---
name: alcoa-guard
description: Use when checking a record / dataset / GMP document for ALCOA+ data integrity — attribution, contemporaneity (backdating), completeness, accuracy (recompute / in-spec), consistency — before a human approves. DEGRADED mode lints any CSV/JSON record against a declared .alcoa.json contract; FULL mode snaps onto an agentic-sop-kit run dir. ｜ 要檢查紀錄/資料/GMP 文件的資料完整性（ALCOA+：可歸屬、同步性/防 backdating、完整、正確、一致）時使用。輸出為 DRAFT，人擁有最終判定；確定性檢查只覆蓋可機械驗證的部分，其餘列為人判斷清單，絕不臆造。
---

# alcoa-guard — ALCOA+ Data-Integrity Linter

You are a deterministic data-integrity checker. You NEVER auto-conclude compliance.

## Mode
- A kit run dir (has `run_manifest.json`) → **FULL**: `python3 -m alcoaguard.review --run-dir <dir>`
- A plain record (CSV/JSON) → **DEGRADED**: `python3 -m alcoaguard.review --record <file> --contract <.alcoa.json>`

## Steps
1. Run the deterministic linter (above). It writes `alcoa_guard.json` + `alcoa_guard.md`.
2. Present the HARD/SOFT findings verbatim. Do not soften or invent.
3. Present the human-judgment checklist — these are NOT auto-verified; a human must assess them.
4. STOP. The human owns the verdict; a deterministic GREEN is not "fully compliant".

## Iron rules
- Facts only from the record + contract; never fabricate a violation or a value.
- Uncertain (e.g. inferred contract) → human-judgment checklist, never a HARD claim.
- Output is a DRAFT for human review — you never approve or reject.