# Workflow: Audit

## Intent Classification

**Triggers:** Security reviews, inventory checks, compliance, "what's the state of..."

## Fixed Output Format

```markdownn## Scope
[What was audited]

## Findings
| Item | Status | Notes |
|------|--------|-------|
| [item1] | ✅/⚠️/❌ | [notes] |
| [item2] | ✅/⚠️/❌ | [notes] |

## Risks Identified
- [Risk 1]
- [Risk 2]

## Recommendations
- [Rec 1]
- [Rec 2]

## Verification
[How findings were confirmed]
```

## Tool Access Rules

1. **Enumerate** - list everything in scope
2. **Inspect** - check state of each item
3. **Assess** - evaluate against standards
4. **Report** - structured findings with evidence

## Constraints

- NO: Assumptions without verification
- NO: Partial coverage reported as complete
- NO: Risks without severity assessment
- YES: Evidence cited for each finding
- YES: Actionable recommendations