/gaia-config-compliance

user-facing
Category:
Configuration
Lifecycle phase:
4 -- Implementation

What it does

/gaia-config-compliance edits the compliance section of .gaia/config/project-config.yaml. The compliance section selects opt-in regulatory regimes (GDPR, HIPAA, PCI-DSS, SOX, CCPA, SOC2, ISO-27001, WCAG 2.1 AA/AAA) that add extra review criteria layers, and configures domain and UI-presence flags. The editor preserves all YAML comments and formatting outside the edited section. Every edit goes through a diff preview and confirmation gate before writing.

When to use it

  • You need to add, remove, or modify entries in the compliance configuration section.
  • You set up a new project and need to configure the compliance section.

Prerequisites

  • project-config.yaml must exist. Run /gaia-init to create one if missing.

How to invoke

/gaia-config-compliance

What it does step by step

  1. Locate project-config.yaml Resolves the configuration file path.
  2. Extract the compliance section Reads the current compliance block. If the section is missing, offers to scaffold a default.
  3. Present edit menu Shows the current compliance configuration and an operation menu (add, remove, edit, view, exit).
  4. Apply operation Collects the new values and validates them. Regime values must be from the canonical set. Regime declaration order is significant -- it drives the rubric merge order.
  5. Diff preview and confirmation Shows a unified diff of what will change. You must confirm before anything is written.
  6. Write back Writes only the modified section, preserving all other content byte-for-byte.
  7. Suggest validation Recommends running /gaia-config-validate to confirm the file still passes schema validation.

Inputs

InputSourceDescription
Project configuration.gaia/config/project-config.yamlThe file containing the compliance section.

Outputs

OutputLocationDescription
Updated compliance section.gaia/config/project-config.yamlThe modified compliance configuration.

Example session

> /gaia-config-compliance

Current compliance configuration:
  regimes:
    - hipaa
  ui_present: true

Operations: [s] set key  [r] remove key  [v] view  [x] exit
> s

Key: regimes
Value: [hipaa, soc2]

Diff preview:
  compliance:
  - regimes:
  -   - hipaa
  + regimes:
  +   - hipaa
  +   - soc2
    ui_present: true

Apply this edit? [y/n]
> y

Compliance section updated. Run /gaia-config-validate to verify.

What to run next

Troubleshooting

compliance section not found

The section does not exist in your config file. The command offers to scaffold a default:

compliance:
  regimes: []
  domain: null
  ui_present: false

Edit cancelled

You chose not to apply the edit. The file remains unchanged.