Skip to main content
Glama

Fcop Audit

fcop_audit

Run a full protocol compliance audit and generate a report with actionable remediation steps. Covers new, upgrade, takeover, and auto detection scopes.

Instructions

协议体检工具(ADR-0032)。扫描项目,发现协议合规缺口,产出"体检即整改方案"报告。

fcop_check 的区别:

  • fcop_check — 日常轻量自检(working-tree drift + session/role 冲突)

  • fcop_audit — 一次性深度体检(协议合规度全量扫描 + 整改方案)

三个 scope:

  • new : 新项目验收 — 协议文件是否完整部署

  • upgrade : 版本升级后验收 — 规则版本 / 文档是否同步

  • takeover : 老 non-fcop 项目首次引入 fcop — 全量合规扫描(含 6 类盲区)

  • auto : 自动推断(推荐)

产出物:fcop/shared/INSPECTION-{date}-{NNN}-{scope}.md

报告含 Execution Block:每条违规附带可直接复制的整改命令、执行人、 Tier 优先级和回滚方式。

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
scopeNo``"new"`` | ``"upgrade"`` | ``"takeover"`` | ``"auto"``auto
outputNo``"file"`` 写报告文件(默认) | ``"stdout"`` 仅返回 Markdown | ``"both"`` 写文件并返回file
project_pathNo保留参数(暂未使用),实际路径由 FCOP_DIR 环境变量或当前目录决定.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv3.2.4

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It discloses the output artifact path (fcop/shared/INSPECTION-{date}-{NNN}-{scope}.md) and the report's Execution Block contents, including remediation commands, owner, tier priority, and rollback. It does not explicitly state whether the tool modifies project files, though the scan-and-report framing implies it is primarily read-only aside from writing the report.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-organized with headers, lists, and front-loaded purpose. The fcop_check contrast comes early, the scope list is compact, and the output/report details are clearly separated. Every sentence earns its place without filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 3 optional parameters, full schema descriptions, and an output schema, the description covers the purpose, the alternative tool, the scope semantics, the generated artifact path, and the report structure. Nothing essential to selecting or invoking the tool correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds real semantic value by explaining what each scope means (e.g., takeover = first-time fcop introduction with full compliance scan and 6 blind spots), which goes beyond the bare enum values in the schema. The output parameter semantics are left to the schema, but they are already well-documented there.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: it scans a project for protocol compliance gaps and produces an 'inspection-as-remediation' report. It also explicitly contrasts itself with fcop_check, making it unmistakable which tool to use for deep audits versus routine checks.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly names fcop_check as the lightweight daily alternative and positions fcop_audit as the one-time deep inspection. The four scopes (new, upgrade, takeover, auto) further specify the exact usage situations, including the recommendation to use auto.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.