DocsBuildAPI ReferenceSDK Reference

Assurance Compliance Operations

Phase 5.5 — the software-automatable SOC 2 program surface on OpsGraph Assurance. Evidence support for human auditors — not a certification claim.

Human boundary

Software drafts, tracks, evidences, and reminds. Humans author policy content, accept risk, approve exceptions, sign reviews, and face the auditor. No module claims SOC 2 certification.

Workflow

  1. Program setup — generate policy templates, register vendors, seed the risk register, start personnel checklists.
  2. Evidence — approve policies (human only), collect VCS/CI change evidence, run access-review campaigns from Core access grants.
  3. Drift — failing controls and expiring artifacts become findings routed through cp_incidents and the universal escalation domain.
  4. Readiness — human assurance readiness shows per-TSC coverage and Type II window blockers with resolve commands.
  5. Auditor access — grant a read-only, period-bound seat; track evidence requests with SLA visibility.

CLI

human assurance policies
human assurance readiness
human assurance vendors
human assurance risks
human assurance drift
human assurance access-reviews
human assurance personnel
human assurance audit-package

API / MCP / SDK

Capability API MCP SDK
Policies GET /v1/assurance/policies human.assurance.policies.list listAssurancePolicies
Readiness GET /v1/assurance/readiness human.assurance.readiness.get getAssuranceReadiness
Vendors GET /v1/assurance/vendors human.assurance.vendors.list listAssuranceVendors
Risks GET /v1/assurance/risks human.assurance.risks.list listAssuranceRisks
Drift GET /v1/assurance/drift human.assurance.drift.list listAssuranceDriftFindings
Access reviews GET/POST /v1/assurance/access-reviews human.assurance.access_reviews.list listAssuranceAccessReviews

Routes mount only when humanos.bundle.opsgraph-assurance.v1 is installed.

Canvas

  • assurance_readiness — window blockers with resolve deep links
  • assurance_campaigns — access-review campaign progress
  • assurance_program_records — policies / vendors / risks overview

Registered from the Assurance bundle manifest — not hardwired into Console core.

See also

← All guides