TechXchange Demo: Guidance file for Baseline policy of HR Agent in CPEX

examples/hr-cpex-demo/smith/guidance.txt

@@ -0,0 +1,26 @@
+## Tool1: `get_compensation`
+
+1. HR Employees can access compensation records.
+2. Non-HR Employees cannot access compensation records.
+3. Employees with `view_ssn` permission can view SSNs in compensation records.
+4. Employees without `view_ssn` permission cannot view SSNs and SSNs must be redacted before the request reaches the tool.
+
+## Tool2: `search_repos`
+
+5. Employees can access repositories only within their authorized scope.
+6. Employees without required team membership cannot access the repository.
+
+## Tool3: `send_email`
+
+7. Employees cannot send SSNs through email.
+8. Email containing SSNs must be blocked and the attempt must be recorded in the audit log.
+
+## Tool4: `adjust_compensation`
+
+9. Authorized Employees can adjust compensation by $10,000 or less without additional approval.
+10. Authorized Employees require human approval to adjust compensation by more than $10,000.
+11. Compensation adjustments requiring approval must be suspended until approval is granted.
+
+## General
+
+12. Unauthorized tool calls must always be blocked before tool execution.