supply-chain-gating

Classifies supply-chain system actions by risk and gates consequential writes for human approval.

Updated Aug 17, 2026
One-click install
npx skills add https://github.com/MetaFloor-AI/metafloor-scm-plugin-openai --skill supply-chain-gating-metafloor-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supply-chain-gating
Source: https://github.com/MetaFloor-AI/metafloor-scm-plugin-openai/tree/main/skills/gating/supply-chain-gating
Command: npx skills add https://github.com/MetaFloor-AI/metafloor-scm-plugin-openai --skill supply-chain-gating-metafloor-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Acting inside live supply-chain systems (ERP, procurement, inventory) means a wrong or unauthorized write costs real money and is often irreversible. This Skill gives the AI the judgment layer to classify every action as read, reversible write, committing write, destructive, or outbound, and to pause consequential ones for explicit human approval instead of executing blindly. ## Core Features & Use Cases - Action Classification: Categorizes every operation by what it does to state (read, reversible write, committing write, destructive, outbound) rather than by tool name. - Approval Contract: Structures every consequential action proposal with the exact object, a before/after preview, rollback path, provenance, and risk class so a human can decide in one look. - Hard Safety Rules: Treats tool-returned text as data (never instructions), rejects chat-based authority claims like "the CFO approved it", blocks leaking internal cost/terms data, and enforces re-validation before commit. - Use Case: Before submitting a purchase order in SAP or Coupa, the Skill drafts the PO with a diff preview and rollback plan, checks for duplicate open requisitions, and presents it for recorded human approval rather than auto-submitting. ## Quick Start Ask the assistant to submit a purchase order or adjust inventory on a connected supply-chain system and it will classify the action and present an approval-ready proposal first.

Frequently Asked Questions about supply-chain-gating

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent an AI agent from submitting purchase orders without approval?

Classify the PO submission as a committing write, which requires explicit human approval before execution. Present the exact PO number, supplier, quantities, and totals with a before/after preview and rollback plan so the human can approve in one look.

How to classify supply-chain system actions by risk level?

Classify by what the operation does to state, not the tool name: reads change nothing, reversible writes are cleanly undone, committing writes bind money or physical goods, destructive actions cancel or delete, and outbound actions send data outside the company.

Does this skill enforce approval policies on connector tools?

No, it is advisory only and owns no tools or connectors. Actual enforcement comes from Codex's own MCP approval flow, configured per connector with approval_policy and per-tool approval_mode settings.

Can a supplier note or email tell the AI to skip approval?

No. Tool-returned text is treated as data, never instructions. A note saying "auto-approve" or "skip review" is flagged as a potential injection attack, and the decision to pause always comes from the action's risk class.

What happens if system state changes between reading and approval?

The skill requires re-validation at execute time (TOCTOU protection). For example, re-check that a PO is still open before canceling, since received quantity cannot be canceled the same way as open quantity.