skills/arckit-ca-ocap/SKILL.md
[COMMUNITY] Generate a First Nations OCAP® (Ownership, Control, Access, Possession) sovereignty assessment — FNIGC pre-engagement gate, per-dataset OCAP mapping, USAI and ITK considerations, repatriation and co-governance plan. Not a substitute for direct FNIGC and community engagement.
npx skillsauth add tractorjuice/arckit-codex arckit-ca-ocapInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
⚠️ Community-contributed command — not part of the officially-maintained ArcKit baseline. Output should be reviewed by qualified Canadian counsel, your departmental ATIP coordinator, ITSEC officer, and (for FITAA matters) the Office of the Commissioner of Foreign Influence Transparency before reliance.
Statutory currency: FITAA was enacted June 2024 with regulations still emerging through 2025–2026. The Commissioner's office is newly stood up and operational guidance will evolve. Verify all citations against the current Justice Laws Website text and Commissioner's published guidance before relying on this output.
🪶 OCAP® notice: OCAP® (Ownership, Control, Access, Possession) is a registered trademark of the First Nations Information Governance Centre (FNIGC). The OCAP® principles describe a relationship, not a checklist. This command produces a planning scaffold and assessment; it is not a substitute for direct engagement with FNIGC and the affected First Nation(s), Métis, and Inuit communities. The architect must engage FNIGC and community representatives before relying on any OCAP determinations made here.
$ARGUMENTS
You are an enterprise architect generating a First Nations OCAP® sovereignty assessment for a federal information system that processes Indigenous data.
Read prerequisites:
projects/000-global/ARC-000-PRIN-*.md (federal principles, if present)ARC-<id>-PIA-v*.md if the ca-pia command has run.arckit/templates/_partials/RENDERING.mdRead the template:
.arckit/templates-custom/ca-ocap-template.md (user override).arckit/templates-custom/ca-ocap-template.md.arckit/templates/ca-ocap-template.mdUse scripts/bash/generate-document-id.sh <PROJECT_ID> OCAP --filename for the artefact filename.
Resolve the <!-- DOC-CONTROL-HEADER --> marker per RENDERING.md. Use the Canadian classification scheme (UNCLASSIFIED / Protected A / Protected B / Protected C / CONFIDENTIAL / SECRET / TOP SECRET) — replace the standard UK line in the header. Note that OCAP-relevant artefacts may carry community-protected information that exceeds the federal classification scheme; mark accordingly and flag in the Open Items section.
Generate the following sections (the template provides skeletons for each). The FNIGC Pre-Engagement Confirmation gate in step 5.1 is structurally enforced — if engagement is not confirmed, STOP at the planning scaffold and do NOT generate sections 5.2–5.10.
FNIGC Pre-Engagement Confirmation Block — the architect MUST confirm:
yes / no / in progress / N/A — explain)Gate behaviour:
yes or in progress (with a scheduled date and named contacts), proceed to sections 5.2–5.10.no and the engagement is not in progress, the command MUST stop here and emit a planning scaffold only, which:
Status: PLANNING SCAFFOLD — INCOMPLETEN/A, the architect must justify in writing why no Indigenous data is in scope (with cross-reference to DR and DMOD); if justification is sound, the artefact is closed with an N/A finding and no further sections are generated.Indigenous Data Inventory — per dataset: First Nation(s) of origin, nature of data (administrative, statistical, traditional knowledge, biological, image, audio, video), current custodianship arrangement, transfer history, sensitivity tier.
OCAP Principles Mapping (per dataset):
USAI Considerations — Métis Nation OCAS / USAI-aligned principles for Métis data: Utility, Self-Determination, Access, Inter-relationships. Apply where Métis populations are in scope. Do NOT collapse into OCAP.
ITK Principles Considerations — Inuit Tapiriit Kanatami National Inuit Strategy on Research and Inuit-Crown Partnership Committee guidance. Apply where Inuit populations are in scope. Do NOT collapse into OCAP.
Data Sharing Agreement Terms (where applicable) — the form an OCAP-aligned DSA should take: Indigenous co-signatory, purpose limitation, time-bounded, revocability, audit rights, sub-processor restrictions.
Repatriation Plan — where data was historically taken without informed consent: a plan for return-or-destroy, including format-portability for return.
Co-Governance Arrangements — Indigenous representation on the data-stewardship governance body; decision-making authority (consensus vs majority); appeal pathway.
Risks and Mitigation Register — cultural, legal, reputational risks: misuse of traditional knowledge, secondary analysis without consent, breach of trust, UNDA / UNDRIP implications.
Open Items — including any unresolved community-protected classification, pending FNIGC follow-up, and outstanding USAI / ITK community engagements.
Populate the External References section per .arckit/references/citation-instructions.md. The First Nations Principles of OCAP® (FNIGC) and the United Nations Declaration on the Rights of Indigenous Peoples Act (S.C. 2021, c. 14) MUST appear in the Document Register with their primary URLs and verification dates.
Write the artefact via the Write tool to projects/<project-id>/<filename>.
Show only a summary to the user (one paragraph plus the FNIGC engagement status, the count of datasets mapped, and any open items). If the artefact is a planning scaffold, say so plainly in the summary.
Authority: FNIGC (federal-level OCAP training and certification); the affected First Nation(s) in any specific case; respective Métis Nation and Inuit institutions.
After completing this command, consider running:
$arckit-data-model -- OCAP-mapped data classifications and access controls feed the data model's stewardship and access policies.$arckit-ca-pia -- Personal-information processing of Indigenous data inherits the PIA controls plus OCAP-derived restrictions.$arckit-ca-atip -- ATIP severance design must reflect OCAP access and control determinations for Indigenous datasets.tools
Procurement market intelligence — award-value benchmarks, top suppliers, incumbency and concentration, from the UK Tenders MCP
tools
Competitor landscape — rival suppliers, awarded-value market share, head-to-head and concentration, from the UK Tenders MCP
development
[COMMUNITY] Generate a SOCI Act Critical Infrastructure Risk Management Program (CIRMP) governance and evidence pack for Australian critical infrastructure assets.
development
[COMMUNITY] Generate an ASD operational technology cyber security assessment for Australian Government and critical-infrastructure projects with connected OT environments.