diff --git a/examples/hr-cpex-demo/smith/guidance.txt b/examples/hr-cpex-demo/smith/guidance.txt new file mode 100644 index 0000000..3a112c6 --- /dev/null +++ b/examples/hr-cpex-demo/smith/guidance.txt @@ -0,0 +1,26 @@ +## Tool1: `get_compensation` + +1. HR Employees can access compensation records. +2. Non-HR Employees cannot access compensation records. +3. Employees with `view_ssn` permission can view SSNs in compensation records. +4. Employees without `view_ssn` permission cannot view SSNs and SSNs must be redacted before the request reaches the tool. + +## Tool2: `search_repos` + +5. Employees can access repositories only within their authorized scope. +6. Employees without required team membership cannot access the repository. + +## Tool3: `send_email` + +7. Employees cannot send SSNs through email. +8. Email containing SSNs must be blocked and the attempt must be recorded in the audit log. + +## Tool4: `adjust_compensation` + +9. Authorized Employees can adjust compensation by $10,000 or less without additional approval. +10. Authorized Employees require human approval to adjust compensation by more than $10,000. +11. Compensation adjustments requiring approval must be suspended until approval is granted. + +## General + +12. Unauthorized tool calls must always be blocked before tool execution.