@raishin/vanguard-frontier-agentic 2.1.0 → 2.2.0

package/catalog/install-roles.json

@@ -940,6 +940,47 @@
         "kubernetes-manifest-quality-review",
         "llm-ai-pipeline-test-review"
       ]
+    },
+    "legal-hr-risk-reviewer": {
+      "label": "Legal & HR Risk Reviewer",
+      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function \u2014 contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
+      "agents": [
+        "legal-counsel-review-agent",
+        "hr-risk-triage-review-agent",
+        "legal-maestro-agent",
+        "hr-maestro-agent",
+        "legal-contract-review-agent",
+        "legal-privacy-data-protection-agent",
+        "legal-employment-law-risk-agent",
+        "legal-litigation-discovery-hold-agent",
+        "legal-regulatory-compliance-agent",
+        "legal-ip-open-source-agent",
+        "legal-vendor-procurement-risk-agent",
+        "legal-ethics-investigations-agent",
+        "legal-policy-governance-agent",
+        "legal-public-disclosure-agent",
+        "legal-knowledge-management-agent",
+        "hr-employee-relations-agent",
+        "hr-workplace-investigations-agent",
+        "hr-performance-management-agent",
+        "hr-termination-readiness-agent",
+        "hr-leave-accommodation-agent",
+        "hr-recruiting-selection-agent",
+        "hr-compensation-equity-agent",
+        "hr-benefits-payroll-agent",
+        "hr-workforce-planning-rif-agent",
+        "hr-learning-policy-agent",
+        "hr-analytics-people-data-agent",
+        "hr-culture-dei-agent",
+        "hr-hris-process-controls-agent"
+      ],
+      "skills": [
+        "legal-counsel-review",
+        "hr-risk-triage-review",
+        "legal-hr-case-capsule",
+        "legal-hr-routing-protocol",
+        "legal-hr-risk-taxonomy"
+      ]
     }
   }
 }

package/catalog/skill-manifest.json

@@ -6031,6 +6031,53 @@
         }
       ]
     },
+    {
+      "id": "hr-risk-triage-review",
+      "path": "skills/hr/hr-risk-triage-review",
+      "aggregate_sha256": "9b52c8961574232e814a97dd70e1a8b538ab5931127da8a2af30babb57fb6cbf",
+      "files": [
+        {
+          "path": "skills/hr/hr-risk-triage-review/SKILL.md",
+          "sha256": "0b7cb9d4bba29c5a6267bf78a816a46481683125ce3e7a8816141ca0ec329e1b",
+          "bytes": 6495
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/metadata.json",
+          "sha256": "4853a6f54430aca86a6d4966334253927d19c9c2b0cca5dafac887c3d30a110f",
+          "bytes": 1295
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/jurisdictions/australia.md",
+          "sha256": "de69d50add6cd58d761b026d7386463ab01d4f72a9fa040e0a7d8d1a9e0fc0c8",
+          "bytes": 10560
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/jurisdictions/eu.md",
+          "sha256": "87a7523e9bb0eb64152c6b431bf051ba80dc3f9c34439e8858bc4b3c85bc412d",
+          "bytes": 9049
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/jurisdictions/singapore.md",
+          "sha256": "9aa4707e0156c3817d6acab120f192d5ed29cb41fe01d72ade5be96d8af601cc",
+          "bytes": 8975
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/jurisdictions/uk.md",
+          "sha256": "4ad693d0c1f648a7c57cee514bff0ed6b6bb8f0b68c18ef385176a5f929d6927",
+          "bytes": 9324
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/jurisdictions/us.md",
+          "sha256": "d380538da613e9ee0e03bcdc6f584748331d366999efd9137a7e79fd457cd9c6",
+          "bytes": 8224
+        },
+        {
+          "path": "skills/hr/hr-risk-triage-review/references/workflow-and-output.md",
+          "sha256": "5ff0bf774b2be616b271f83c1eb80a8469275c26b402b688de0313ddb8bb5838",
+          "bytes": 9724
+        }
+      ]
+    },
     {
       "id": "huawei-cce-container-platform-operator",
       "path": "skills/huawei/huawei-cce-container-platform-operator",
@@ -7797,6 +7844,134 @@
         }
       ]
     },
+    {
+      "id": "legal-counsel-review",
+      "path": "skills/legal/legal-counsel-review",
+      "aggregate_sha256": "ffb7d729219ed7eb00af4da74bdb435052f67fc35d99a95c38217a2db0d9d99d",
+      "files": [
+        {
+          "path": "skills/legal/legal-counsel-review/SKILL.md",
+          "sha256": "3f5d5812da4700a67e2b4c7c8b6d505fd81a27796a9d4c6b1cf0c5805c07d42d",
+          "bytes": 5297
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/metadata.json",
+          "sha256": "38bda931f43fa4cfe567dd26f275b91b0357dedf11f97d283055027af1c3e4ac",
+          "bytes": 1328
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/jurisdictions/australia.md",
+          "sha256": "62aedcc64952ffeea6fb5b9c19e352047bf58170944f4880de6e8336f8c0b416",
+          "bytes": 9774
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/jurisdictions/eu.md",
+          "sha256": "0277a53a1312661da1ded8fc86cd67c9704a2338708ccf1596465e1db3dedf41",
+          "bytes": 8648
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/jurisdictions/singapore.md",
+          "sha256": "71bfc197ae00f29fd8225b0fa23d08f746606b95063e3d597b29c9148536fd74",
+          "bytes": 8488
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/jurisdictions/uk.md",
+          "sha256": "d0ceec7f2589c7aab6da90690ce017323fb7b92c9bcccfcc001e0b379a5e0b8d",
+          "bytes": 9085
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/jurisdictions/us.md",
+          "sha256": "beae464fe71f015ca99b3911c94ad2c76d9b37d0b2670d049a4086f568ca0b01",
+          "bytes": 8788
+        },
+        {
+          "path": "skills/legal/legal-counsel-review/references/workflow-and-output.md",
+          "sha256": "4191c0d041533db70dfe23bf0e7aacf1fa3882f948a94edf5371172163bb6e91",
+          "bytes": 6930
+        }
+      ]
+    },
+    {
+      "id": "legal-hr-case-capsule",
+      "path": "skills/cross-functional/legal-hr-case-capsule",
+      "aggregate_sha256": "2ba2616142db915579cd55817439a002daeb1a1d47f4f4294407c79d664ee29c",
+      "files": [
+        {
+          "path": "skills/cross-functional/legal-hr-case-capsule/README.md",
+          "sha256": "7e19254bae3f2aa55ed54fb8e16d9514f55dedec10824f36281b3dc4d5d0e679",
+          "bytes": 3444
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-case-capsule/SKILL.md",
+          "sha256": "39822835d77706e7b89e3f9f3d747b3b7db1eea9fae0fb926f51351784cf04fe",
+          "bytes": 4251
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-case-capsule/metadata.json",
+          "sha256": "0a4822474a112d7a38da4408e1769dfc3b0ebfb42bc178f98748c9b36efb93b0",
+          "bytes": 1116
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-case-capsule/references/capsule-schema.md",
+          "sha256": "b4443defc07781f800f38ce6397654076b49ffb46d1a81de501496b4edf1b6b0",
+          "bytes": 5796
+        }
+      ]
+    },
+    {
+      "id": "legal-hr-risk-taxonomy",
+      "path": "skills/cross-functional/legal-hr-risk-taxonomy",
+      "aggregate_sha256": "a73085fd758bf73dca0f2bebe1438e978c2ec168456ac4538b5151a0e89a4345",
+      "files": [
+        {
+          "path": "skills/cross-functional/legal-hr-risk-taxonomy/README.md",
+          "sha256": "35c4e8f187dab8a618bd5be5ee416e369c26e4453a7af30ac4baae24c9b12afa",
+          "bytes": 7096
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-risk-taxonomy/SKILL.md",
+          "sha256": "bdd5200cd6b315d4ec88f9da663fc1a42d5c2a6d3698fac34309a78238ff91fe",
+          "bytes": 4554
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-risk-taxonomy/metadata.json",
+          "sha256": "dd8369e75ccac494c31e527a629f5fb1f43209e5e745cdb172c19275d49f1835",
+          "bytes": 1146
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-risk-taxonomy/references/risk-labels.md",
+          "sha256": "e389ddc0433afe1cbd32705090866ca281d055c82af49ef90257809ab50a8139",
+          "bytes": 3747
+        }
+      ]
+    },
+    {
+      "id": "legal-hr-routing-protocol",
+      "path": "skills/cross-functional/legal-hr-routing-protocol",
+      "aggregate_sha256": "4762826c8376bd49d9138546aeb785f9c70642bb576bad1f3cc65e4e65211e30",
+      "files": [
+        {
+          "path": "skills/cross-functional/legal-hr-routing-protocol/README.md",
+          "sha256": "399ecf27d8ce655a32300208fa02b82b5603f34ded2d99f713835643b0718acd",
+          "bytes": 4107
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-routing-protocol/SKILL.md",
+          "sha256": "97aa383ff4dd85d0b147f8298e6536e8c4a7de6c448d55a6562732f8f85ab90c",
+          "bytes": 4909
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-routing-protocol/metadata.json",
+          "sha256": "a8043e9d26ad7dfc8afaf0dd520f21298d5805078f76e74b16c1288dfb87e7ef",
+          "bytes": 1175
+        },
+        {
+          "path": "skills/cross-functional/legal-hr-routing-protocol/references/handoff-matrix.md",
+          "sha256": "ab4aaf2ecdc969d6a83a686c3698a60b959b74be26d0791a6eb59e79dac2f1f9",
+          "bytes": 4289
+        }
+      ]
+    },
     {
       "id": "llm-ai-pipeline-test-review",
       "path": "skills/qa/llm-ai-pipeline-test-review",

package/catalog/skills.json

@@ -5746,6 +5746,35 @@
     "author": "github: Raishin",
     "version": "0.1.0"
   },
+  {
+    "id": "hr-risk-triage-review",
+    "name": "HR Risk Triage Review",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Adversarial HR and employment-risk triage discipline for terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, layoffs, and HR policy exceptions — surfaces risks, evidence gaps, and escalation paths for employment counsel. Does not give legal or HR advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.eeoc.gov/laws-guidance",
+      "https://www.dol.gov/agencies/whd/flsa",
+      "https://www.acas.org.uk/advice",
+      "https://www.gov.uk/browse/working",
+      "https://www.mom.gov.sg/employment-practices",
+      "https://www.fairwork.gov.au/"
+    ],
+    "security_notes": "Static review only — works from sanitized excerpts; never requests employee medical records, personal data, or protected-characteristic data beyond what the question requires. Does not issue binding employment-law conclusions; refuses pretextual or retaliatory documentation and recommends escalation to employment counsel.",
+    "last_verified": "2026-05-18",
+    "path": "skills/hr/hr-risk-triage-review",
+    "author": "github: Raishin",
+    "version": "0.1.0"
+  },
   {
     "id": "huawei-cce-container-platform-operator",
     "name": "Huawei CCE Container Platform Operator",
@@ -7433,6 +7462,113 @@
     "author": "github: Raishin",
     "version": "0.1.0"
   },
+  {
+    "id": "legal-counsel-review",
+    "name": "Legal Counsel Review",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Adversarial legal-risk review discipline for contracts, privacy, regulatory, litigation, compliance, and policy-exception questions — surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel. Does not give legal advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
+      "https://commission.europa.eu/law/law-topic/data-protection/data-protection-eu_en",
+      "https://www.legislation.gov.uk/ukpga/2018/12/contents",
+      "https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act",
+      "https://www.oaic.gov.au/privacy/the-privacy-act",
+      "https://www.law.cornell.edu/wex"
+    ],
+    "security_notes": "Static review only — works from sanitized excerpts; never requests secrets, credentials, personal data, employee medical detail, or trade secrets. Does not issue binding legal conclusions; flags privileged material and recommends escalation to qualified counsel.",
+    "last_verified": "2026-05-18",
+    "path": "skills/legal/legal-counsel-review",
+    "author": "github: Raishin",
+    "version": "0.1.0"
+  },
+  {
+    "id": "legal-hr-case-capsule",
+    "name": "Legal-HR Case Capsule",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Shared, auditable handoff contract for Legal and HR agents — a redacted case capsule carrying facts, uncertainty, evidence quality, risk labels, privilege and privacy posture, a named decision owner, and an explicit do-not-do list. Does not give legal or HR advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "Defines a minimum-necessary handoff record; never carries medical records, government IDs, credentials, privileged email text, or protected-class data beyond what the matter requires. Never authorizes action; flags privilege and privacy posture and routes decisions to a named human owner.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-case-capsule",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "legal-hr-risk-taxonomy",
+    "name": "Legal-HR Risk Taxonomy",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Shared risk vocabulary for the Legal and HR agent ecosystem — severity ratings, privilege and privacy sensitivity labels, matter-type classes, escalation-gate triggers, and the audit-log schema. Does not give legal or HR advice and never concludes a matter is safe or compliant.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "A risk rating is an opinion on exposure, never a clearance; never records a matter as compliant or safe. The audit-log schema is minimum-necessary and carries labels and summaries, never raw medical, privileged, credential, or protected-class content. Rates Unknown and escalates when facts are missing.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-risk-taxonomy",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "legal-hr-routing-protocol",
+    "name": "Legal-HR Routing Protocol",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Classification and routing discipline for Legal and HR matters — routing rules, the cross-domain overlap handoff matrix, controlled-handoff communication principles, and the Legal-HR conflict-resolution protocol. Does not give legal or HR advice and never makes a binding routing decision.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "Routing is a recommendation, never an authorization; never approves, denies, or directs adverse action. Classifies matters from sanitized signals only and never requests medical detail, government IDs, credentials, or protected-class data. Routes ambiguous matters to a maestro rather than guessing a specialist.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-routing-protocol",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
   {
     "id": "llm-ai-pipeline-test-review",
     "name": "LLM AI Pipeline Test Review",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "Raishin",

package/skills/cross-functional/legal-hr-case-capsule/README.md

@@ -0,0 +1,45 @@
+# 📦 Legal-HR Case Capsule
+
+The **case capsule** is the single, auditable handoff contract for Legal and HR agentic coordination. When a matter crosses a boundary — an HR investigation that needs privileged legal review, or a legal litigation hold that triggers an HR data freeze — the case capsule carries a structured, redacted payload between agents while preserving privilege, minimizing personal data, and recording the escalation path.
+
+## What is a case capsule?
+
+A 30-field structured handoff contract that:
+- **Carries facts and risk posture**, never an authorization or final decision
+- **Minimizes personal and sensitive data** through explicit redaction rules
+- **Preserves legal and HR privilege** with mandatory do-not-disclose markers
+- **Names one decision owner** — the human responsible for the next action
+- **Enforces a do-not-do list** — irreversible actions that are explicitly forbidden until human sign-off
+
+See [`SKILL.md`](SKILL.md) for the skill itself, and [`references/capsule-schema.md`](references/capsule-schema.md) for the complete 30-field specification, redaction rules, and a worked example.
+
+## Why a case capsule?
+
+Without a case capsule, agents would improvise handoffs — dumping raw case context, leaking personal data, losing track of who said what, and creating audit gaps. The case capsule is the guardrail: it enforces a shape, a payload contract, and a privilege boundary.
+
+Every handoff is auditable: an auditor, a regulator, or opposing counsel can trace exactly what facts moved between agents, why, and who approved the motion.
+
+## For Legal agents
+
+When your review reveals an HR issue (wrongful termination exposure, discrimination risk, retaliation red flag), you hand off to HR via a case capsule. The capsule says *"here's what I found, here are the privilege markers, here's who owns the next step, here's what we must NOT do without consent."*
+
+## For HR agents
+
+When your review reveals a legal issue (whistleblower report, conflict of interest, anti-bribery exposure), you hand off to Legal via a case capsule. The capsule carries the HR context without leaking the employee's medical history, protected-characteristic data, or confidential HR files.
+
+## Vault principles
+
+- **Redaction is mandatory.** Every field has a redaction rule; no field carries unredacted personal data unless explicitly required.
+- **Privilege is explicit.** Mandatory `attorney_client_privilege` and `work_product_doctrine` labels control what can be disclosed downstream.
+- **One human owner.** Every handoff names a single `decision_owner` (a real person's title or role) who is accountable for the next irreversible action.
+- **Refusal by default.** The case capsule carries a `do_not_do_list` — explicit, non-empty actions that are forbidden until human approval.
+
+## Cross-references
+
+- [`SKILL.md`](SKILL.md) — the skill prompt and scaffold for case-capsule composition
+- [`references/capsule-schema.md`](references/capsule-schema.md) — 30-field specification, redaction rules, worked example, and validation checklist
+- [`docs/architecture/legal-hr-agent-communication.md`](/docs/architecture/legal-hr-agent-communication.md) — cross-functional coordination principles, case capsule as the only channel, audit trail
+
+---
+
+*The case capsule is part of the vanguard frontier's cross-functional protocol layer. It enables agentic coordination that survives audit and legal scrutiny.*

package/skills/cross-functional/legal-hr-case-capsule/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: legal-hr-case-capsule
+description: Use this skill when a Legal or HR agent must hand a matter to another agent and the context, uncertainty, evidence quality, privilege posture, and privacy posture must survive the handoff. It defines the shared legal-hr-case-capsule — a controlled, auditable exchange record with redacted identifiers, risk labels, privilege and privacy labels, a decision-owner field, and an explicit do-not-do list. It does not give legal or HR advice and does not authorize any action.
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-05-18"
+  category: compliance
+  lifecycle: experimental
+---
+
+# Legal-HR Case Capsule
+
+## Purpose
+This skill defines the **legal-hr-case-capsule** — the single structured record
+that Legal and HR agents exchange when a matter crosses an agent boundary. The
+capsule exists so that no agent works in a silo, no context is lost in a
+handoff, and every cross-domain exchange is auditable. It is a data contract,
+not a decision: a capsule never approves, denies, or directs an action. It
+carries facts, uncertainty, risk posture, and an explicit decision owner.
+
+## When to use
+- A maestro agent routes a matter to one or more specialist agents.
+- A specialist agent escalates a matter that has crossed into another domain.
+- Any matter touches both Legal and HR risk and must be reviewed in parallel.
+- A matter must be paused and escalated to a human owner.
+
+## Core rules
+- Every cross-agent handoff MUST be expressed as a capsule. No free-form
+  agent-to-agent chatter.
+- Every capsule MUST name exactly one `decision_owner` (an accountable human)
+  and exactly one `primary_agent`.
+- Every capsule MUST carry a `do_not_do_list`. An empty list is not acceptable;
+  if nothing is prohibited, the capsule is not ready to send.
+- Every capsule MUST label `privilege_sensitivity` and `privacy_sensitivity`.
+- Identifiers MUST be redacted to the minimum necessary. Use role and
+  business-unit references, not names, government IDs, or contact details.
+- A capsule records uncertainty honestly: `assumptions`, `inferences`, and
+  `missing_evidence` are mandatory fields, not optional.
+- A capsule never states "this is legal", "this is compliant", or "this action
+  is approved". `risk_rating` uses risk language only.
+- High-risk cross-domain capsules MUST set `escalation_required: true` and
+  `recommended_next_action` to a pause-and-escalate posture unless documented
+  controls already exist.
+
+## Capsule field set
+The capsule has 30 required fields. See
+[references/capsule-schema.md](references/capsule-schema.md) for the full field
+definitions, allowed values, and redaction rules. Summary:
+
+- Identity and routing: `case_id`, `source_agent`, `receiving_agent`,
+  `primary_agent`, `secondary_agents`, `matter_type`,
+  `employee_or_party_identifiers_redacted`, `jurisdiction_or_location_if_known`,
+  `business_unit`, `timeline`.
+- Evidence discipline: `facts`, `allegations`, `assumptions`, `inferences`,
+  `missing_evidence`, `evidence_quality`.
+- Risk posture: `risk_rating`, `privilege_sensitivity`, `privacy_sensitivity`,
+  `retaliation_risk`, `discrimination_or_harassment_risk`, `regulatory_risk`,
+  `litigation_hold_needed`, `data_minimization_notes`.
+- Ownership and action: `decision_owner`, `human_approval_required`,
+  `escalation_required`, `recommended_next_action`, `do_not_do_list`,
+  `audit_log_summary`.
+
+## References
+Load only when needed:
+- [Capsule schema and redaction rules](references/capsule-schema.md) — full
+  field-by-field contract, allowed values, and worked example.
+
+## Security notes
+- The capsule is a minimum-necessary record. Never widen it to carry medical
+  records, government IDs, credentials, privileged email text, or
+  protected-class data beyond what the matter strictly requires.
+- A capsule that would extend the circulation of privileged or investigation
+  material must be narrowed before it is sent; flag privilege explicitly.
+- The capsule never authorizes action. Any field that reads as a directive to
+  terminate, discipline, settle, file, notify a regulator, or send an employee
+  communication is a defect — rewrite it as a recommendation with a named human
+  owner.

package/skills/cross-functional/legal-hr-case-capsule/metadata.json

@@ -0,0 +1,19 @@
+{
+  "id": "legal-hr-case-capsule",
+  "name": "Legal-HR Case Capsule",
+  "type": "skill",
+  "provider": "generic",
+  "harnesses": ["codex", "claude-code", "cursor", "gemini", "kiro", "other"],
+  "summary": "Shared, auditable handoff contract for Legal and HR agents — a redacted case capsule carrying facts, uncertainty, evidence quality, risk labels, privilege and privacy posture, a named decision owner, and an explicit do-not-do list. Does not give legal or HR advice.",
+  "source_type": "original",
+  "official_docs": [
+    "https://www.nist.gov/privacy-framework",
+    "https://www.eeoc.gov",
+    "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+  ],
+  "security_notes": "Defines a minimum-necessary handoff record; never carries medical records, government IDs, credentials, privileged email text, or protected-class data beyond what the matter requires. Never authorizes action; flags privilege and privacy posture and routes decisions to a named human owner.",
+  "last_verified": "2026-05-18",
+  "path": "skills/cross-functional/legal-hr-case-capsule",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}