Play 35
AI Compliance Engine
Automated regulatory compliance — GDPR data mapping, HIPAA audit trails, SOC 2, EU AI Act.
Automated regulatory compliance engine covering GDPR data mapping, HIPAA audit trails, SOC 2 evidence collection, and EU AI Act risk assessment. Azure OpenAI powers intelligent document analysis and compliance gap detection. Azure Policy enforces infrastructure compliance, Key Vault secures sensitive credentials, and Cosmos DB maintains immutable audit trails. Continuous monitoring detects drift from compliance baselines and triggers remediation workflows.
Architecture Pattern
Compliance automation: policy enforcement, audit trails, gap detection, risk assessment
Azure Services
DevKit (.github Agentic OS)
- agent.md — root orchestrator with builder→reviewer→tuner handoffs
- 3 agents — Compliance Builder (gpt-4o), Reviewer (gpt-4o-mini), Tuner (gpt-4o-mini)
- 3 skills — deploy (100 lines), evaluate (105 lines), tune (105 lines)
- 4 prompts — /deploy, /test, /review, /evaluate with agent routing
- .vscode/mcp.json — FrootAI MCP with Azure Policy + OpenAI key inputs + envFile
TuneKit (AI Config)
- config/openai.json — compliance document analysis prompts
- config/compliance.json — framework rules (GDPR, HIPAA, SOC2, EU AI Act)
- config/guardrails.json — audit retention, immutability
- evaluation/eval.py — Gap detection >90%, False positive <10%
Tuning Parameters
Machine evidence
FrootAI evidence lifecycle
This is an internal evidence maturity label, not third-party certification, accreditation, legal compliance, or a production guarantee. Missing or expired evidence demotes automatically; catalog claims cannot promote a play.
This play currently has design evidence only. A runnable scenario, endpoint evaluation, and build receipts are the next contiguous gates.
Repo Intelligence
v1A no-clone, revision-pinned map for agents and humans. Observed evidence is separated from inferred flow so the output stays useful without pretending to be a full call graph.