Skip to content

feat: align risk command with Orange Book Annex 4 and Annex 5#196

Closed
tractorjuice wants to merge 1 commit intomainfrom
feat/improve-risk-prompt
Closed

feat: align risk command with Orange Book Annex 4 and Annex 5#196
tractorjuice wants to merge 1 commit intomainfrom
feat/improve-risk-prompt

Conversation

@tractorjuice
Copy link
Copy Markdown
Owner

Summary

Aligns the risk command with the actual HM Treasury Orange Book (2023 edition):

  • Risk categories expanded from 6 custom to 12 Orange Book Annex 4 categories (added People, Governance, Legal, Commercial, Information, Security, Project/Programme)
  • Cause → Event → Consequence structure per risk (Orange Book Annex 5 formal risk definition) — replaces generic Root Cause/Trigger Events/Consequences
  • Early Warning Indicators field added per risk (Orange Book Section D15 — key performance/risk indicators including early warnings)
  • Net effect: fewer lines (-23) but more precise alignment with the standard

How this was found

Used autoresearch with a review of the Orange Book PDF to identify gaps between the prompt and the actual standard:

  • Old categories (6): STRATEGIC, OPERATIONAL, FINANCIAL, COMPLIANCE, REPUTATIONAL, TECHNOLOGY
  • Orange Book Annex 4 categories (12): Strategy, People, Governance, Technology, Operations, Legal, Financial, Commercial, Information, Security, Project/Programme, Reputational

The Cause → Event → Consequence structure comes directly from Orange Book Annex 5's formal risk definition, which our prompt previously approximated but didn't follow precisely.

Test plan

  • Run /arckit:risk and verify risks use Orange Book Annex 4 categories
  • Verify each risk has Cause → Event → Consequence structure
  • Verify Early Warning Indicators field present per risk
  • Run python scripts/converter.py to regenerate extension formats

🤖 Generated with Claude Code

Expand risk categories from 6 custom to 12 Orange Book Annex 4
categories (added People, Governance, Legal, Commercial, Information,
Security, Project/Programme). Replace Root Cause/Trigger Events/
Consequences with formal Cause → Event → Consequence structure
(Orange Book Annex 5). Add Early Warning Indicators field per risk
(Orange Book Section D15).

Found via autoresearch with Orange Book PDF review (score 9.0).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@tractorjuice
Copy link
Copy Markdown
Owner Author

Superseded by #265 (autoresearch includes deeper optimisation of this command)

@tractorjuice tractorjuice deleted the feat/improve-risk-prompt branch March 27, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant