Audit Init

You are configuring a CTO's audit workspace. This is an interactive setup wizard.

Pre-flight Checks

1. Verify we're in a valid workspace (not inside checklist repo)
2. Check if org.yaml already exists - if so, ask if they want to reconfigure
3. Ensure checklist/ submodule exists or can be added

Setup Flow

Ask these questions ONE AT A TIME. After each answer, acknowledge and move to the next.

Step 1: Organization Name

What's your organization name? (This is just for labeling)

Step 2: Cloud Providers

Which cloud providers do you use? (Select all that apply, or "tell later")

1. AWS
2. GCP
3. Azure
4. Other (specify)
5. Tell me later

Step 3: Source Control

What's your source control setup?

1. GitHub Cloud
2. GitHub Enterprise
3. GitLab Cloud
4. GitLab Self-hosted
5. Bitbucket
6. Other

If GitHub, ask: What's your GitHub org name?

Step 4: Infrastructure as Code

How do you manage infrastructure? (Select all that apply, or "tell later")

1. Terraform
2. Pulumi
3. CloudFormation
4. CDK
5. None / Manual
6. Tell me later

Step 5: Compute Platform

What compute platforms do you use? (Select all that apply)

1. Kubernetes
2. ECS / Fargate
3. Lambda / Cloud Functions
4. VMs (EC2, Compute Engine)
5. PaaS (Heroku, Railway, Render)
6. Tell me later

Step 6: Observability

What monitoring tools do you use? (Select all, or "tell later")

Monitoring:

1. Datadog
2. New Relic
3. Prometheus/Grafana
4. CloudWatch
5. Other

Error Tracking:

1. Sentry
2. Bugsnag
3. Rollbar
4. Other

(You can answer both, or "tell later" for either)

Step 7: Secrets Management

How do you manage secrets?

1. HashiCorp Vault
2. AWS Secrets Manager
3. GCP Secret Manager
4. 1Password / Doppler
5. Environment variables only
6. Tell me later

Step 8: CI/CD

What CI/CD system do you use?

1. GitHub Actions
2. GitLab CI
3. CircleCI
4. Jenkins
5. Other

Step 9: Authentication

What auth system do you use for your applications?

1. Auth0
2. Okta
3. Cognito
4. Firebase Auth
5. Custom / Self-built
6. Tell me later

Generate Configuration

After collecting answers, generate these files:

org.yaml

name: [org name]
created_at: [ISO date]
configured_by: claude-audit-init

cloud_providers:
  - [answered or empty list]

source_control:
  provider: [github/gitlab/bitbucket]
  type: [cloud/enterprise/self-hosted]
  org: [org name if provided]

infrastructure:
  iac: [terraform/pulumi/etc or null]
  compute:
    - [list of compute platforms]

observability:
  monitoring: [tool or null]
  errors: [tool or null]
  logging: [tool or null]

secrets: [tool or null]

ci_cd: [tool]

auth: [tool or null]

# Items marked "tell later" - Claude will ask when relevant
deferred:
  - [list of deferred items]

docs/org-context.md

Write a prose description of the organization's setup based on answers.

docs/audit-workflow.md

Generate instructions specific to their tooling:

• How to run audits
• Which sections are most relevant
• Tool-specific commands they'll use

docs/commands.md

List all available /audit-* commands with descriptions.

docs/preferences.md

# Audit Preferences

## Defaults
- Verbosity: normal
- Auto-run checks: ask first

## Custom Preferences
(Add your preferences here as you work)

CLAUDE.md

# [Org Name] Audit Workspace

This workspace is configured for auditing [org name]'s technical infrastructure.

## Quick Reference

See `org.yaml` for structured configuration.

## Documentation

- `docs/org-context.md` - Organization context and setup
- `docs/audit-workflow.md` - How to run audits
- `docs/commands.md` - Available commands
- `docs/preferences.md` - Your preferences

## Getting Started

1. Add a project: `/audit-add-project`
2. Start an audit: `/audit-start <project-name>`
3. Check progress: `/audit-status`

## Checklist Reference

The checklist is in `checklist/` (submodule). Browse items at:
- `checklist/checklist/` - All sections
- `checklist/dashboard/` - Web UI (run `pnpm dev`)

STATUS.md

# Workspace Status

**Last updated:** [date]

## Projects

| Project | Last Audit | Pass Rate |
|---------|------------|-----------|
| (none configured) | - | - |

## Recent Activity

(No audits yet)

After Generation

Show:

Your workspace is configured! Files created:

• org.yaml
• CLAUDE.md
• STATUS.md
• docs/org-context.md
• docs/audit-workflow.md
• docs/commands.md
• docs/preferences.md

Next steps:

1. Review the generated files
2. Run /audit-add-project to add your first project
3. Run /audit-start <project> to begin auditing

Would you like to add a project now?

Error Handling

• If user cancels mid-setup, save partial progress to org.yaml.partial
• If org.yaml exists, offer to backup before overwriting
• If checklist submodule missing, offer to add it