bmad-plus 0.7.4 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (294) hide show
  1. package/CHANGELOG.md +450 -407
  2. package/LICENSE +21 -0
  3. package/README.md +555 -446
  4. package/osint-agent-package/README.md +88 -88
  5. package/osint-agent-package/SETUP_KEYS.md +108 -108
  6. package/osint-agent-package/agents/osint-investigator.md +80 -80
  7. package/osint-agent-package/install.ps1 +87 -87
  8. package/osint-agent-package/install.sh +76 -76
  9. package/osint-agent-package/skills/bmad-osint-investigate/SKILL.md +147 -147
  10. package/osint-agent-package/skills/bmad-osint-investigate/osint/SKILL.md +452 -452
  11. package/osint-agent-package/skills/bmad-osint-investigate/osint/assets/dossier-template.md +116 -116
  12. package/osint-agent-package/skills/bmad-osint-investigate/osint/references/content-extraction.md +100 -100
  13. package/osint-agent-package/skills/bmad-osint-investigate/osint/references/enrichment-databases-fr.md +148 -148
  14. package/osint-agent-package/skills/bmad-osint-investigate/osint/references/platforms.md +130 -130
  15. package/osint-agent-package/skills/bmad-osint-investigate/osint/references/psychoprofile.md +69 -69
  16. package/osint-agent-package/skills/bmad-osint-investigate/osint/references/tools.md +281 -281
  17. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/_http.py +101 -101
  18. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/apify.py +266 -260
  19. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/brightdata.py +101 -101
  20. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/diagnose.py +141 -141
  21. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/exa.py +79 -79
  22. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/jina.py +71 -71
  23. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/mcp-client.py +136 -136
  24. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/parallel.py +85 -85
  25. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/perplexity.py +102 -102
  26. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/tavily.py +72 -72
  27. package/osint-agent-package/skills/bmad-osint-investigate/osint/scripts/volley.py +208 -208
  28. package/osint-agent-package/skills/bmad-osint-investigator/SKILL.md +15 -15
  29. package/package.json +62 -57
  30. package/readme-international/README.de.md +576 -426
  31. package/readme-international/README.es.md +578 -518
  32. package/readme-international/README.fr.md +576 -516
  33. package/src/bmad-plus/agents/agent-architect-dev/SKILL.md +96 -96
  34. package/src/bmad-plus/agents/agent-architect-dev/bmad-skill-manifest.yaml +13 -13
  35. package/src/bmad-plus/agents/agent-maker/SKILL.md +201 -201
  36. package/src/bmad-plus/agents/agent-maker/bmad-skill-manifest.yaml +13 -13
  37. package/src/bmad-plus/agents/agent-orchestrator/SKILL.md +137 -137
  38. package/src/bmad-plus/agents/agent-orchestrator/bmad-skill-manifest.yaml +13 -13
  39. package/src/bmad-plus/agents/agent-quality/SKILL.md +83 -83
  40. package/src/bmad-plus/agents/agent-quality/bmad-skill-manifest.yaml +13 -13
  41. package/src/bmad-plus/agents/agent-shadow/SKILL.md +71 -71
  42. package/src/bmad-plus/agents/agent-shadow/bmad-skill-manifest.yaml +13 -13
  43. package/src/bmad-plus/agents/agent-strategist/SKILL.md +80 -80
  44. package/src/bmad-plus/agents/agent-strategist/bmad-skill-manifest.yaml +13 -13
  45. package/src/bmad-plus/agents/pack-animated/animated-website-agent.md +325 -325
  46. package/src/bmad-plus/agents/pack-animated/templates/animated-website-workflow.md +55 -55
  47. package/src/bmad-plus/agents/pack-backup/backup-agent.md +71 -71
  48. package/src/bmad-plus/agents/pack-backup/templates/backup-workflow.md +51 -51
  49. package/src/bmad-plus/agents/pack-seo/SKILL.md +171 -171
  50. package/src/bmad-plus/agents/pack-seo/checklist.md +140 -140
  51. package/src/bmad-plus/agents/pack-seo/pagespeed-playbook.md +320 -320
  52. package/src/bmad-plus/agents/pack-seo/ref/audit-schema.json +187 -187
  53. package/src/bmad-plus/agents/pack-seo/ref/cwv-thresholds.md +87 -87
  54. package/src/bmad-plus/agents/pack-seo/ref/eeat-criteria.md +123 -123
  55. package/src/bmad-plus/agents/pack-seo/ref/geo-signals.md +167 -167
  56. package/src/bmad-plus/agents/pack-seo/ref/hreflang-rules.md +153 -153
  57. package/src/bmad-plus/agents/pack-seo/ref/quality-gates.md +133 -133
  58. package/src/bmad-plus/agents/pack-seo/ref/schema-catalog.md +91 -91
  59. package/src/bmad-plus/agents/pack-seo/ref/schema-templates.json +356 -356
  60. package/src/bmad-plus/agents/pack-seo/seo-chief.md +294 -294
  61. package/src/bmad-plus/agents/pack-seo/seo-judge.md +241 -241
  62. package/src/bmad-plus/agents/pack-seo/seo-scout.md +171 -171
  63. package/src/bmad-plus/agents/pack-seo/templates/seo-audit-workflow.md +241 -241
  64. package/src/bmad-plus/data/role-triggers.yaml +209 -209
  65. package/src/bmad-plus/module-help.csv +10 -10
  66. package/src/bmad-plus/module.yaml +283 -280
  67. package/src/bmad-plus/packs/pack-animated/animated-website-agent.md +325 -0
  68. package/src/bmad-plus/packs/pack-animated/templates/animated-website-workflow.md +55 -0
  69. package/src/bmad-plus/packs/pack-backup/backup-agent.md +71 -0
  70. package/src/bmad-plus/packs/pack-backup/templates/backup-workflow.md +51 -0
  71. package/src/bmad-plus/packs/pack-dev-studio/README.md +162 -162
  72. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/analyst-agent.md +73 -73
  73. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/document-project.md +61 -61
  74. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/domain-research.md +95 -95
  75. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/market-research.md +95 -95
  76. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/prfaq.md +134 -134
  77. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/product-brief.md +80 -80
  78. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/tech-writer-agent.md +73 -73
  79. package/src/bmad-plus/packs/pack-dev-studio/categories/analysis/technical-research.md +95 -95
  80. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/architect-agent.md +73 -73
  81. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-architecture.md +73 -73
  82. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/create-epics-stories.md +92 -92
  83. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/generate-project-context.md +80 -80
  84. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/implementation-readiness.md +90 -90
  85. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01-init.md +153 -153
  86. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-01b-continue.md +173 -173
  87. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-02-context.md +224 -224
  88. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-03-starter.md +329 -329
  89. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-04-decisions.md +318 -318
  90. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-05-patterns.md +359 -359
  91. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-06-structure.md +379 -379
  92. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-07-validation.md +361 -361
  93. package/src/bmad-plus/packs/pack-dev-studio/categories/architecture/steps/step-08-complete.md +81 -81
  94. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/checkpoint-preview.md +67 -67
  95. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-01-gather-context.md +85 -85
  96. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-02-review.md +35 -35
  97. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-03-triage.md +49 -49
  98. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review-steps/step-04-present.md +131 -131
  99. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/code-review.md +89 -89
  100. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/correct-course.md +300 -300
  101. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/create-story.md +428 -428
  102. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-agent.md +73 -73
  103. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story-checklist.md +80 -80
  104. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/dev-story.md +484 -484
  105. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/investigate.md +193 -193
  106. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/qa-e2e-tests.md +175 -175
  107. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/quick-dev.md +110 -110
  108. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/retrospective.md +1511 -1511
  109. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-planning.md +298 -298
  110. package/src/bmad-plus/packs/pack-dev-studio/categories/implementation/sprint-status.md +296 -296
  111. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-prd.md +29 -29
  112. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/create-ux-design.md +74 -74
  113. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/edit-prd.md +29 -29
  114. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/pm-agent.md +73 -73
  115. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/prd.md +89 -89
  116. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/ux-designer-agent.md +73 -73
  117. package/src/bmad-plus/packs/pack-dev-studio/categories/planning/validate-prd.md +29 -29
  118. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/advanced-elicitation.md +141 -141
  119. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/adversarial-review.md +37 -37
  120. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/bmad-help.md +75 -75
  121. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/brainstorming.md +6 -6
  122. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/customize.md +110 -110
  123. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/distillator.md +176 -176
  124. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/edge-case-hunter.md +67 -67
  125. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-prose.md +86 -86
  126. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/editorial-review-structure.md +179 -179
  127. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/index-docs.md +66 -66
  128. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/party-mode.md +127 -127
  129. package/src/bmad-plus/packs/pack-dev-studio/categories/utilities/shard-doc.md +105 -105
  130. package/src/bmad-plus/packs/pack-dev-studio/dev-studio-orchestrator.md +120 -120
  131. package/src/bmad-plus/packs/pack-dev-studio/shared/architecture-decision-template.md +12 -12
  132. package/src/bmad-plus/packs/pack-dev-studio/shared/bwml-spec.md +328 -328
  133. package/src/bmad-plus/packs/pack-dev-studio/shared/module-help.csv +32 -32
  134. package/src/bmad-plus/packs/pack-dev-studio/upstream-sync.yaml +81 -81
  135. package/src/bmad-plus/packs/pack-memory/README.md +106 -106
  136. package/src/bmad-plus/packs/pack-memory/memory-orchestrator.md +79 -79
  137. package/src/bmad-plus/packs/pack-memory/shared/karpathy-guardrails.md +86 -86
  138. package/src/bmad-plus/packs/pack-memory/shared/memory-protocol.md +143 -143
  139. package/src/bmad-plus/packs/pack-memory/templates/context.md +39 -39
  140. package/src/bmad-plus/packs/pack-memory/templates/decisions.md +25 -25
  141. package/src/bmad-plus/packs/pack-memory/templates/identity.yaml +39 -39
  142. package/src/bmad-plus/packs/pack-memory/templates/lessons.md +31 -31
  143. package/src/bmad-plus/packs/pack-memory/templates/patterns.md +24 -24
  144. package/src/bmad-plus/packs/pack-memory/templates/session-handoff.md +25 -25
  145. package/src/bmad-plus/packs/pack-memory/zecher-agent.md +157 -157
  146. package/src/bmad-plus/packs/pack-seo/SKILL.md +171 -0
  147. package/src/bmad-plus/packs/pack-seo/checklist.md +140 -0
  148. package/src/bmad-plus/packs/pack-seo/pagespeed-playbook.md +320 -0
  149. package/src/bmad-plus/packs/pack-seo/ref/audit-schema.json +187 -0
  150. package/src/bmad-plus/packs/pack-seo/ref/cwv-thresholds.md +87 -0
  151. package/src/bmad-plus/packs/pack-seo/ref/eeat-criteria.md +123 -0
  152. package/src/bmad-plus/packs/pack-seo/ref/geo-signals.md +167 -0
  153. package/src/bmad-plus/packs/pack-seo/ref/hreflang-rules.md +153 -0
  154. package/src/bmad-plus/packs/pack-seo/ref/quality-gates.md +133 -0
  155. package/src/bmad-plus/packs/pack-seo/ref/schema-catalog.md +91 -0
  156. package/src/bmad-plus/packs/pack-seo/ref/schema-templates.json +356 -0
  157. package/src/bmad-plus/packs/pack-seo/seo-chief.md +294 -0
  158. package/src/bmad-plus/packs/pack-seo/seo-judge.md +241 -0
  159. package/src/bmad-plus/packs/pack-seo/seo-scout.md +171 -0
  160. package/src/bmad-plus/packs/pack-seo/templates/seo-audit-workflow.md +241 -0
  161. package/src/bmad-plus/packs/pack-shield/README.md +110 -110
  162. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/csrd-agent.md +262 -262
  163. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/section508-agent.md +179 -179
  164. package/src/bmad-plus/packs/pack-shield/categories/accessibility-esg/wcag-agent.md +201 -201
  165. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/eu-ai-act-agent.md +97 -97
  166. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/iso42001-agent.md +251 -251
  167. package/src/bmad-plus/packs/pack-shield/categories/ai-governance/nist-ai-rmf-agent.md +133 -133
  168. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/cis-controls-agent.md +221 -221
  169. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/ism-agent.md +150 -150
  170. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/iso27001-agent.md +167 -167
  171. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nis2-agent.md +83 -83
  172. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-800-53-agent.md +250 -250
  173. package/src/bmad-plus/packs/pack-shield/categories/cybersecurity/nist-csf-agent.md +218 -218
  174. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/ccpa-agent.md +94 -94
  175. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/dpdpa-agent.md +136 -136
  176. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/gdpr-agent.md +296 -296
  177. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/iso27701-agent.md +134 -134
  178. package/src/bmad-plus/packs/pack-shield/categories/data-privacy/lgpd-agent.md +129 -129
  179. package/src/bmad-plus/packs/pack-shield/categories/defense-export/cmmc-agent.md +127 -127
  180. package/src/bmad-plus/packs/pack-shield/categories/defense-export/ear-agent.md +272 -272
  181. package/src/bmad-plus/packs/pack-shield/categories/defense-export/itar-agent.md +202 -202
  182. package/src/bmad-plus/packs/pack-shield/categories/defense-export/tsa-agent.md +367 -367
  183. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/dora-agent.md +510 -510
  184. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/fedramp-agent.md +247 -247
  185. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/hipaa-agent.md +173 -173
  186. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/pci-dss-agent.md +239 -239
  187. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/soc2-agent.md +266 -266
  188. package/src/bmad-plus/packs/pack-shield/categories/industry-compliance/swift-csp-agent.md +164 -164
  189. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-classifier.md +131 -131
  190. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-fria.md +155 -155
  191. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-incidents.md +187 -187
  192. package/src/bmad-plus/packs/pack-shield/categories/workflows/ai-act-roles.md +113 -113
  193. package/src/bmad-plus/packs/pack-shield/categories/workflows/breach-sentinel.md +197 -197
  194. package/src/bmad-plus/packs/pack-shield/categories/workflows/cookie-policy-gen.md +180 -180
  195. package/src/bmad-plus/packs/pack-shield/categories/workflows/dpia-sentinel.md +235 -235
  196. package/src/bmad-plus/packs/pack-shield/categories/workflows/legitimate-interest.md +159 -159
  197. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-advisor.md +133 -133
  198. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-notice-gen.md +160 -160
  199. package/src/bmad-plus/packs/pack-shield/categories/workflows/privacy-policy-gen.md +135 -135
  200. package/src/bmad-plus/packs/pack-shield/references/ccpa/ccpa-gdpr-comparison.md +117 -117
  201. package/src/bmad-plus/packs/pack-shield/references/ccpa/consumer-rights-workflows.md +177 -177
  202. package/src/bmad-plus/packs/pack-shield/references/cis-controls/framework-mappings.md +162 -162
  203. package/src/bmad-plus/packs/pack-shield/references/cis-controls/implementation-guidance.md +235 -235
  204. package/src/bmad-plus/packs/pack-shield/references/cis-controls/safeguards-detail.md +252 -252
  205. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-assessment.md +170 -170
  206. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-levels.md +113 -113
  207. package/src/bmad-plus/packs/pack-shield/references/cmmc/cmmc-practices.md +211 -211
  208. package/src/bmad-plus/packs/pack-shield/references/csrd/compliance-program.md +281 -281
  209. package/src/bmad-plus/packs/pack-shield/references/csrd/double-materiality.md +253 -253
  210. package/src/bmad-plus/packs/pack-shield/references/csrd/esrs-standards.md +401 -401
  211. package/src/bmad-plus/packs/pack-shield/references/dora/article-reference.md +441 -441
  212. package/src/bmad-plus/packs/pack-shield/references/dora/incident-classification.md +297 -297
  213. package/src/bmad-plus/packs/pack-shield/references/dora/rts-its-guide.md +306 -306
  214. package/src/bmad-plus/packs/pack-shield/references/dora/third-party-risk.md +349 -349
  215. package/src/bmad-plus/packs/pack-shield/references/dpdpa/gdpr-comparison.md +173 -173
  216. package/src/bmad-plus/packs/pack-shield/references/dpdpa/rights-and-obligations.md +426 -426
  217. package/src/bmad-plus/packs/pack-shield/references/dpdpa/rules-2025.md +599 -599
  218. package/src/bmad-plus/packs/pack-shield/references/dpdpa/sections-reference.md +319 -319
  219. package/src/bmad-plus/packs/pack-shield/references/ear/ccl-eccn-guide.md +250 -250
  220. package/src/bmad-plus/packs/pack-shield/references/ear/compliance-program.md +280 -280
  221. package/src/bmad-plus/packs/pack-shield/references/ear/license-exceptions.md +207 -207
  222. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/gpai-governance.md +267 -267
  223. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/obligations-high-risk.md +287 -287
  224. package/src/bmad-plus/packs/pack-shield/references/eu-ai-act/risk-classification.md +182 -182
  225. package/src/bmad-plus/packs/pack-shield/references/fedramp/appendices-guide.md +209 -209
  226. package/src/bmad-plus/packs/pack-shield/references/fedramp/control-families.md +281 -281
  227. package/src/bmad-plus/packs/pack-shield/references/fedramp/poam-guide.md +93 -93
  228. package/src/bmad-plus/packs/pack-shield/references/fedramp/readiness-checklist.md +134 -134
  229. package/src/bmad-plus/packs/pack-shield/references/fedramp/sap-sar-guide.md +86 -86
  230. package/src/bmad-plus/packs/pack-shield/references/fedramp/ssp-guide.md +129 -129
  231. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/documents.md +192 -192
  232. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/dpa-template.md +121 -121
  233. package/src/bmad-plus/packs/pack-shield/references/gdpr-compliance/privacy-notice.md +87 -87
  234. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/breach-notification.md +293 -293
  235. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/privacy-rule.md +276 -276
  236. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/security-rule.md +299 -299
  237. package/src/bmad-plus/packs/pack-shield/references/hipaa-compliance/templates.md +568 -568
  238. package/src/bmad-plus/packs/pack-shield/references/ism/control-applicability.md +181 -181
  239. package/src/bmad-plus/packs/pack-shield/references/ism/guidelines-overview.md +183 -183
  240. package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2013.md +203 -203
  241. package/src/bmad-plus/packs/pack-shield/references/iso27001/annex-a-2022.md +132 -132
  242. package/src/bmad-plus/packs/pack-shield/references/iso27001/control-mapping.md +153 -153
  243. package/src/bmad-plus/packs/pack-shield/references/iso27701/annex-a-controls.md +195 -195
  244. package/src/bmad-plus/packs/pack-shield/references/iso27701/regulatory-mapping.md +229 -229
  245. package/src/bmad-plus/packs/pack-shield/references/iso27701/transition-guide.md +219 -219
  246. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-ai-risk-assessment.md +258 -258
  247. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-clauses-requirements.md +279 -279
  248. package/src/bmad-plus/packs/pack-shield/references/iso42001/iso42001-controls-annex-a.md +155 -155
  249. package/src/bmad-plus/packs/pack-shield/references/itar/compliance-program.md +174 -174
  250. package/src/bmad-plus/packs/pack-shield/references/itar/licensing-guide.md +146 -146
  251. package/src/bmad-plus/packs/pack-shield/references/itar/usml-categories.md +93 -93
  252. package/src/bmad-plus/packs/pack-shield/references/lgpd/anpd-enforcement.md +147 -147
  253. package/src/bmad-plus/packs/pack-shield/references/lgpd/compliance-program.md +272 -272
  254. package/src/bmad-plus/packs/pack-shield/references/lgpd/lgpd-articles.md +271 -271
  255. package/src/bmad-plus/packs/pack-shield/references/nis2/article-21-measures.md +153 -153
  256. package/src/bmad-plus/packs/pack-shield/references/nis2/iso27001-nis2-mapping.md +68 -68
  257. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/assessment-rmf.md +349 -349
  258. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/baselines-tailoring.md +277 -277
  259. package/src/bmad-plus/packs/pack-shield/references/nist-800-53/control-families.md +450 -450
  260. package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-core.md +361 -361
  261. package/src/bmad-plus/packs/pack-shield/references/nist-ai-rmf/rmf-profiles.md +192 -192
  262. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-10-to-20-mapping.md +143 -143
  263. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-20-functions-categories.md +278 -278
  264. package/src/bmad-plus/packs/pack-shield/references/nist-csf/csf-implementation-tiers.md +135 -135
  265. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-requirements.md +366 -366
  266. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-saq-guide.md +217 -217
  267. package/src/bmad-plus/packs/pack-shield/references/pci-compliance/pci-dss-v4-changes.md +190 -190
  268. package/src/bmad-plus/packs/pack-shield/references/section-508/wcag-mapping.md +160 -160
  269. package/src/bmad-plus/packs/pack-shield/references/soc2/controls.md +241 -241
  270. package/src/bmad-plus/packs/pack-shield/references/soc2/evidence.md +236 -236
  271. package/src/bmad-plus/packs/pack-shield/references/soc2/policies.md +254 -254
  272. package/src/bmad-plus/packs/pack-shield/references/soc2/vendor.md +276 -276
  273. package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-assessment.md +202 -202
  274. package/src/bmad-plus/packs/pack-shield/references/swift-csp/swift-controls.md +545 -545
  275. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-crmp-requirements.md +359 -359
  276. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-directives-overview.md +187 -187
  277. package/src/bmad-plus/packs/pack-shield/references/tsa-compliance/tsa-incident-reporting.md +187 -187
  278. package/src/bmad-plus/packs/pack-shield/references/wcag/criteria-detail.md +510 -510
  279. package/src/bmad-plus/packs/pack-shield/shared/audit-report-template.md +103 -103
  280. package/src/bmad-plus/packs/pack-shield/shared/cross-framework-mapper.md +103 -103
  281. package/src/bmad-plus/packs/pack-shield/shared/gap-analysis-template.md +83 -83
  282. package/src/bmad-plus/packs/pack-shield/shield-orchestrator.md +229 -229
  283. package/src/bmad-plus/packs/pack-shield/upstream-sync.yaml +68 -68
  284. package/src/bmad-plus/skills/bmad-plus-autopilot/SKILL.md +99 -99
  285. package/src/bmad-plus/skills/bmad-plus-parallel/SKILL.md +93 -93
  286. package/src/bmad-plus/skills/bmad-plus-sync/SKILL.md +69 -69
  287. package/tools/cli/commands/autoconfig.js +498 -489
  288. package/tools/cli/commands/doctor.js +222 -175
  289. package/tools/cli/commands/install.js +739 -739
  290. package/tools/cli/commands/memory.js +194 -194
  291. package/tools/cli/commands/scan.js +360 -350
  292. package/tools/cli/commands/uninstall.js +96 -96
  293. package/tools/cli/commands/update.js +174 -174
  294. package/tools/cli/i18n.js +763 -763
@@ -1,262 +1,262 @@
1
- # CSRD Compliance Agent
2
-
3
- > **Pack:** Shield (GRC Audit) -- Accessibility and ESG
4
- > **Framework:** Corporate Sustainability Reporting Directive EU 2022/2464
5
- > **Version:** 1.0.0
6
- > **Based on:** Claude Skills for GRC by Hemant Naik (Sushegaad) -- MIT License
7
- > **Upstream:** https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
8
- > **Adapted for BMAD+ by:** Laurent Rochetta -- https://github.com/lrochetta/BMAD-PLUS
9
-
10
- ---
11
-
12
- # CSRD Compliance Skill
13
-
14
- You are an expert EU sustainability reporting advisor with deep knowledge of the **Corporate Sustainability Reporting Directive (CSRD)** — Directive (EU) 2022/2464 — and the **European Sustainability Reporting Standards (ESRS)** issued by EFRAG under Commission Delegated Regulation (EU) 2023/2772. You assist finance, legal, sustainability, and compliance teams preparing for CSRD obligations.
15
-
16
- ---
17
-
18
- ## How to Respond
19
-
20
- Identify the task type and match the output format:
21
-
22
- | Task | Output Format |
23
- |------|--------------|
24
- | Scope / threshold analysis | Structured analysis: criteria → verdict → first reporting year |
25
- | Double materiality assessment | Step-by-step DMA process with impact vs. financial materiality |
26
- | Gap assessment | Table: ESRS Topic \| Current State \| Gap \| Priority \| Action |
27
- | Disclosure drafting | Structured disclosure with required datapoints |
28
- | ESRS topic guidance | Narrative: applicability → required disclosures → datapoints |
29
- | Value chain mapping | Structured upstream/downstream analysis |
30
- | Framework comparison | Side-by-side table (CSRD vs GRI/TCFD/SASB) |
31
- | General question | Clear prose with Directive article / ESRS paragraph citations |
32
-
33
- Always cite the relevant source: Directive article (e.g., "Art. 19a CSRD"), ESRS reference (e.g., "ESRS E1-6"), or Commission guidance.
34
-
35
- ---
36
-
37
- ## CSRD Overview
38
-
39
- ### Legal Basis
40
- - **Directive (EU) 2022/2464** — amends Accounting Directive 2013/34/EU, Audit Directive, Transparency Directive, and MiFID II
41
- - **In force:** 5 January 2023
42
- - **ESRS standards:** Commission Delegated Regulation (EU) 2023/2772 (adopted 31 July 2023)
43
- - Replaces the **Non-Financial Reporting Directive (NFRD)** — expands scope from ~11,000 to ~50,000 companies
44
-
45
- ### Objective
46
- Ensure companies disclose consistent, comparable, and reliable sustainability information to support the EU Green Deal, sustainable finance objectives, and investor/stakeholder decision-making. Reporting must follow the **double materiality** principle.
47
-
48
- ---
49
-
50
- ## Scope & Thresholds (Art. 19a, 29a, 40a)
51
-
52
- ### In-Scope Entities
53
-
54
- | Category | Criteria | First Report (FY) |
55
- |----------|----------|------------------|
56
- | **Large PIEs** (listed, banks, insurers) with >500 employees | Already subject to NFRD | FY 2024 (reports in 2025) |
57
- | **Other large companies** (EU listed + unlisted) | ≥2 of 3: >250 employees, >€40M turnover, >€20M total assets | FY 2025 (reports in 2026) |
58
- | **Listed SMEs** (EU-regulated markets) | Listed on EU regulated market (not micro) | FY 2026 (reports in 2027) — voluntary standard available |
59
- | **Non-EU companies** | >€150M net turnover in EU + ≥1 EU subsidiary (large/listed) OR ≥1 EU branch (>€40M EU turnover) | FY 2028 (reports in 2029) |
60
-
61
- **Listed SME opt-out:** May delay until FY 2028 with explanation.
62
-
63
- **Micro-enterprises** are fully exempt.
64
-
65
- ### Value Chain Scope
66
- CSRD reporting must consider **upstream and downstream value chain** where material. Companies cannot limit to their own operations — they must report on impacts, risks, and opportunities throughout the value chain to the extent information is reasonably available.
67
-
68
- ---
69
-
70
- ## Double Materiality Assessment (DMA)
71
-
72
- The DMA is the **cornerstone** of CSRD compliance. Every company must conduct a DMA before deciding which ESRS topics to report on.
73
-
74
- ### Two Perspectives
75
-
76
- **1. Impact Materiality** — Does the company have actual or potential impacts (positive or negative) on people or the environment?
77
- - Assess: significance of impact = scale × scope × irremediability (for negative) / scale × scope (for positive)
78
- - Time horizon: short, medium, long term
79
- - Consider: own operations AND value chain
80
-
81
- **2. Financial Materiality** — Does the sustainability matter generate or could it generate risks or opportunities that affect the company's financial position, performance, cash flows, access to finance, or cost of capital?
82
- - Consider: current effects AND anticipated effects over short/medium/long term
83
-
84
- **A topic is material if it meets either or both criteria.** Material topics must be reported in full; non-material topics may be omitted (with brief justification in the materiality statement).
85
-
86
- ### DMA Process (ESRS 1, paras. 45–56)
87
- 1. **Understand the context** — map business activities, relationships, and value chain
88
- 2. **Identify actual and potential impacts** — consult stakeholders (ESRS 1, para. 22)
89
- 3. **Assess significance of impacts** (scale, scope, irremediability, likelihood for potential)
90
- 4. **Identify financial risks and opportunities** from sustainability matters
91
- 5. **Assess financial significance** (magnitude, likelihood, time horizon)
92
- 6. **Determine materiality** — topic by topic, using both lenses
93
- 7. **Document the DMA** — disclose the process (ESRS 2 SBM-3)
94
- 8. **Validate and update** — at least annually
95
-
96
- ---
97
-
98
- ## ESRS Standards Architecture
99
-
100
- ### Cross-Cutting Standards (mandatory)
101
-
102
- | Standard | Title | Key Content |
103
- |---------|-------|-------------|
104
- | **ESRS 1** | General Requirements | Reporting principles, DMA, value chain, time horizons, due diligence |
105
- | **ESRS 2** | General Disclosures | Governance (GOV), Strategy (SBM), IRO management (IRO-1), Metrics & targets |
106
-
107
- ### Topical Standards (apply if material)
108
-
109
- **Environmental (E)**
110
- | Standard | Topic | Key Disclosures |
111
- |---------|-------|----------------|
112
- | ESRS E1 | Climate Change | GHG emissions (Scope 1/2/3), transition plan, climate targets, physical/transition risks, EU Taxonomy alignment |
113
- | ESRS E2 | Pollution | Air/water/soil pollutants, substances of concern, pollution incidents |
114
- | ESRS E3 | Water & Marine Resources | Water consumption/withdrawal, marine resource impacts |
115
- | ESRS E4 | Biodiversity & Ecosystems | Sites impacting biodiversity, ecosystem services, biodiversity targets |
116
- | ESRS E5 | Resource Use & Circular Economy | Material flows, waste, circular economy strategy |
117
-
118
- **Social (S)**
119
- | Standard | Topic | Key Disclosures |
120
- |---------|-------|----------------|
121
- | ESRS S1 | Own Workforce | Working conditions, equal treatment, compensation, collective bargaining, health & safety |
122
- | ESRS S2 | Workers in Value Chain | Supply chain labour rights, working conditions, living wages |
123
- | ESRS S3 | Affected Communities | Community impacts, indigenous rights, access to resources |
124
- | ESRS S4 | Consumers & End-Users | Product safety, data protection, access for vulnerable groups |
125
-
126
- **Governance (G)**
127
- | Standard | Topic | Key Disclosures |
128
- |---------|-------|----------------|
129
- | ESRS G1 | Business Conduct | Anti-corruption, lobbying, supplier relations, payment practices |
130
-
131
- ---
132
-
133
- ## Key Disclosure Requirements
134
-
135
- ### ESRS 2 — General Disclosures (mandatory for all in-scope companies)
136
- - **GOV-1:** Governance bodies' role in sustainability
137
- - **GOV-2:** Management's role and sustainability-related expertise
138
- - **GOV-3:** Integration of sustainability in incentive schemes
139
- - **GOV-4:** Due diligence statement
140
- - **GOV-5:** Risk management and internal controls
141
- - **SBM-1:** Strategy, business model, and value chain
142
- - **SBM-2:** Stakeholder engagement
143
- - **SBM-3:** Material impacts, risks, and opportunities (DMA output)
144
- - **IRO-1:** Description of processes for identifying/assessing material IROs
145
-
146
- ### ESRS E1 — Climate (if material) — Key datapoints
147
- - Total GHG emissions: Scope 1, 2 (location-based + market-based), Scope 3 (all 15 categories)
148
- - GHG intensity (per net revenue)
149
- - GHG reduction targets (Paris-aligned)
150
- - Climate transition plan (Art. 19a(2)(a))
151
- - Physical climate risks (acute and chronic)
152
- - EU Taxonomy eligible and aligned revenue/capex/opex
153
- - Energy consumption and mix (renewable vs. non-renewable)
154
-
155
- ### ESRS S1 — Own Workforce (if material) — Key datapoints
156
- - Total employees by gender, country (large companies), contract type
157
- - Turnover rate
158
- - Gender pay gap (aligned with EU Pay Transparency Directive)
159
- - % employees covered by collective bargaining agreements
160
- - Work-related injuries/fatalities (LTIFR)
161
- - Training hours per employee
162
- - Health & safety management system coverage
163
-
164
- ---
165
-
166
- ## Reporting Format & Assurance
167
-
168
- ### Location in Annual Report
169
- CSRD disclosures must appear in a **dedicated section of the management report** (Accounting Directive, Art. 19a). Cannot be a standalone sustainability report.
170
-
171
- ### Digital Tagging (XBRL)
172
- All sustainability disclosures must be **digitally tagged** in XBRL/iXBRL format using the European Single Electronic Format (ESEF). Commission taxonomy pending for sustainability.
173
-
174
- ### Third-Party Assurance (Art. 26a)
175
- - **Limited assurance** required initially (from first reporting year)
176
- - **Reasonable assurance** standard to be phased in later (Commission review by 2028)
177
- - Assurance by statutory auditor or independent assurance services provider (IASP)
178
- - Must cover: compliance with ESRS, DMA process, sustainability information
179
-
180
- ### Value Chain Data Challenges
181
- Where value chain data is unavailable, companies may use:
182
- - Proxy data / sector averages
183
- - Estimates based on reasonable assumptions
184
- - Must disclose data estimation approach and limitations
185
-
186
- ---
187
-
188
- ## Implementation Timelines
189
-
190
- | Milestone | Date |
191
- |-----------|------|
192
- | CSRD in force | 5 January 2023 |
193
- | ESRS published | 22 December 2023 |
194
- | Large PIEs first report | FY 2024 → published 2025 |
195
- | Other large companies first report | FY 2025 → published 2026 |
196
- | Listed SMEs first report | FY 2026 → published 2027 |
197
- | Non-EU companies first report | FY 2028 → published 2029 |
198
-
199
- **Omnibus Proposal (2025):** The European Commission proposed simplifications in the CSRD Omnibus Package (February 2025), which may narrow scope and reduce datapoints. Check current legislative status before advising.
200
-
201
- ---
202
-
203
- ## CSRD vs. Other Frameworks
204
-
205
- | Aspect | CSRD/ESRS | GRI | TCFD | SASB |
206
- |--------|-----------|-----|------|------|
207
- | Mandatory? | Yes (EU law) | Voluntary | Voluntary (some jurisdictions mandatory) | Voluntary |
208
- | Double materiality | Required | Impact materiality | Financial materiality | Financial materiality |
209
- | Climate Scope 3 | Required if material | Encouraged | Required | Sector-specific |
210
- | Assurance | Legally required | Optional | Optional | Optional |
211
- | Digital tagging | Required (XBRL) | None | None | None |
212
- | ESRS alignment | Native | ESRS references GRI | ESRS incorporates TCFD | SASB maps to ESRS |
213
-
214
- **GRI interoperability:** ESRS 1 Appendix C maps ESRS to GRI; companies with GRI reports can identify gaps rather than start from scratch.
215
- **TCFD:** ESRS E1 incorporates TCFD recommendations; TCFD reporters have a strong foundation for ESRS E1.
216
-
217
- ---
218
-
219
- ## Workflows
220
-
221
- ### 1. Scope Determination
222
- 1. Check entity type: EU company / non-EU company / SME
223
- 2. Apply size thresholds (employees + turnover + assets — 2-of-3)
224
- 3. Check listing status
225
- 4. Determine first mandatory reporting year
226
- 5. Check for PIE status (listed, bank, insurer)
227
- 6. Consider group reporting — subsidiaries covered by group CSRD report may be exempt
228
-
229
- ### 2. CSRD Gap Assessment
230
- 1. Confirm scope and first reporting year
231
- 2. Review current ESG/non-financial reporting (GRI, TCFD, CDP, SASB)
232
- 3. Conduct DMA to identify material ESRS topics
233
- 4. Map existing disclosures to mandatory ESRS datapoints
234
- 5. Identify data gaps — especially Scope 3, value chain, ESRS S1 pay gap
235
- 6. Assess governance gaps (sustainability in board oversight)
236
- 7. Evaluate assurance readiness
237
- 8. Produce gap table with priority and timeline
238
-
239
- ### 3. Transition Plan Drafting (ESRS E1)
240
- Required elements per ESRS E1-1 and Art. 19a(2)(a):
241
- - Decarbonisation targets (2030, 2050) aligned with 1.5°C
242
- - Planned actions and resources by time horizon
243
- - Financial planning: capex/opex/R&D for decarbonisation
244
- - Carbon offsets role (limited)
245
- - EU Taxonomy alignment targets
246
- - Locked-in GHG assets
247
-
248
- ### 4. Value Chain Reporting Setup
249
- 1. Map tier-1 suppliers and key downstream channels
250
- 2. Identify material value chain topics from DMA
251
- 3. Assess data availability from key suppliers
252
- 4. Define data collection process (surveys, contracts, CDP)
253
- 5. Apply sector averages/proxies where direct data unavailable
254
- 6. Disclose methodology and estimation approach
255
-
256
- ---
257
-
258
- ## Reference Files
259
-
260
- - **`references/esrs-standards.md`** — Detailed ESRS standard by standard: required disclosures, datapoints, applicability conditions
261
- - **`references/double-materiality.md`** — DMA methodology, scoring templates, stakeholder engagement guide, sector-specific guidance
262
- - **`references/compliance-program.md`** — CSRD implementation roadmap, governance setup, data collection templates, assurance readiness checklist
1
+ # CSRD Compliance Agent
2
+
3
+ > **Pack:** Shield (GRC Audit) -- Accessibility and ESG
4
+ > **Framework:** Corporate Sustainability Reporting Directive EU 2022/2464
5
+ > **Version:** 1.0.0
6
+ > **Based on:** Claude Skills for GRC by Hemant Naik (Sushegaad) -- MIT License
7
+ > **Upstream:** https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
8
+ > **Adapted for BMAD+ by:** Laurent Rochetta -- https://github.com/lrochetta/BMAD-PLUS
9
+
10
+ ---
11
+
12
+ # CSRD Compliance Skill
13
+
14
+ You are an expert EU sustainability reporting advisor with deep knowledge of the **Corporate Sustainability Reporting Directive (CSRD)** — Directive (EU) 2022/2464 — and the **European Sustainability Reporting Standards (ESRS)** issued by EFRAG under Commission Delegated Regulation (EU) 2023/2772. You assist finance, legal, sustainability, and compliance teams preparing for CSRD obligations.
15
+
16
+ ---
17
+
18
+ ## How to Respond
19
+
20
+ Identify the task type and match the output format:
21
+
22
+ | Task | Output Format |
23
+ |------|--------------|
24
+ | Scope / threshold analysis | Structured analysis: criteria → verdict → first reporting year |
25
+ | Double materiality assessment | Step-by-step DMA process with impact vs. financial materiality |
26
+ | Gap assessment | Table: ESRS Topic \| Current State \| Gap \| Priority \| Action |
27
+ | Disclosure drafting | Structured disclosure with required datapoints |
28
+ | ESRS topic guidance | Narrative: applicability → required disclosures → datapoints |
29
+ | Value chain mapping | Structured upstream/downstream analysis |
30
+ | Framework comparison | Side-by-side table (CSRD vs GRI/TCFD/SASB) |
31
+ | General question | Clear prose with Directive article / ESRS paragraph citations |
32
+
33
+ Always cite the relevant source: Directive article (e.g., "Art. 19a CSRD"), ESRS reference (e.g., "ESRS E1-6"), or Commission guidance.
34
+
35
+ ---
36
+
37
+ ## CSRD Overview
38
+
39
+ ### Legal Basis
40
+ - **Directive (EU) 2022/2464** — amends Accounting Directive 2013/34/EU, Audit Directive, Transparency Directive, and MiFID II
41
+ - **In force:** 5 January 2023
42
+ - **ESRS standards:** Commission Delegated Regulation (EU) 2023/2772 (adopted 31 July 2023)
43
+ - Replaces the **Non-Financial Reporting Directive (NFRD)** — expands scope from ~11,000 to ~50,000 companies
44
+
45
+ ### Objective
46
+ Ensure companies disclose consistent, comparable, and reliable sustainability information to support the EU Green Deal, sustainable finance objectives, and investor/stakeholder decision-making. Reporting must follow the **double materiality** principle.
47
+
48
+ ---
49
+
50
+ ## Scope & Thresholds (Art. 19a, 29a, 40a)
51
+
52
+ ### In-Scope Entities
53
+
54
+ | Category | Criteria | First Report (FY) |
55
+ |----------|----------|------------------|
56
+ | **Large PIEs** (listed, banks, insurers) with >500 employees | Already subject to NFRD | FY 2024 (reports in 2025) |
57
+ | **Other large companies** (EU listed + unlisted) | ≥2 of 3: >250 employees, >€40M turnover, >€20M total assets | FY 2025 (reports in 2026) |
58
+ | **Listed SMEs** (EU-regulated markets) | Listed on EU regulated market (not micro) | FY 2026 (reports in 2027) — voluntary standard available |
59
+ | **Non-EU companies** | >€150M net turnover in EU + ≥1 EU subsidiary (large/listed) OR ≥1 EU branch (>€40M EU turnover) | FY 2028 (reports in 2029) |
60
+
61
+ **Listed SME opt-out:** May delay until FY 2028 with explanation.
62
+
63
+ **Micro-enterprises** are fully exempt.
64
+
65
+ ### Value Chain Scope
66
+ CSRD reporting must consider **upstream and downstream value chain** where material. Companies cannot limit to their own operations — they must report on impacts, risks, and opportunities throughout the value chain to the extent information is reasonably available.
67
+
68
+ ---
69
+
70
+ ## Double Materiality Assessment (DMA)
71
+
72
+ The DMA is the **cornerstone** of CSRD compliance. Every company must conduct a DMA before deciding which ESRS topics to report on.
73
+
74
+ ### Two Perspectives
75
+
76
+ **1. Impact Materiality** — Does the company have actual or potential impacts (positive or negative) on people or the environment?
77
+ - Assess: significance of impact = scale × scope × irremediability (for negative) / scale × scope (for positive)
78
+ - Time horizon: short, medium, long term
79
+ - Consider: own operations AND value chain
80
+
81
+ **2. Financial Materiality** — Does the sustainability matter generate or could it generate risks or opportunities that affect the company's financial position, performance, cash flows, access to finance, or cost of capital?
82
+ - Consider: current effects AND anticipated effects over short/medium/long term
83
+
84
+ **A topic is material if it meets either or both criteria.** Material topics must be reported in full; non-material topics may be omitted (with brief justification in the materiality statement).
85
+
86
+ ### DMA Process (ESRS 1, paras. 45–56)
87
+ 1. **Understand the context** — map business activities, relationships, and value chain
88
+ 2. **Identify actual and potential impacts** — consult stakeholders (ESRS 1, para. 22)
89
+ 3. **Assess significance of impacts** (scale, scope, irremediability, likelihood for potential)
90
+ 4. **Identify financial risks and opportunities** from sustainability matters
91
+ 5. **Assess financial significance** (magnitude, likelihood, time horizon)
92
+ 6. **Determine materiality** — topic by topic, using both lenses
93
+ 7. **Document the DMA** — disclose the process (ESRS 2 SBM-3)
94
+ 8. **Validate and update** — at least annually
95
+
96
+ ---
97
+
98
+ ## ESRS Standards Architecture
99
+
100
+ ### Cross-Cutting Standards (mandatory)
101
+
102
+ | Standard | Title | Key Content |
103
+ |---------|-------|-------------|
104
+ | **ESRS 1** | General Requirements | Reporting principles, DMA, value chain, time horizons, due diligence |
105
+ | **ESRS 2** | General Disclosures | Governance (GOV), Strategy (SBM), IRO management (IRO-1), Metrics & targets |
106
+
107
+ ### Topical Standards (apply if material)
108
+
109
+ **Environmental (E)**
110
+ | Standard | Topic | Key Disclosures |
111
+ |---------|-------|----------------|
112
+ | ESRS E1 | Climate Change | GHG emissions (Scope 1/2/3), transition plan, climate targets, physical/transition risks, EU Taxonomy alignment |
113
+ | ESRS E2 | Pollution | Air/water/soil pollutants, substances of concern, pollution incidents |
114
+ | ESRS E3 | Water & Marine Resources | Water consumption/withdrawal, marine resource impacts |
115
+ | ESRS E4 | Biodiversity & Ecosystems | Sites impacting biodiversity, ecosystem services, biodiversity targets |
116
+ | ESRS E5 | Resource Use & Circular Economy | Material flows, waste, circular economy strategy |
117
+
118
+ **Social (S)**
119
+ | Standard | Topic | Key Disclosures |
120
+ |---------|-------|----------------|
121
+ | ESRS S1 | Own Workforce | Working conditions, equal treatment, compensation, collective bargaining, health & safety |
122
+ | ESRS S2 | Workers in Value Chain | Supply chain labour rights, working conditions, living wages |
123
+ | ESRS S3 | Affected Communities | Community impacts, indigenous rights, access to resources |
124
+ | ESRS S4 | Consumers & End-Users | Product safety, data protection, access for vulnerable groups |
125
+
126
+ **Governance (G)**
127
+ | Standard | Topic | Key Disclosures |
128
+ |---------|-------|----------------|
129
+ | ESRS G1 | Business Conduct | Anti-corruption, lobbying, supplier relations, payment practices |
130
+
131
+ ---
132
+
133
+ ## Key Disclosure Requirements
134
+
135
+ ### ESRS 2 — General Disclosures (mandatory for all in-scope companies)
136
+ - **GOV-1:** Governance bodies' role in sustainability
137
+ - **GOV-2:** Management's role and sustainability-related expertise
138
+ - **GOV-3:** Integration of sustainability in incentive schemes
139
+ - **GOV-4:** Due diligence statement
140
+ - **GOV-5:** Risk management and internal controls
141
+ - **SBM-1:** Strategy, business model, and value chain
142
+ - **SBM-2:** Stakeholder engagement
143
+ - **SBM-3:** Material impacts, risks, and opportunities (DMA output)
144
+ - **IRO-1:** Description of processes for identifying/assessing material IROs
145
+
146
+ ### ESRS E1 — Climate (if material) — Key datapoints
147
+ - Total GHG emissions: Scope 1, 2 (location-based + market-based), Scope 3 (all 15 categories)
148
+ - GHG intensity (per net revenue)
149
+ - GHG reduction targets (Paris-aligned)
150
+ - Climate transition plan (Art. 19a(2)(a))
151
+ - Physical climate risks (acute and chronic)
152
+ - EU Taxonomy eligible and aligned revenue/capex/opex
153
+ - Energy consumption and mix (renewable vs. non-renewable)
154
+
155
+ ### ESRS S1 — Own Workforce (if material) — Key datapoints
156
+ - Total employees by gender, country (large companies), contract type
157
+ - Turnover rate
158
+ - Gender pay gap (aligned with EU Pay Transparency Directive)
159
+ - % employees covered by collective bargaining agreements
160
+ - Work-related injuries/fatalities (LTIFR)
161
+ - Training hours per employee
162
+ - Health & safety management system coverage
163
+
164
+ ---
165
+
166
+ ## Reporting Format & Assurance
167
+
168
+ ### Location in Annual Report
169
+ CSRD disclosures must appear in a **dedicated section of the management report** (Accounting Directive, Art. 19a). Cannot be a standalone sustainability report.
170
+
171
+ ### Digital Tagging (XBRL)
172
+ All sustainability disclosures must be **digitally tagged** in XBRL/iXBRL format using the European Single Electronic Format (ESEF). Commission taxonomy pending for sustainability.
173
+
174
+ ### Third-Party Assurance (Art. 26a)
175
+ - **Limited assurance** required initially (from first reporting year)
176
+ - **Reasonable assurance** standard to be phased in later (Commission review by 2028)
177
+ - Assurance by statutory auditor or independent assurance services provider (IASP)
178
+ - Must cover: compliance with ESRS, DMA process, sustainability information
179
+
180
+ ### Value Chain Data Challenges
181
+ Where value chain data is unavailable, companies may use:
182
+ - Proxy data / sector averages
183
+ - Estimates based on reasonable assumptions
184
+ - Must disclose data estimation approach and limitations
185
+
186
+ ---
187
+
188
+ ## Implementation Timelines
189
+
190
+ | Milestone | Date |
191
+ |-----------|------|
192
+ | CSRD in force | 5 January 2023 |
193
+ | ESRS published | 22 December 2023 |
194
+ | Large PIEs first report | FY 2024 → published 2025 |
195
+ | Other large companies first report | FY 2025 → published 2026 |
196
+ | Listed SMEs first report | FY 2026 → published 2027 |
197
+ | Non-EU companies first report | FY 2028 → published 2029 |
198
+
199
+ **Omnibus Proposal (2025):** The European Commission proposed simplifications in the CSRD Omnibus Package (February 2025), which may narrow scope and reduce datapoints. Check current legislative status before advising.
200
+
201
+ ---
202
+
203
+ ## CSRD vs. Other Frameworks
204
+
205
+ | Aspect | CSRD/ESRS | GRI | TCFD | SASB |
206
+ |--------|-----------|-----|------|------|
207
+ | Mandatory? | Yes (EU law) | Voluntary | Voluntary (some jurisdictions mandatory) | Voluntary |
208
+ | Double materiality | Required | Impact materiality | Financial materiality | Financial materiality |
209
+ | Climate Scope 3 | Required if material | Encouraged | Required | Sector-specific |
210
+ | Assurance | Legally required | Optional | Optional | Optional |
211
+ | Digital tagging | Required (XBRL) | None | None | None |
212
+ | ESRS alignment | Native | ESRS references GRI | ESRS incorporates TCFD | SASB maps to ESRS |
213
+
214
+ **GRI interoperability:** ESRS 1 Appendix C maps ESRS to GRI; companies with GRI reports can identify gaps rather than start from scratch.
215
+ **TCFD:** ESRS E1 incorporates TCFD recommendations; TCFD reporters have a strong foundation for ESRS E1.
216
+
217
+ ---
218
+
219
+ ## Workflows
220
+
221
+ ### 1. Scope Determination
222
+ 1. Check entity type: EU company / non-EU company / SME
223
+ 2. Apply size thresholds (employees + turnover + assets — 2-of-3)
224
+ 3. Check listing status
225
+ 4. Determine first mandatory reporting year
226
+ 5. Check for PIE status (listed, bank, insurer)
227
+ 6. Consider group reporting — subsidiaries covered by group CSRD report may be exempt
228
+
229
+ ### 2. CSRD Gap Assessment
230
+ 1. Confirm scope and first reporting year
231
+ 2. Review current ESG/non-financial reporting (GRI, TCFD, CDP, SASB)
232
+ 3. Conduct DMA to identify material ESRS topics
233
+ 4. Map existing disclosures to mandatory ESRS datapoints
234
+ 5. Identify data gaps — especially Scope 3, value chain, ESRS S1 pay gap
235
+ 6. Assess governance gaps (sustainability in board oversight)
236
+ 7. Evaluate assurance readiness
237
+ 8. Produce gap table with priority and timeline
238
+
239
+ ### 3. Transition Plan Drafting (ESRS E1)
240
+ Required elements per ESRS E1-1 and Art. 19a(2)(a):
241
+ - Decarbonisation targets (2030, 2050) aligned with 1.5°C
242
+ - Planned actions and resources by time horizon
243
+ - Financial planning: capex/opex/R&D for decarbonisation
244
+ - Carbon offsets role (limited)
245
+ - EU Taxonomy alignment targets
246
+ - Locked-in GHG assets
247
+
248
+ ### 4. Value Chain Reporting Setup
249
+ 1. Map tier-1 suppliers and key downstream channels
250
+ 2. Identify material value chain topics from DMA
251
+ 3. Assess data availability from key suppliers
252
+ 4. Define data collection process (surveys, contracts, CDP)
253
+ 5. Apply sector averages/proxies where direct data unavailable
254
+ 6. Disclose methodology and estimation approach
255
+
256
+ ---
257
+
258
+ ## Reference Files
259
+
260
+ - **`references/esrs-standards.md`** — Detailed ESRS standard by standard: required disclosures, datapoints, applicability conditions
261
+ - **`references/double-materiality.md`** — DMA methodology, scoring templates, stakeholder engagement guide, sector-specific guidance
262
+ - **`references/compliance-program.md`** — CSRD implementation roadmap, governance setup, data collection templates, assurance readiness checklist