# Compliance Trestle Plugin for Claude Code

> **Disclaimer:** This community lab project is hosted at [oscal-compass-lab/compliance-trestle-skills](https://github.com/oscal-compass-lab/compliance-trestle-skills). It is not the official oscal-compass CNCF project. It is not affiliated with, endorsed by, or officially associated with Anthropic, Claude, or the CNCF oscal-compass maintainers. Claude, Anthropic, Compliance Trestle, and related marks are property of their respective owners.

**v0.2.2**. See [CHANGELOG.md](CHANGELOG.md) for release history.

Use [Compliance Trestle](https://oscal-compass.dev/compliance-trestle) to manage OSCAL compliance packages. Compliance Trestle is a CNCF sandbox project for machine-readable compliance documentation. It uses the NIST OSCAL standard.

Project documentation uses ASD-STE100 Simplified Technical English.

## Installation

Claude Code:

``` /plugin marketplace add oscal-compass-lab/compliance-trestle-skills ```

Other agents such as Cursor, Codex, Gemini CLI, and OpenCode: see [docs/AGENT-COMPATIBILITY.md](docs/AGENT-COMPATIBILITY.md).

```bash git clone https://github.com/oscal-compass-lab/compliance-trestle-skills.git ```

Then open the repository. Point your agent at `AGENTS.md` and the portable skills in `agent-skills/`.

## Skill highlights

Root Trestle skills include worked examples, troubleshooting tables, and cross-references:

- **Control implementation**: AC-2 worked example, parameter precedence rules, multi-part controls, and compensating controls. - **Assessment and POA&M**: SAP and SAR creation steps, finding-to-POA&M pipeline, and 30, 90, and 180-day milestone patterns. - **Task system**: CSV column reference, task testing workflow, and XCCDF, Tanium, and CIS troubleshooting. - **Validation**: CI/CD patterns for GitHub Actions and pre-commit hooks, split-file validation, and assessment or POA&M issues. - **Jinja and Governance**: Assessment and POA&M report templates, security policy template example, and v