public-technology-review
Build a vendor-neutral, source-linked public-technology procurement evidence and risk review without autonomous scoring or award recommendations.
- License 许可
- MIT
- 所属仓库
- jmagly/aiwg
- 最近更新
- 2026-11-11
- Stars
- ★ 229
- Forks
- 36
01 前言 Front Matter
- name
- public-technology-review
- triggers
- [ "review a public technology procurement", "compare civic technology contract evidence", "assess public sector vendor lock in and lifecycle risk" ]
- namespace
- aiwg
- platforms
- [ "all" ]
- description
- Build a vendor-neutral, source-linked public-technology procurement evidence and risk review without autonomous scoring or award recommendations.
03 SKILL.md 正文
Public Technology Review
Process
- Select and cite the governing procurement profile; FAR/NIST are reference models unless adopted by that jurisdiction.
- Inventory need, planning, market research, solicitation, selection, award, administration, oversight, and public-release records.
- Separate protected proposals/source-selection material from public releases.
- Record claims and evidence without sentiment scores. Risk ratings require a human-defined scale, rationale, uncertainty, owner, and verification method.
- Do not infer corruption, rank vendors, or recommend an award autonomously.
- Record explicit handoff states for missing records, meeting/vote analysis, and any publication packet; protected material never enters a public handoff.
Output
A schema-valid evidence/risk review and human decision questions.
References
schemas/public-technology-review.schema.jsontemplates/public-technology-review.mddocs/research/civic-workflow-standards.mddocs/research/control-source-matrix.md
04 同仓库更多 Skills
host-hardening
Read-only system hardening baseline and plan-first host hardening recommendations for SSH, Docker bind addresses, firewall persistence, datastores, exporters and audit retention.
exposure-analysis
Read-only firewall analysis and effective host exposure reconstruction for Docker published ports, UFW bypass, stale rules, CDN scope, IPv6 asymmetry and external probe allowlists.
host-hardening
Read-only system hardening baseline and plan-first host hardening recommendations for SSH, Docker bind addresses, firewall persistence, datastores, exporters and audit retention.
exposure-analysis
Read-only firewall analysis and effective host exposure reconstruction for Docker published ports, UFW bypass, stale rules, CDN scope, IPv6 asymmetry and external probe allowlists.
fixture-skill
Exercise rule delivery.
pi-local
Pi-local duplicate-precedence fixture.