AI Agent Attestation Preparation Spec Skill

Use When

Use when planning evidence collection, remediation, rehearsals, and audit-day execution for an AI-agent SOC 2 Type II, ISO 27001 surveillance, or HIPAA review. Use control packs to define controls and evidence-pack-spec to define evidence handling.

Do not use as a substitute for the SOC 2 control pack or the evidence pack spec — this skill orchestrates them in time. Do not use this for SOC 2 Type I (point-in-time); the timeline structure assumes a Type II window.
Do not use this skill to fabricate missing project facts, legal conclusions, test results, approvals, or certification claims.

Artefact	Source or provider	Required?	Missing-input behaviour
Target sources: AI_Agent_SOC2_Control_Pack.md, AI_Agent_ISO27001_Control_Pack.md, AI_Agent_HIPAA_Control_Pack.md, AI_Agent_Compliance_Policy_Pack.md, AI_Agent_Evidence_Pack_Spec.md, AI_Agent_Compliance_Runbook.md, prior-year audit findings (if any), engagement letter from auditor.	Project owner, approved workspace artefacts, or accountable control owner	Yes	Stop dependent claims; list the missing item, owner, and consequence. For review checks, record `not assessed`.
Scope, audience, baseline/version, and accountable decision owner	Requester or project context	Yes	Ask for or record the gap; do not infer authority or scope.