Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/jonase47/ccpr/p0-regulatorygit clone --depth 1 https://github.com/jonase47/ccprWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/jonase47/ccpr/p0-regulatory)<a href="https://agentmods.dev/commands/jonase47/ccpr/p0-regulatory"><img src="https://agentmods.dev/badge/commands/jonase47/ccpr/p0-regulatory.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.01153 |
| Opus 5 | $0.00000 | $0.00576 |
| Sonnet 5 | $0.00000 | $0.00231 |
| Haiku 4.5 | $0.00000 | $0.00115 |
Grade A, and why
p0-regulatory scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/p0-regulatory – Regulatory & Legal Knock-Out Criteria
Identifies regulatory requirements, DSGVO (GDPR) obligations, and legal knock-out criteria early on, before significant time is invested in the idea. A regulatory showstopper should be recognised as early as possible.
Argument: $ARGUMENTS = [Area, e.g. "health data", "financial services", "children's app"]
If provided: Use as the focus for the regulatory check. If not provided: Read DISCOVERY.md to understand the context (Target Audience, data, industry). If context is missing, ask for the relevant area.
Execution
1. Read Context
Read docs/discovery/DISCOVERY.md (phase index), docs/discovery/PROBLEM.md (problem statement, Target Audience), and docs/discovery/MARKET.md (market context) to understand which regulatory areas are relevant.
2. Delegate to security-master Agent (Lead)
Delegate the regulatory analysis to the security-master agent:
Conduct a first regulatory assessment for the following area: $ARGUMENTS Context from PROBLEM.md and MARKET.md: [Insert problem statement, Target Audience, industry]
Check and evaluate:
- DSGVO Relevance: What personal data is processed? Which articles apply (Art. 6, Art. 9, Art. 13/14)?
- Sector-Specific Regulation: Are there specific laws or regulations (e.g. MDR for medical devices, DiGA, FINMA, GwG)?
- Licences and Certifications: Are permits required?
- Knock-Out Criteria: What could legally stop or massively delay the project?
- Assessment: 🟢 No significant hurdles / 🟡 Hurdles, but surmountable / 🔴 Critical knock-out criterion
Be concrete and practical. Cite relevant laws/regulations.
3. Delegate to konzeptor Agent (Support)
Delegate the classification in the project context to the konzeptor agent:
Evaluate the regulatory findings of the security-master: Are the identified hurdles acceptable? What impact do they have on the Concept (scope, timeline, costs)?
4. Write Detail File
Write the result to docs/discovery/REGULATORY.md (overwrite if it exists). Start with this YAML frontmatter:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +3 lines 5c5ecdaa3095
- 3d ago First seen · 82 lines · 0 tokens per session scan A 1b09beec7059
p0-regulatory is a command published in the GitHub repository jonase47/ccpr (1 stars, last pushed today), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,153 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
compliance
Generate compliance-as-code policies with automated evidence. Usage - /mindforge:compliance [--framework soc2|hipaa|pci] [--engine opa|sentinel].
mindforge:fintech
Design fintech payment/ledger architecture. Usage: /mindforge:fintech [service] [--domain payments|ledger|kyc] [--compliance pci|sox].
mindforge:healthcare
Design HIPAA-compliant healthcare system architecture. Usage: /mindforge:healthcare [service] [--standard hipaa|hl7|fhir] [--scope full|audit].
au-pspf
You are an enterprise architect generating a Protective Security Policy Framework (PSPF) compliance assessment for an Australian Government entity or contractor handling government information.
india-checklist
Interactive non-code compliance checklist — business registration, DPO, GST, CERT-In, grievance officer, and more.
rgpd
Questões de RGPD e violação de dados — referência, playbook e checklist. GDPR and data-breach matters — reference, playbook and checklist.