The ASL is only a control if it is current and purchasing cannot bypass it. Audit findings usually come from
four places: expired certificates, re-evaluations never done, conditional suppliers left conditional for years,
and purchase orders placed with suppliers or for processes the list does not cover. scripts/asl_audit.py
checks all four.
Trigger Conditions
Activate this skill when the user:
- Maintains an approved supplier list or external provider register
- Is preparing for an ISO 9001, IATF 16949 or AS9100 audit of purchasing
- Found material bought from an unapproved supplier, or outside a supplier's scope
- Asks how often to re-evaluate suppliers or what statuses to use
New supplier approval: supplier-audit-questionnaire-builder; performance data for re-evaluation: supplier-quality-scorecard-builder.
Workflow
1. STRUCTURE -> ASL columns and statuses (asl-structure.md)
2. AUDIT -> python scripts/asl_audit.py asl.csv --today YYYY-MM-DD
3. POs -> python scripts/asl_audit.py asl.csv --pos last_month_pos.csv --today YYYY-MM-DD
4. FIX -> off-list or out-of-scope buys: quarantine, NCR on purchasing, close the system gap
5. DECIDE -> conditional / probation past end date: approve or disqualify
6. PREVENT -> ERP status block, scope codes, certificate watch (purchasing-controls.md)Checks (asl_audit.py)
| Code | Severity | Problem |
|---|---|---|
| AL001 | high | PO with an off-list, pending or disqualified supplier |
| AL002 | high | PO outside the approved scope |
| AL003 | medium | Certificate expired or expiring |
| AL004 | medium | Re-evaluation overdue (12 / 24 / 36 months by risk) |
| AL005 | medium | Conditional / probation past its decision date or without one |
| AL006 | medium | High-risk supplier without required certification |
| AL007 | low | Single-source high-risk supplier without backup |
| AL008 | low | No approver |
AL002 [high] PlastiForm: PO PO-9004: 'anodising' is outside the approved scope (injection moulding)
AL005 [medium] CastCorp: probation ended 2026-09-30: decide approve or disqualifyASL columns, status meanings, standards' requirements and re-evaluation intervals: asl-structure.md. ERP blocks, PO requirements, off-list and emergency purchases: purchasing-controls.md.
Output Format
Deliver the ASL summary (counts by status), the findings ordered by severity with the action and owner for each, decisions needed (conditional / probation suppliers), and system fixes to prevent recurrence.
Scripts
python scripts/asl_audit.py asl.csv --today 2026-10-24
python scripts/asl_audit.py asl.csv --pos pos.csv --today 2026-10-24 --require-cert "IATF 16949" --warn-days 60ASL columns: supplier, status, scope (;-separated), risk, certification, cert_expiry, last_evaluation,
approved_by, condition_until, single_source, backup. PO columns: po, supplier, scope, date. Exit codes: 0 no high
findings, 1 high findings, 2 read or usage error.
Additional Resources
| File | Content |
|---|---|
| asl-structure.md | Requirements, ASL columns, statuses, re-evaluation intervals |
| purchasing-controls.md | ERP blocks, PO requirements, off-list purchases, emergency buys |
8d-problem-solving-report-writer
Write and review 8D problem-solving reports for customer complaints and serious nonconformities (automotive and aerospace practice: Ford Global 8D, VDA, GM, Stellantis formats): D0 emergency response, D1 cross-functional team and champion, D2 problem description with 5W2H and is / is-not and no cause in the statement, D3 interim containment within 24 hours with verification and clean point, D4 verified occurrence and escape (non-detection) root causes plus systemic cause, D5 permanent corrective actions for each cause verified before implementation, D6 implementation, validation with production data and removal of containment, D7 PFMEA, control plan and read-across to similar products, D8 closure and recognition. Checks an 8D discipline by discipline for missing content, human-error root causes, missing escape cause or action, late containment and dates out of order.
acceptance-sampling-plan-selector
Select and evaluate acceptance sampling plans for incoming, in-process and final inspection: ANSI/ASQ Z1.4 / ISO 2859-1 single sampling under normal inspection (code letter from lot size and inspection level I, II, III, S-1 to S-4; sample size, Ac and Re from AQL, following the table's arrows to the correct plan; 100% when n reaches the lot size; AQLs above 10 per 100 units), operating characteristic curves (Pa at any quality, producer's quality level, indifference point, LTPD, AOQ and AOQL, binomial or hypergeometric), plans designed from producer and consumer risk, and c = 0 zero-acceptance plans. Covers AQL choice by defect class, switching rules between normal, tightened and reduced inspection, when sampling is not appropriate, and random sampling.
apqp-phase-planner
Plan and track Advanced Product Quality Planning (AIAG APQP 3rd edition, IATF 16949) for a new or changed automotive part: back-schedule the five phases (plan and define, product design, process design, product and process validation, launch and feedback) from the start-of-production date by program complexity, with overlap, PPAP lead and safe-launch period; list the deliverables and gate for each phase (DFMEA, DVP&R, feasibility, process flow, PFMEA, control plans, MSA, Ppk, run at rate, PPAP, safe launch, lessons learned); adjust for build-to-print suppliers; flag compressed timelines and late or untracked deliverables against a status list. Covers gate reviews, red/yellow/green status reporting, run at rate and safe-launch exit criteria.
as9100-gap-analyzer
Run an AS9100D / EN 9100:2018 gap analysis for aviation, space and defence suppliers on the requirements added to ISO 9001: on-time delivery and conformity focus, management representative, ethics and human-factors awareness, operational planning and operational risk management, configuration management, product safety, counterfeit-part prevention, special requirements, critical items and key characteristics, external provider register and flow-down, FOD prevention, tooling and NC program control, special process validation, first article inspection (AS9102), traceability, in-service data and nonconforming product control. Generates and scores a worksheet, grades missing core controls as major, and checks invalid n/a claims. Covers AS9101/AS9104, OASIS, AS9102 FAI forms, counterfeit standards (AS5553, AS6174, AS6081), NADCAP and the planned IA9100 transition.
audit-report-writer
Write internal, supplier and pre-certification audit reports with the content ISO 19011:2018 6.5 expects: audit objectives, scope, criteria with revisions, dates, team and auditees, method and sampling statement, specific strengths, findings table and three-part finding details (requirement, evidence, statement), conclusion on the degree of fulfilment of criteria, diverging opinions, follow-up deadlines and distribution. Builds a Markdown report from a JSON audit record, generates the conclusion from the findings (major / minor / none) and flags reports missing required content or findings without clause or evidence. Covers conclusion wording, closing meetings, response expectations and verifying corrective actions.
capa-effectiveness-checker
Verify whether a corrective action actually worked (ISO 9001 10.2.1 d, IATF 16949, 8D D6) with statistics instead of 'no complaints so far': before/after defect-rate comparison with an exact conditional binomial test for Poisson counts and a minimum practical reduction, zero-defect demonstration size (n = ln(1-C)/ln(1-p), rule of three) with progress so far, and exact Clopper-Pearson upper bounds on the post-action defect rate. Returns effective, not yet demonstrated (with the units still needed) or not effective. Covers setting effectiveness criteria when the CAPA is opened, choosing the window by problem frequency, leading indicators for rare failures (Cpk, SPC stability, error-proofing checks, LPA), and traps such as volume changes, detection changes and containment masking.