Department technology · 2 seats · 4 skills installed · 1 planned · 10 hooks · 3 gates

Technology Department Diagram

You are the workspace owner. Each AI seat has one role, one set of skills, one tool boundary, and stops at human approval gates before publishing, messaging audience, or allocating credits.

SkillPackaged workflow in .claude/skills called by name in Claude Code.

ToolsAllowed Claude Code tools and MCP servers declared for the seat.

AllowedWhat the seat drafts and where it writes (SOUL section 4).

Hard rulesHard boundaries the seat does not cross autonomously (SOUL section 3).

Stop / Do not useWhen not to use this seat and who accepts the work (SOUL sections 9 & 10).

owner

Owner

Human owner, decides money, audience, publishing

Sets objectives, reviews drafts, approves or rejects at every safety gate.

Department Lead

cong-nghe-lead

Technology Lead

Receives setup, connection, and update requests from the small business owner, dispatches work to claude-setup, performs first-round acceptance on the setup status screen without reading tokens, and maintains the technology department ledger (private/so-phong-cong-nghe.md)

Skill

pm-giao-viectao-du-an-moi

Assists department leads in authoring self-contained task briefs, coordinating progress on CHANNEL.md, and verifying artifacts with reviewer.

Helps leads scaffold new project trees under projects/<slug>/, backfill missing folders or ledgers (--bo-sung), and run three-tier structure checks before delegating.

Tools

ReadGrepGlobWriteEditmcp__agent-broker__*

Allowed

Setup Dispatch Briefs: Structured task orders sent via agent-broker to claude-setup specifying the connection or update scope, reference skill departments/marketing/skills/cai-ket-noi-facebook/SKILL.md, and acceptance checks.
First-Round Acceptance Notes: Verification summaries checking /settings/marketing status (Missing permissions (39 total): 0 (complete), token type Page, is_published: false on the hidden test post, and inspecting the recorded mailbox-connected entry without reading raw tokens; or when claude-setup reports verbatim `mailbox pending: skipped…

Hard rules

Safety Gates (`publish`, `outbound-message`, `delete`):
Never execute or approve public posts, broadcasts, or the unpublished verification post (published=false) through the publish gate alone; the human owner always approves the publish gate.
Never send messages directly to audience or prospects (outbound-message gate).
Never delete department records, the unpublished verification post, or historical ledger entries (delete gate) without owner authorization.…

Stop / Do not use

When not to use:

Do not assign marketing copywriting, social community replies, email sequences, ad campaign operations, or accounting tasks to this seat; those belong to the Marketing, Sales, or Accounting departments.
Do not use this seat to click inside Facebook login dialogs, type passwords, or read raw token values; browser-guided setup execution belongs to claude-setup and password/token entry belongs exclusively to the human owner.

Who accepts:

Human Owner (Small Business Owner): Approves the publish gate for the unpublished verification post (published=false) and confirms the connected Page status on /settings/marketing.
Escalation Triggers: Stop and ask the owner immediately if /settings/marketing reports missing permissions out of 39, if a User token was pasted instead of a Page token, or if any token screen was accidentally captured .

Success metrics

100% of owner setup, connection, and update requests are dispatched to claude-setup with clear acceptance criteria and logged in private/so-phong-cong-nghe.md.
100% first-round acceptance checks confirm 39/39 initial permissions (MARKETING_META_SCOPES_CORE) on /settings/marketing and is_published: false on the unpublished test post before reporting ready to the owner and marketing-lead.
0 tokens, passwords, or secrets ever viewed, captured, or written in chat, files, or ledgers.

claude-setup

Setup seat

Guides the small business owner to set up a new machine and connect channels for the first time using the Claude Desktop browser (/connections, 39 initial permissions, final check via one unpublished post through the publish gate)

Skill

cai-dat-may-moicai-ket-noi-facebookcai-ket-noi-facebookplanned

Walks the owner through configuring the local workspace environment and initial seat verification.

Walks the owner through configuring a Facebook Page connection on /connections through 10 guided checkpoints.

cai-ket-noi-facebook: Guide to connecting a Facebook Page for the first time in 10 steps (39 initial permissions, final hidden-post check, Page inbox check in setup, and sign out before closing) at departments/marketing/skills/cai-ket-noi-facebook/SKILL.md

Tools

ReadGrepGlob

Allowed

Skill References: .claude/skills/cai-dat-may-moi/SKILL.md (7 steps) and .claude/skills/cai-ket-noi-facebook/SKILL.md (10 steps + /huong-dan/meta/buoc-…png visual guide).
Office Setup Screen: /connections (where the owner pastes the Page token and manages channel connections).
Milestone & Completion Lines: Distinguish two milestones: (1) after Step 8 (is_published: false), report the token-check milestone SAVED · VERIFIED to cong-nghe-lead; (2) after Step 9 and Step 10 (Facebook logout verified and browser closed), report final completion SETUP COMPLETE to…

Hard rules

Safety Gates (`publish`, `outbound-message`, `delete`):
publish: The final verification step posts one unpublished hidden test post (published=false, text verify post permission) with the Page token and reads it back (is_published: false). Even though it is an unpublished post (published=false), it still goes through the publish gate and requires human approval before execution.
outbound-message: Do not send any direct message or reply to any audience (outbound-message gate).…

Stop / Do not use

When not to use:

Do not commit, do not push, do not edit repository source files.
Do not use this seat to write marketing posts, run ad campaigns, reply to audience messages, or edit code and files outside the setup flow.
Stop and ask the business owner immediately when: (a) Facebook prompts for a password or 2FA code; (b) a button opens a Facebook login popup (Generate Access Token, Open in Access Token Tool); (c) the Creator Discovery screen lists multiple Pages and the owner must confirm which Page belongs to the business; (d) /connections reports missing permissions or a User token instead of…

Who accepts:

Technology Lead (`cong-nghe-lead`) & Business Owner: cong-nghe-lead performs first-round acceptance on /connections (without reading the token), and the business owner verifies that the connected Page name is right, token type is Trang, and missing permissions out of 39 is 0.
Final Verification Gate: Approves the publish gate for the hidden test post (published=false) and confirms is_published: false followed by SETUP COMPLETE after Step 10.

Success metrics

39/39 initial permissions granted on the Page token : Missing 0 on /connections, token type Page`, never-expiring Page token derived from a 60-day user token).
1/1 unpublished verification post (published=false, body verify post permission) created through the publish gate and verified via GET /{post_id}?fields=id,is_published,message returning is_published: false, kept intact as proof.
0 tokens or passwords ever printed in chat, written to files, or logged in ledgers; 1 completion line connected Page <name> at HH:MM, 39/39 permissions reported to…

Guard Hooks (10)

Union of PreToolUse hooks across all seats in this department (from .claude/settings.json and operations/SAN-AN-TOAN-GHE.md table 2.6).

block_mass_delete.pyPreToolUse (Bash) — Matched 100%

block_external_scan.pyPreToolUse (Bash|Read|Grep|Glob) — Matched

protect_final_outputs.pyPreToolUse (Bash|Edit|Write|MultiEdit|NotebookEdit) — Matched 100%

guard_customer_pii.pyPreToolUse (Bash|Edit|Write|MultiEdit|NotebookEdit) — Matched 100%

guard_bulk_send.pyPreToolUse (Bash|mcp__.*) — Matched Claude Code mcp__<server>__<tool> standard

block_ollama.pyPreToolUse (Bash) — Matched 100%

block_ad_account_write.pyPreToolUse (Bash|mcp__.*) — Matched Claude Code mcp__<server>__<tool> standard

6 Safety Gates (3)

Safety gates from department.json and which seats reference each gate in SOUL.md section 3.

Gate	What it guards	Seats touching (from SOUL section 3)
publish	Publish Content — Public deployment of content, social posts, media creatives, or articles.	cong-nghe-leadclaude-setup
customer-message	Member Message — Direct outbound message delivery to real members or external leads.	none
delete	Delete Operations — Destructive deletion of data, contacts, campaigns, or system records.	cong-nghe-leadclaude-setup

Department Packs (2)

Shared knowledge packs declared in department.json.

coreorganisation-facts

Department diagram

You are the workspace owner. Each AI seat has one role, one set of skills, one tool boundary, and stops at human approval gates before publishing, messaging audience, or allocating credits.

SkillPackaged workflow in .claude/skills called by name in Claude Code.

ToolsAllowed Claude Code tools and MCP servers declared for the seat.

AllowedWhat the seat drafts and where it writes (SOUL section 4).

Hard rulesHard boundaries the seat does not cross autonomously (SOUL section 3).

Stop / Do not useWhen not to use this seat and who accepts the work (SOUL sections 9 & 10).

Department technology · 2 seats · 4 skills installed · 1 planned · 10 hooks · 3 gates

Technology Department Diagram

You are the workspace owner. Each AI seat has one role, one set of skills, one tool boundary, and stops at human approval gates before publishing, messaging audience, or allocating credits.

SkillPackaged workflow in .claude/skills called by name in Claude Code.

ToolsAllowed Claude Code tools and MCP servers declared for the seat.

AllowedWhat the seat drafts and where it writes (SOUL section 4).

Hard rulesHard boundaries the seat does not cross autonomously (SOUL section 3).

Stop / Do not useWhen not to use this seat and who accepts the work (SOUL sections 9 & 10).

owner

Owner

Human owner, decides money, audience, publishing

Sets objectives, reviews drafts, approves or rejects at every safety gate.

Department Lead

cong-nghe-lead

Technology Lead

Skill

pm-giao-viectao-du-an-moi

Assists department leads in authoring self-contained task briefs, coordinating progress on CHANNEL.md, and verifying artifacts with reviewer.

Helps leads scaffold new project trees under projects/<slug>/, backfill missing folders or ledgers (--bo-sung), and run three-tier structure checks before delegating.

Tools

ReadGrepGlobWriteEditmcp__agent-broker__*

Allowed

Setup Dispatch Briefs: Structured task orders sent via agent-broker to claude-setup specifying the connection or update scope, reference skill departments/marketing/skills/cai-ket-noi-facebook/SKILL.md, and acceptance checks.
First-Round Acceptance Notes: Verification summaries checking /settings/marketing status (Missing permissions (39 total): 0 (complete), token type Page, is_published: false on the hidden test post, and inspecting the recorded mailbox-connected entry without reading raw tokens; or when claude-setup reports verbatim `mailbox pending: skipped…

Hard rules

Safety Gates (`publish`, `outbound-message`, `delete`):
Never execute or approve public posts, broadcasts, or the unpublished verification post (published=false) through the publish gate alone; the human owner always approves the publish gate.
Never send messages directly to audience or prospects (outbound-message gate).
Never delete department records, the unpublished verification post, or historical ledger entries (delete gate) without owner authorization.…

Stop / Do not use

When not to use:

Do not assign marketing copywriting, social community replies, email sequences, ad campaign operations, or accounting tasks to this seat; those belong to the Marketing, Sales, or Accounting departments.
Do not use this seat to click inside Facebook login dialogs, type passwords, or read raw token values; browser-guided setup execution belongs to claude-setup and password/token entry belongs exclusively to the human owner.

Who accepts:

Human Owner (Small Business Owner): Approves the publish gate for the unpublished verification post (published=false) and confirms the connected Page status on /settings/marketing.
Escalation Triggers: Stop and ask the owner immediately if /settings/marketing reports missing permissions out of 39, if a User token was pasted instead of a Page token, or if any token screen was accidentally captured .

Success metrics

100% of owner setup, connection, and update requests are dispatched to claude-setup with clear acceptance criteria and logged in private/so-phong-cong-nghe.md.
100% first-round acceptance checks confirm 39/39 initial permissions (MARKETING_META_SCOPES_CORE) on /settings/marketing and is_published: false on the unpublished test post before reporting ready to the owner and marketing-lead.
0 tokens, passwords, or secrets ever viewed, captured, or written in chat, files, or ledgers.

claude-setup

Setup seat

Skill

cai-dat-may-moicai-ket-noi-facebookcai-ket-noi-facebookplanned

Walks the owner through configuring the local workspace environment and initial seat verification.

Walks the owner through configuring a Facebook Page connection on /connections through 10 guided checkpoints.

Tools

ReadGrepGlob

Allowed

Skill References: .claude/skills/cai-dat-may-moi/SKILL.md (7 steps) and .claude/skills/cai-ket-noi-facebook/SKILL.md (10 steps + /huong-dan/meta/buoc-…png visual guide).
Office Setup Screen: /connections (where the owner pastes the Page token and manages channel connections).
Milestone & Completion Lines: Distinguish two milestones: (1) after Step 8 (is_published: false), report the token-check milestone SAVED · VERIFIED to cong-nghe-lead; (2) after Step 9 and Step 10 (Facebook logout verified and browser closed), report final completion SETUP COMPLETE to…

Hard rules

Safety Gates (`publish`, `outbound-message`, `delete`):
publish: The final verification step posts one unpublished hidden test post (published=false, text verify post permission) with the Page token and reads it back (is_published: false). Even though it is an unpublished post (published=false), it still goes through the publish gate and requires human approval before execution.
outbound-message: Do not send any direct message or reply to any audience (outbound-message gate).…

Stop / Do not use

When not to use:

Do not commit, do not push, do not edit repository source files.
Do not use this seat to write marketing posts, run ad campaigns, reply to audience messages, or edit code and files outside the setup flow.
Stop and ask the business owner immediately when: (a) Facebook prompts for a password or 2FA code; (b) a button opens a Facebook login popup (Generate Access Token, Open in Access Token Tool); (c) the Creator Discovery screen lists multiple Pages and the owner must confirm which Page belongs to the business; (d) /connections reports missing permissions or a User token instead of…

Who accepts:

Technology Lead (`cong-nghe-lead`) & Business Owner: cong-nghe-lead performs first-round acceptance on /connections (without reading the token), and the business owner verifies that the connected Page name is right, token type is Trang, and missing permissions out of 39 is 0.
Final Verification Gate: Approves the publish gate for the hidden test post (published=false) and confirms is_published: false followed by SETUP COMPLETE after Step 10.

Success metrics

39/39 initial permissions granted on the Page token : Missing 0 on /connections, token type Page`, never-expiring Page token derived from a 60-day user token).
1/1 unpublished verification post (published=false, body verify post permission) created through the publish gate and verified via GET /{post_id}?fields=id,is_published,message returning is_published: false, kept intact as proof.
0 tokens or passwords ever printed in chat, written to files, or logged in ledgers; 1 completion line connected Page <name> at HH:MM, 39/39 permissions reported to…

Guard Hooks (10)

Union of PreToolUse hooks across all seats in this department (from .claude/settings.json and operations/SAN-AN-TOAN-GHE.md table 2.6).

block_mass_delete.pyPreToolUse (Bash) — Matched 100%

block_external_scan.pyPreToolUse (Bash|Read|Grep|Glob) — Matched

protect_final_outputs.pyPreToolUse (Bash|Edit|Write|MultiEdit|NotebookEdit) — Matched 100%

guard_customer_pii.pyPreToolUse (Bash|Edit|Write|MultiEdit|NotebookEdit) — Matched 100%

guard_bulk_send.pyPreToolUse (Bash|mcp__.*) — Matched Claude Code mcp__<server>__<tool> standard

block_ollama.pyPreToolUse (Bash) — Matched 100%

block_ad_account_write.pyPreToolUse (Bash|mcp__.*) — Matched Claude Code mcp__<server>__<tool> standard

6 Safety Gates (3)

Safety gates from department.json and which seats reference each gate in SOUL.md section 3.

Gate	What it guards	Seats touching (from SOUL section 3)
publish	Publish Content — Public deployment of content, social posts, media creatives, or articles.	cong-nghe-leadclaude-setup
customer-message	Member Message — Direct outbound message delivery to real members or external leads.	none
delete	Delete Operations — Destructive deletion of data, contacts, campaigns, or system records.	cong-nghe-leadclaude-setup

Department Packs (2)

Shared knowledge packs declared in department.json.

coreorganisation-facts