authority (approved → submitted)
`update`	`entity_crud`	Update a compliance document's content (status changes go through workflow_action)
`upload`	`document_op`	Create a compliance document for an AI system from supplied JSON content.

`compliance_requirement`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new compliance requirement
`delete`	`entity_crud`	Soft-delete a compliance requirement
`list`	`entity_crud`	List compliance requirements with filtering and pagination
`read`	`entity_crud`	Get detailed compliance requirement information
`update`	`entity_crud`	Update an existing compliance requirement

`compliance_score`

Operation	Mega-tool	What it does
`bulk_calculate`	`workflow_action`	Recalculate and persist compliance scores for all AI systems in the org
`calculate`	`workflow_action`	Recalculate and persist the real-time compliance score for one AI system
`create`	`entity_crud`	Record a new compliance score for an AI system
`list`	`entity_crud`	List compliance scores with filtering and pagination
`read`	`entity_crud`	Get detailed compliance score information
`update`	`entity_crud`	Update a compliance score record

`compliance_score_history`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List compliance score history snapshots (read-only)
`read`	`entity_crud`	Get a single compliance score history snapshot (read-only)

`compliance_training_enrollment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a compliance training enrollment (org-scoped).
`delete`	`entity_crud`	Soft-delete a compliance training enrollment (org-scoped).
`list`	`entity_crud`	List compliance training enrollments (org-scoped).
`read`	`entity_crud`	Read a single compliance training enrollment (org-scoped).
`update`	`entity_crud`	Update a compliance training enrollment (org-scoped).
`waive`	`workflow_action`	Waive a compliance training enrollment (non-terminal -> waived) with a reason.

`compliance_training_requirement`

Operation	Mega-tool	What it does
`activate`	`workflow_action`	Activate a compliance training requirement (inactive/deprecated -> active).
`create`	`entity_crud`	Create a compliance training requirement (org-scoped).
`deactivate`	`workflow_action`	Deactivate a compliance training requirement (active -> inactive).
`delete`	`entity_crud`	Soft-delete a compliance training requirement (org-scoped).
`list`	`entity_crud`	List compliance training requirements (org-scoped).
`read`	`entity_crud`	Read a single compliance training requirement (org-scoped).
`update`	`entity_crud`	Update a compliance training requirement (org-scoped).

`conformity_assessment`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new conformity assessment
`delete`	`entity_crud`	Soft-delete a conformity assessment
`list`	`entity_crud`	List conformity assessments with filtering and pagination
`read`	`entity_crud`	Get detailed conformity assessment information
`update`	`entity_crud`	Update an existing conformity assessment
`validate_prerequisites`	`workflow_action`	Check whether an AI system meets the prerequisites for a conformity declaration

`conformity_declaration`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a submitted conformity declaration (submitted → approved)
`create`	`entity_crud`	Create a new conformity declaration (lands in 'draft')
`delete`	`entity_crud`	Soft-delete a conformity declaration
`download`	`document_op`	Download a stored Conformity Declaration as a structured JSON export (declaration text, standards, validity, signature metadata).
`generate`	`document_op`	Generate an EU Declaration of Conformity PDF for an AI system using the ComplianceDocGenerator service.
`get_template`	`document_op`	Get template conformity declaration.
`list`	`entity_crud`	List conformity declarations with filtering and pagination
`read`	`entity_crud`	Get detailed conformity declaration information
`reject`	`workflow_action`	Reject a submitted/signed conformity declaration (→ rejected)
`sign`	`workflow_action`	Sign a conformity declaration (draft → signed)
`submit`	`workflow_action`	Submit a signed conformity declaration to the authority (signed → submitted)
`update`	`entity_crud`	Update a conformity declaration's content (status changes go through workflow_action)

`conformity_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new piece of conformity evidence
`list`	`entity_crud`	List conformity evidence with filtering and pagination
`read`	`entity_crud`	Get detailed conformity evidence information
`update`	`entity_crud`	Update conformity evidence metadata

`corrective_action`

Operation	Mega-tool	What it does
`complete`	`workflow_action`	Mark a corrective action complete (pending/in_progress -> completed).
`create`	`entity_crud`	Create a corrective action for an AI incident.
`delete`	`entity_crud`	Soft-delete a corrective action.
`list`	`entity_crud`	List corrective actions for AI incidents.
`read`	`entity_crud`	Get full details for a single corrective action.
`update`	`entity_crud`	Update a corrective action (non-transition fields).
`verify`	`workflow_action`	Verify a completed corrective action (completed -> verified, or -> failed).

`data_lineage`

Operation	Mega-tool	What it does
`query`	`report_query`	Query data lineage for a dataset / processing activity

`document`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Register a new document for an AI system
`delete`	`entity_crud`	Soft-delete a document
`download`	`document_op`	Return a document's manifest (metadata + integrity fields).
`list`	`entity_crud`	List AI-system documents (EU AI Act documentation) with filtering and pagination
`read`	`entity_crud`	Get detailed document metadata by UUID
`update`	`entity_crud`	Update document metadata
`upload`	`document_op`	Register a document for an AI system.
`verify`	`document_op`	Integrity check: recompute the SHA-256 over supplied base64 `content` and compare it to the document's stored file_hash.

`document_version`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Record a new version for an existing document
`list`	`entity_crud`	List version history for documents (org-scoped through the parent document)
`read`	`entity_crud`	Read a single document version by UUID

`employee_training_record`

Operation	Mega-tool	What it does
`assign`	`workflow_action`	Assign a training course to a user (create-or-reset an EmployeeTrainingRecord at status 'pending').
`complete`	`workflow_action`	Mark an employee training record completed (pending -> completed).
`create`	`entity_crud`	Create an employee training record (course must belong to the caller's org).
`delete`	`entity_crud`	Soft-delete an employee training record (scoped via course organization).
`list`	`entity_crud`	List employee training records (scoped via course organization).
`read`	`entity_crud`	Read a single employee training record (scoped via course organization).
`update`	`entity_crud`	Update an employee training record (scoped via course organization).
`verify`	`workflow_action`	Verify a completed employee training record (completed -> verified).

`governance`

Operation	Mega-tool	What it does
`agent_audit_trail`	`report_query`	Agent action-audit analytics: authorization/execution breakdown plus recent entries, optionally scoped to one agent
`authorize_agent_action`	`smart_action`	Authorize a proposed agent action against agent-action governance policies; returns the ALLOW/BLOCK/ESCALATE/...
`governance_dashboard`	`report_query`	Governance dashboard: agent counts by state/risk, open oversight load, and recent agent-action outcomes
`oversight_queue`	`report_query`	The human-oversight backlog (pending/assigned/escalated by default), priority-ordered with pagination
`post_inference_evaluate`	`smart_action`	Run post-inference governance policies against model output for an AI system; returns the ALLOW/BLOCK/...
`pre_inference_evaluate`	`smart_action`	Run pre-inference governance policies against input data for an AI system; returns the ALLOW/BLOCK/...

`governance_api_key`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a governance API key.
`delete`	`entity_crud`	Permanently delete a governance API key.
`list`	`entity_crud`	List governance API keys (prefix only; never the secret).
`read`	`entity_crud`	Read a single governance API key (prefix only; never the secret).
`revoke`	`workflow_action`	Revoke a governance API key by setting it inactive (history is preserved).
`update`	`entity_crud`	Update a governance API key's mutable config (not the key material; not is_active — use workflow_action revoke).

`governance_audit`

Operation	Mega-tool	What it does
`api_key_usage`	`report_query`	Usage rollup for governance API keys: per-key usage_count, last-used, active/expired status, and org totals.
`audit_entry_query`	`report_query`	Aggregate governance audit-trail entries: counts by event type, result, risk level, top actors and targets over an optional time window.
`webhook_delivery_analytics`	`report_query`	Per-webhook delivery health: success/failure/retry breakdown, success rate, and recent failure counts over an optional time window.

`governance_audit_entry`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List immutable governance audit-trail entries (append-only hash chain) with filtering.
`read`	`entity_crud`	Read a single immutable governance audit-trail entry.

`governance_audit_summary`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List periodic governance audit summaries (event/result/risk rollups) with filtering.
`read`	`entity_crud`	Read a single governance audit summary.

`governance_decision`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List governance decisions (append-only outcome records)
`read`	`entity_crud`	Get a single governance decision by id

`governance_webhook`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a governance webhook.
`delete`	`entity_crud`	Permanently delete a governance webhook (and its delivery history via cascade).
`disable`	`workflow_action`	Disable (deactivate) a governance webhook so it stops receiving event deliveries.
`enable`	`workflow_action`	Enable (activate) a governance webhook so it receives event deliveries.
`list`	`entity_crud`	List governance webhooks with optional filtering.
`read`	`entity_crud`	Read a single governance webhook (secret is never returned).
`test`	`workflow_action`	Send a synthetic test event through a governance webhook's real signing + delivery pipeline, recording a WebhookDelivery (is_test=True) and returning the…
`update`	`entity_crud`	Update a governance webhook's mutable config (not its secret; not is_active — use workflow_action enable/disable).

`governed_agent`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Register a new governed AI agent (lands in registered state)
`list`	`entity_crud`	List governed AI agents with filtering and pagination
`read`	`entity_crud`	Get a single governed agent by id
`retire`	`workflow_action`	Retire a governed agent (any non-retired state -> retired).
`suspend`	`workflow_action`	Suspend an active governed agent (active -> suspended)
`update`	`entity_crud`	Update a governed agent's definition (state changes go through workflow_action)

`guide`

Operation	Mega-tool	What it does
`query`	`report_query`	GRC agent playbook: where every governance id comes from and the order the workflows run in.

`human_oversight_request`

Operation	Mega-tool	What it does
`approve`	`workflow_action`	Approve a human oversight request (pending\|assigned -> approved)
`create`	`entity_crud`	Create a human oversight request for an agent action (lands in pending status)
`escalate`	`workflow_action`	Escalate a human oversight request (pending\|assigned -> escalated)
`list`	`entity_crud`	List human oversight requests with filtering and pagination
`read`	`entity_crud`	Get a single human oversight request by id
`reject`	`workflow_action`	Reject a human oversight request (pending\|assigned -> rejected)
`update`	`entity_crud`	Update non-status fields of an oversight request (status changes go through workflow_action)

`incident`

Operation	Mega-tool	What it does
`close`	`workflow_action`	Close a resolved incident after verification
`create`	`entity_crud`	Create a new AI incident.
`create_action_plan`	`workflow_action`	Create one or more corrective actions (an action plan) for an AI incident.
`delete`	`entity_crud`	Soft-delete an AI incident.
`draft_from_email`	`smart_action`	Draft an incident record from raw email body / subject / sender
`investigate`	`workflow_action`	Start investigation on an open incident
`list`	`entity_crud`	List AI incidents with filtering and pagination.
`open`	`workflow_action`	Open a new incident for investigation
`read`	`entity_crud`	Get full details for a single AI incident.
`regulatory_report`	`report_query`	Serious-incident regulatory reporting view (EU AI Act Article 62): which incidents require/were reported.
`reopen`	`workflow_action`	Reopen a closed or resolved incident
`resolve`	`workflow_action`	Resolve an incident with resolution details
`statistics`	`report_query`	AI incident statistics: totals, breakdown by status/severity/type, resolution metrics.
`summary`	`report_query`	Generate incident analytics summary report
`trend`	`report_query`	Analyze incident trends over time
`triage_for_breach`	`smart_action`	AI-assisted triage of an incident for personal data breach criteria (GDPR Art.
`update`	`entity_crud`	Update an existing AI incident.

`incident_record`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new base incident.
`delete`	`entity_crud`	Soft-delete a base incident.
`list`	`entity_crud`	List base incidents with filtering and pagination.
`read`	`entity_crud`	Get full details for a single base incident.
`resolve`	`workflow_action`	Resolve a base incident (open/in-progress -> closed).
`update`	`entity_crud`	Update an existing base incident.

`notification`

Operation	Mega-tool	What it does
`delete_all`	`workflow_action`	Soft-delete all of the calling user's already-read notifications
`read`	`workflow_action`	Mark a single assessment notification as read
`read_all`	`workflow_action`	Mark all of the calling user's unread notifications as read

`permissibility_batch`

Operation	Mega-tool	What it does
`create`	`workflow_action`	Submit a list of URLs for asynchronous permissibility adjudication.
`read`	`workflow_action`	Read permissibility batch.

`permissibility_graph`

Operation	Mega-tool	What it does
`read`	`report_query`	Permissibility knowledge graph: the rules graph, one source's terms graph, or the mash of the two with verdict-coloured alignment edges.

`permissibility_policy_object`

Operation	Mega-tool	What it does
`list`	`report_query`	List machine-readable policy objects — one per adjudicated source, carrying a permitted\|conditional\|forbidden\|review answer for each policy question, the…
`lookup`	`report_query`	Resolve a LIST of URLs (and/or your own source_keys) to policy objects in one call — the op a requester's platform makes when a request arrives carrying…
`read`	`report_query`	Read the policy object for ONE registered source.

`permissibility_question`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a policy question.
`list`	`entity_crud`	List this organization's policy questions — the requester-facing dimension of the matrix.
`update`	`entity_crud`	Update a policy question — its label, prompt, bound parameters or stages, order, or is_active.

`permissibility_review`

Operation	Mega-tool	What it does
`assign`	`entity_crud`	Put one review item in front of a named person.
`decide`	`entity_crud`	Decide one review item: complies \| violates \| conditional, with a mandatory note.
`defer`	`entity_crud`	Defer or escalate one review item with a mandatory note saying what is blocking it, and a mandatory until date it should resurface at.
`list`	`entity_crud`	The review queue: every current rule verdict awaiting a human decision, newest first, each with WHY a human is needed (no_clause_matched \| ambiguous_alignment…

`permissibility_rule`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a permissibility rule and IMMEDIATELY recompute every verdict it touches, returning the flip receipt in the same response: which verdicts changed, from…
`list`	`entity_crud`	List permissibility rules in a rule set.
`preview_impact`	`smart_action`	Dry-run a rule edit and report exactly which verdicts WOULD flip, without persisting anything — no rule write, no new verdict row, no third-party fetch.
`update`	`entity_crud`	Edit a permissibility rule and IMMEDIATELY recompute every verdict it touches.

`permissibility_ruleset`

Operation	Mega-tool	What it does
`export_workbook`	`workflow_action`	Export a permissibility rule set back to its workbook form.
`import_workbook`	`workflow_action`	Import a permissibility rule-set workbook (.xlsx) and return the import report.

`permissibility_source`

Operation	Mega-tool	What it does
`answer`	`smart_action`	Answer 'may we use this data?' for one URL or registered source: per policy question, one of permitted \| conditional \| forbidden \| review, each with the…
`evaluate`	`smart_action`	Adjudicate whether a URL's source may be used, and under what conditions.
`list`	`entity_crud`	List adjudicated third-party sources with their CURRENT permissibility decision inline — this is the verdict matrix.
`read`	`entity_crud`	Read one adjudicated source: the matrix row plus its full origin list (host + optional path prefix, matched longest-prefix-first), its governing…
`refresh_terms`	`smart_action`	Re-fetch a source's governing terms documents, re-hash them, and — if any NORMATIVE hash changed — recompute every verdict bound to that source.

`permissibility_sources`

Operation	Mega-tool	What it does
`import`	`workflow_action`	Register a batch of third-party sources for permissibility adjudication, from a staged CSV/XLSX upload or from inline JSON rows, and start the per-source…
`import_status`	`workflow_action`	Per-stage progress for one source-import job: counts across registered, discovering, fetching, aligning, evaluated, review and failed, plus the per-row…

`permissibility_verdict`

Operation	Mega-tool	What it does
`explain`	`smart_action`	Return the complete evidence chain behind one permissibility verdict: every per-rule finding with its clause quotes, document anchors, assurance level and…
`list`	`entity_crud`	List permissibility verdicts.
`read`	`entity_crud`	Read one permissibility verdict with its per-rule findings.

`policy`

Operation	Mega-tool	What it does
`bulk_assign`	`workflow_action`	Bulk-assign policies to users / groups / AI systems
`dashboard`	`report_query`	Governance-policy dashboard: counts by state, type, category and enforcement mode
`decision_history`	`report_query`	Recent governance decisions with outcome breakdown (optionally scoped to a trace or AI system)
`evaluation_log_analytics`	`report_query`	Policy evaluation-log analytics: result distribution, action breakdown, latency, optionally scoped to one AI system
`list_conflicts`	`report_query`	List detected policy conflicts (graceful-degrade if model missing)

`policy_bundle`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a compiled policy bundle for an AI system
`delete`	`entity_crud`	Delete a policy bundle (cache artifact; hard delete is safe)
`list`	`entity_crud`	List compiled policy bundles for the org's AI systems
`read`	`entity_crud`	Get a single policy bundle by id
`update`	`entity_crud`	Update a policy bundle (e.g.

`policy_evaluation_log`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List policy evaluation log entries (append-only audit log)
`read`	`entity_crud`	Get a single policy evaluation log entry by id

`policy_rule`

Operation	Mega-tool	What it does
`activate`	`workflow_action`	Activate a policy rule (testing / pending_approval / deprecated -> active)
`clone`	`workflow_action`	Clone a policy rule into a new draft (optionally with a new rule_id/version)
`create`	`entity_crud`	Create a new governance policy rule (lands in draft state)
`deactivate`	`workflow_action`	Deactivate (deprecate) an active policy rule (active -> deprecated)
`list`	`entity_crud`	List governance policy rules with filtering and pagination
`read`	`entity_crud`	Get a single governance policy rule by id
`simulate`	`workflow_action`	Move a draft policy into testing/shadow mode (draft -> testing)
`update`	`entity_crud`	Update an existing governance policy rule (definition fields only; state changes go through workflow_action)
`version`	`workflow_action`	Snapshot the current policy rule into its version history (PolicyRuleVersion)

`policy_rule_version`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List archived versions of policy rules (append-only history)
`read`	`entity_crud`	Get a single archived policy-rule version by id

`prohibited_practice`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List prohibited AI practices (global EU AI Act Article 5 catalog; read-only).
`read`	`entity_crud`	Read a single prohibited AI practice from the global catalog (read-only).

`risk`

Operation	Mega-tool	What it does
`summary`	`report_query`	Generate risk assessment summary across AI systems

`risk_register`

Operation	Mega-tool	What it does
`dashboard`	`report_query`	Dashboard payload for the org risk register (summary, matrix, top risks, trends)

`root_cause_analysis`

Operation	Mega-tool	What it does
`analyze_root_cause`	`workflow_action`	Complete a root cause analysis (transition in_progress -> completed).
`create`	`entity_crud`	Create a root cause analysis for an AI incident.
`delete`	`entity_crud`	Soft-delete a root cause analysis.
`list`	`entity_crud`	List root cause analyses for AI incidents.
`read`	`entity_crud`	Get full details for a single root cause analysis.
`update`	`entity_crud`	Update a root cause analysis.

`ropa`

Operation	Mega-tool	What it does
`export`	`report_query`	Export GDPR Article 30 Record of Processing Activities (ROPA) table

`task`

Operation	Mega-tool	What it does
`detail`	`report_query`	Get detail for a single compliance task
`list_mine`	`report_query`	List compliance tasks assigned to the calling user
`list_overdue`	`report_query`	List overdue compliance tasks across the org

`training`

Operation	Mega-tool	What it does
`compliance_training_status`	`report_query`	Compliance-training status: enrollment counts by status + overdue count + active requirements (org-scoped).
`evidence_rollup`	`report_query`	Training evidence rollup: valid / expiring-soon (30d) / expired counts (org-scoped).
`training_dashboard`	`report_query`	Training dashboard: course counts and employee-record counts by status (org-scoped).

`training_compliance_evidence`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a training compliance evidence record (org-scoped).
`delete`	`entity_crud`	Soft-delete a training compliance evidence record (org-scoped).
`list`	`entity_crud`	List training compliance evidence records (org-scoped).
`read`	`entity_crud`	Read a single training compliance evidence record (org-scoped).
`update`	`entity_crud`	Update a training compliance evidence record (org-scoped).

`training_course`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new training course (org-scoped).
`delete`	`entity_crud`	Soft-delete a training course (org-scoped).
`list`	`entity_crud`	List AI-literacy training courses (org-scoped).
`read`	`entity_crud`	Read a single training course (org-scoped).
`update`	`entity_crud`	Update an existing training course (org-scoped).

`webhook_delivery`

Operation	Mega-tool	What it does
`list`	`entity_crud`	List webhook delivery attempts (read-only log) with filtering.
`read`	`entity_crud`	Read a single webhook delivery attempt.

`workflow`

Operation	Mega-tool	What it does
`workflow_metrics`	`report_query`	Aggregate metrics over the organization's workflow definitions (counts by category, default count, avg completion days)

`workflow_definition`

Operation	Mega-tool	What it does
`create`	`entity_crud`	Create a new assessment workflow definition
`delete`	`entity_crud`	Soft-delete a workflow definition
`list`	`entity_crud`	List assessment workflow definitions with filtering and pagination
`read`	`entity_crud`	Get a single workflow definition with full state/role/config detail
`update`	`entity_crud`	Update an existing workflow definition

Parameter schemas and permission codenames are in the full reference — sign in — or call prism_introspect(dimension="capability_search", query="…") with your key.

In the full reference this application appears under document_op, entity_crud, report_query, smart_action, workflow_action.