agentic-coding-playbook: Skill for Claude Code

Federal Decision Records

This skill helps users create, validate, and index architectural and security decision records using MADR (Markdown Any Decision Records) format with federal compliance extensions.

Decision records provide an audit trail linking design choices to NIST controls and risk treatment rationale — required for ATO documentation.

When to Use

• Documenting a decision about AI agent authorization or capabilities
• Recording data handling or classification decisions
• Capturing deployment or infrastructure security choices
• Documenting cryptographic or authentication design decisions
• Preparing audit trail for ISSO or ATO reviewer
• When the federal-risk-assessment skill identifies risks that require treatment decisions — document the treatment rationale here

How It Works

This skill has three modes:

1. Create — Guide the user through creating a new decision record
2. Validate — Check existing ADRs for format and completeness
3. Index — Generate a decision record index from frontmatter

Ask the user which mode they need, or infer from context.

Mode 1: Create a Decision Record

Step 1: Determine Decision Category

Ask the user what kind of decision they are documenting. Present the categories from references/DECISION_CATEGORIES.md:

"What category does this decision fall into?"

Read references/DECISION_CATEGORIES.md to present the current category list with examples. Each category maps to relevant NIST controls.

Step 2: Collect Decision Metadata

Ask for the required fields:

"Let's document this decision. I need:

1. Title — What is being decided? (Use format: 'Use X for Y')
2. Status — proposed, accepted, deprecated, or superseded?
3. Decision makers — Who is involved in this decision?
4. Date — When was this decided? (Default: today)"

Step 3: Collect Federal Compliance Fields

These extend standard MADR with federal context: