How oscal-compass/agentic-agile-authoring works
Agentic Agile Authoring is a collection of independently invoked agent skills for OSCAL compliance authoring, plus a CLI that installs selected skills into agent harnesses. The principal workflow customizes a catalog, defines component-specific controls, assesses compliance, then authors a POA&M; framework onboarding can supply catalogs upstream. README documents the capabilities and handoffs, while sampled source confirms selected assessment, POA&M, mapping-ingest, and installer behavior. Several skill implementations were not sampled, so their internal wiring is omitted.
Main entry points: compliance-mapping Catalog Mapper · cli.py Installer CLI · assessment-generator.py Assessment Generator · build_poam.py POA&M Author
Components 26
Framework Onboarding
- Working Catalog
skills/compliance-mapping/scripts/internal_model.py - Catalog Builder
skills/compliance-catalog - Catalog Mapper
skills/compliance-mapping
Authoring Lifecycle
- Catalog Authoring
skills/catalog-authoring - Component Builder
skills/component-definition - Assessment Generator
skills/assessment/assessment-generator.py - POA&M Author
skills/poam-authoring/build_poam.py
Skill Installation
- Installer CLI
tools/compliance_authoring_skills/cli.py - Selection Policy
tools/compliance_authoring_skills/policy.py - Skill Resolver
tools/compliance_authoring_skills/selection.py - APM Backend
tools/compliance_authoring_skills/backends/apm_cli.py - MyHarness Deployer
tools/compliance_authoring_skills/targets/myharness.py
Other components
- Compliance Author
- Compliance PDF
- Source Catalog
- Target Catalog
- Mapping Collection
- HTML Mapping Report
- Customized Catalog
- Component Definition
- Validation Scan Results
- Assessment Findings
- OSCAL POA&M
- Agent Harness
- OpenAPM CLI
- Harness Skill And MCP Config
Connections 31
- Compliance Author → Catalog Builder: provides PDF
- Compliance PDF → Catalog Builder: converts
- Catalog Builder → Customized Catalog: generates catalog
- Compliance Author → Catalog Mapper: requests mapping
- Source Catalog → Catalog Mapper: provides catalog
- Target Catalog → Catalog Mapper: provides catalog
- Catalog Mapper → Working Catalog: normalizes controls
- Catalog Mapper → Mapping Collection: emits mapping
- Catalog Mapper → HTML Mapping Report: generates report
- Compliance Author → Catalog Authoring: invokes
- Catalog Authoring → Customized Catalog: customizes
- Compliance Author → Component Builder: invokes
- Customized Catalog → Component Builder: supplies controls
- Component Builder → Component Definition: generates definition
- Compliance Author → Assessment Generator: invokes
- Component Definition → Assessment Generator: provides rules
- Validation Scan Results → Assessment Generator: provides results
- Assessment Generator → Assessment Findings: produces findings
- Compliance Author → POA&M Author: invokes
- Assessment Findings → POA&M Author: supplies failed findings
- Component Definition → POA&M Author: supports predefined risks
- POA&M Author → OSCAL POA&M: generates risks
- Compliance Author → Installer CLI: selects skills
- Installer CLI → Selection Policy: resolves request
- Selection Policy → Skill Resolver: uses skill inventory
- Installer CLI → APM Backend: delegates install
- Installer CLI → MyHarness Deployer: dispatches target
- APM Backend → OpenAPM CLI: runs commands
- OpenAPM CLI → Harness Skill And MCP Config: deploys skills and MCP
- MyHarness Deployer → Harness Skill And MCP Config: merges skills and MCP
- Harness Skill And MCP Config → Agent Harness: makes skills available