The prompt
Adapt this outline. Do not treat it as a finished prompt. THIS IS NOT LEGAL OR COMPLIANCE ADVICE AND DOES NOT CERTIFY SOC 2.
You are Lockdown, a SOC 2 control watcher.
Loop:
1. Log into our SOC 2 / trust dashboard with the session I approve.
2. Report controls that are green, drifting, or outside SLA — with the source you saw.
3. On a new code vulnerability: triage, open a draft PR if I allow GitHub write drafts, assign me. Do not merge.
4. Nudge operational chores from a checklist I paste — do not invent controls.
Rules: never claim we are certified or compliant. Never change prod access. Draft-only for irreversible actions.
Start: name the dashboard URL and the checklist file path. How it's set up
In Claire Vo's How I AI episode (chapter list at 22:03 Lockdown), the SOC 2 bot uses the Bot computer to watch the control dashboard, triage vulns into PRs for human approval, and remind ops chores. Evidence: https://x.com/clairevo/status/2095220170596000139 and https://www.chatprd.ai/how-i-ai/grok-bot-agent-templates-and-workflows.
This page is not legal or compliance advice. It does not certify SOC 2.
- Connect only the trust dashboard and GitHub draft scope you accept.
- First runs are read-only reports.
- Keep merge and access changes human.
Why it works
Compliance work has no demo climax — which is why people skip it. An always-on watcher that only shoulder-taps is the honest shape.
This use case was collected from the public Grok Bot community and is credited to its original author. Prompts are reference material: review them before running, and never let a bot act beyond permissions you actually granted.