---
name: internal-investigation-bossmann007
title: Internal Investigation Skill
description: 'Reference: shared framework for managing internal investigations from intake through final memo — privileged investigation log, document processing with needle-finding, source coverage tracking, Q&A against the log, memo drafting, and audience summaries. Loaded by /investigation-open, /investigation-add, /investigation-query, /investigation-memo, and /investigation-summary; not invoked directly.'
author: Bossmann007
author_url: https://github.com/Bossmann007/claude-legal-br/tree/main/employment-legal/skills/internal-investigation
license: Apache-2.0
version: 0.1.0
execution_mode: open
jurisdiction: br
practice: employment
language: en
---

# Internal Investigation Skill

## Matter context

**Matter context.** Check `## Matter workspaces` in the practice-level CLAUDE.md. If `Enabled` is `✗` (the default for in-house users), skip the rest of this paragraph — skills use practice-level context and the matter machinery is invisible. If enabled and there is no active matter, ask: "Which matter is this for? Run `/employment-legal:matter-workspace switch <slug>` or say `practice-level`." Load the active matter's `matter.md` for matter-specific context and overrides. Write outputs to the matter folder at `~/.claude/plugins/config/claude-for-legal/employment-legal/matters/<matter-slug>/`. Never read another matter's files unless `Cross-matter context` is `on`.

---

## Output header

Prepend the work-product header from `~/.claude/plugins/config/claude-for-legal/employment-legal/CLAUDE.md` → `## Outputs` (it differs by user role — see `## Who's using this`). Every file, log, memo, and summary produced by this skill opens with that header.

> **Distribution discipline.** Every file this skill creates — log entries, memo drafts, audience summaries, document notes — inherits the privilege and confidentiality status of the underlying investigation. Distribution beyond the privilege circle (forwarding to non-attorneys outside the investigation team, cc'ing HR without scoping, handing to the business side) can waive privilege over the entire investigation. Store these files where privileged materials live, label per the work-product header, and make every distribution decision deliberately.

## ⚠️ Aviso de sigilo profissional — ler antes de prosseguir

**A marcação não cria o sigilo.** O cabeçalho acima reflete a proteção
pretendida e é importante incluir — mas não estabelece, por si só, o sigilo
profissional do advogado (Lei 8.906/1994, art. 7º, II e XIX, e art. 34, VII).
A proteção efetiva de qualquer output depende de o advogado inscrito na OAB
ter dirigido ou supervisionado a investigação, da finalidade para a qual os
documentos foram criados, e de como são posteriormente usados ou divulgados.

**Antes de abrir um caso, confirme:** a investigação é dirigida por advogado?
Se não — se o RH ou a comissão interna (Lei 14.457/2022) está conduzindo com o
jurídico em papel apenas consultivo, ou se não foi iniciada sob orientação de
advogado para fins de aconselhamento jurídico — a análise de sigilo muda
materialmente, e o rótulo padrão deste skill pode ser enganoso. Um relatório de
apuração conduzido só pelo RH pode ser requisitado em fiscalização do trabalho
(auditores fiscais, Lei 10.593/2002) ou exibido na Justiça do Trabalho. Sinalize
essa questão ao advogado antes de criar qualquer log ou arquivo.

Havendo qualquer dúvida sobre a aplicabilidade do sigilo, o advogado deve
resolvê-la antes de os arquivos da investigação serem criados. Material rotulado
indevidamente pode criar problemas se o sigilo for depois contestado. `[settled — last confirmed 2026-07-02]`

---

## Purpose

Internal investigations fail in two ways: coverage gaps (sources that were
never gathered) and synthesis gaps (evidence that was gathered but never
connected). This skill handles both — it tracks what has and hasn't been
gathered, processes document dumps to surface what matters without burying
the attorney, and maintains a structured log that can be turned into a
privileged memo at any point.

The Brazilian frame. An internal investigation here sits on three pillars:
the employer's **poder diretivo e disciplinar** (CLT art. 2º — the employer
directs and bears the risk of the enterprise, which grounds the authority to
apurar and to discipline); the legal **dever de apurar** condutas de assédio
moral e sexual e de manter canal de denúncia e procedimento apuratório, agora
expresso para a CIPA/comissão interna (Lei 14.457/2022, que alterou a Lei
6.019/1974 e incluiu medidas de prevenção e combate ao assédio no regime da
CIPA); a **proteção do denunciante** contra retaliação; e o **devido processo
interno** — apuração imparcial, contraditório proporcional e sigilo — que
sustenta a validade de uma eventual dispensa por justa causa (CLT art. 482)
e reduz a exposição a dano moral. `[settled — last confirmed 2026-07-02]`
Limites de LGPD (Lei 13.709/2018) sobre dados do empregado permeiam toda a
coleta: e-mails corporativos, mensagens, registros de acesso e dados sensíveis
(art. 5º, II) exigem base legal e finalidade específica.

## Privilege note

All files created by this skill carry the sigilo marking above.
See the notice at the top of this skill for the full caveat on what that
marking does and does not do.

## Load context

Read `~/.claude/plugins/config/claude-for-legal/employment-legal/CLAUDE.md` → escalation table, any investigation protocols noted.

---

## Mode 1: Open a new matter

Triggered by `/employment-legal:investigation-open` or "open an investigation"
or "start an investigation into".

### Step 1 — Intake

Ask the following in a single block:

> To open the investigation log I need a few things:
>
> **The matter**
> - What is the allegation or concern in plain terms?
> - Who is the complainant (or what triggered this — complaint, tip, audit,
>   manager observation)?
> - Who is the respondent or subject?
> - What is the approximate timeframe the alleged conduct occurred?
> - Is this investigation attorney-directed? (If yes: sigilo profissional do
>   advogado may attach — Lei 8.906/1994, art. 7º. If no — HR or the CIPA/
>   comissão interna is running it — flag the sigilo-formation risk before
>   proceeding; see the notice at the top of this skill.)
>
> **Investigation type** (helps me suggest the right sources checklist)
> - Assédio moral / assédio sexual (Lei 14.457/2022 — canal de denúncia e
>   procedimento apuratório via CIPA/comissão interna)
> - Discriminação / retaliação
> - Financial misconduct: fraude em despesas / irregularidades em compras / desvio
> - Executive misconduct: conflito de interesses / relações não declaradas / falhas de governança
> - Denúncia (whistleblower): retaliação por atividade protegida / denúncia de irregularidade
> - Other: describe briefly
>
> **Devido processo interno e proteção do denunciante** (define o protocolo de
> apuração e entrevista)
> - A denúncia é de assédio moral ou sexual? (Se sim, aplique o procedimento
>   apuratório da Lei 14.457/2022: apuração imparcial, sigilo, proteção do
>   denunciante e das testemunhas contra retaliação, e prazo/registro perante
>   a CIPA ou comissão interna. Confirme o regulamento interno e o canal de
>   denúncia da empresa.)
> - Há empregado estável, dirigente sindical, membro da CIPA, gestante, ou
>   afastado por acidente entre os envolvidos? (Se sim, qualquer medida
>   disciplinar posterior tem barreiras de estabilidade — sinalize antes de
>   concluir; ver flags de rescisão na CLAUDE.md deste plugin.)
> - Há previsão de dispensa por justa causa (CLT art. 482) como desfecho
>   possível? (Se sim, o devido processo interno — apuração completa,
>   contraditório proporcional, imediatidade — é o que sustenta a justa causa
>   e reduz a exposição a reversão e dano moral na Justiça do Trabalho.)

Para apurações de assédio, siga o procedimento da Lei 14.457/2022 (canal de
denúncia, apuração imparcial, sigilo e proteção do denunciante) antes de
conduzir entrevistas. Para dados do empregado coletados na apuração (e-mails,
mensagens, registros de acesso, dados sensíveis), observe a LGPD (Lei
13.709/2018): base legal, finalidade específica e minimização. Cite fontes
primárias. Verifique atualidade. Não entreviste até o protocolo estar ajustado.

<!-- US-workforce fallback — GATED. Use ONLY if the company has US-based
     employees or the investigation reaches US workers. Otherwise ignore. -->
> **US-workforce fallback (gated — US employees only).** If the respondent,
> complainant, or any witness is a US-based employee, additional US doctrines
> may apply and change the interview protocol:
> - **Weingarten (NLRA):** unionized/CBA-covered US workers may have a right to
>   a representative at an investigatory interview.
> - **Garrity (5th Amendment):** compelled statements from public-sector US
>   employees carry use-immunity consequences.
> - **Upjohn warnings:** US attorney-conducted interviews are typically preceded
>   by an Upjohn warning to preserve corporate privilege.
> These have **no equivalent in Brazilian labor law** and do not apply to CLT
> employees. Research NLRA / 5th Amendment / Upjohn only for the US-worker
> subset, cite US primary sources, and keep the Brazilian protocol for BR
> employees. `[model knowledge — verify]`

### Step 2 — Create the matter directory and files

Create the following files:

`~/.claude/plugins/config/claude-for-legal/employment-legal/investigation-[matter-slug]/log.yaml`:

```yaml
# [WORK-PRODUCT HEADER — per plugin config ## Outputs — differs by role; see `## Who's using this`]
matter: "[matter name]"
matter_slug: "[slug]"
opened: "[ISO date]"
attorney_directed: [true/false]
allegation: "[plain-language summary]"
complainant: "[name/role or anonymous]"
respondent: "[name/role]"
conduct_timeframe: "[approximate dates]"
investigation_type: "[HR/financial/executive/whistleblower/other]"
status: open
last_updated: "[ISO date]"

issues:
  - "[Issue 1 — derived from allegation, e.g. 'alleged hostile work environment']"
  - "[Issue 2 if applicable]"

entries: []

evidentiary_gaps: []
```

`~/.claude/plugins/config/claude-for-legal/employment-legal/investigation-[matter-slug]/sources-checklist.yaml`:

Generated from the investigation type. See sources checklist templates below.

`~/.claude/plugins/config/claude-for-legal/employment-legal/investigation-[matter-slug]/documents-reviewed.yaml`:

```yaml
# [WORK-PRODUCT HEADER — per plugin config ## Outputs — differs by role; see `## Who's using this`]
matter: "[matter name]"
total_reviewed: 0
total_surfaced: 0
last_updated: "[ISO date]"
documents: []
```

### Step 3 — Sources checklist

Generate the appropriate checklist based on investigation type. Present it
to the attorney and ask: "Does this fit your matter? Let me know if any items
are not applicable (I'll mark them N/A) or if there are additional sources
specific to this situation."

**HR investigation sources (harassment/discrimination/retaliation):**
```yaml
sources:
  - id: 1
    source: "Complainant interview"
    status: open
    notes: ""
  - id: 2
    source: "Respondent interview"
    status: open
    notes: ""
  - id: 3
    source: "Witness interviews — identify from complainant and respondent accounts"
    status: open
    notes: ""
  - id: 4
    source: "Email/messaging review — parties, relevant date range"
    status: open
    notes: ""
  - id: 5
    source: "HR records — respondent's performance history, prior complaints,
             prior discipline"
    status: open
    notes: ""
  - id: 6
    source: "Prior complaints — any prior complaints against respondent in
             HR system"
    status: open
    notes: ""
  - id: 7
    source: "Comparator data — how were similar situations handled"
    status: open
    notes: ""
  - id: 8
    source: "Relevant policies — harassment, code of conduct, reporting
             procedures (version in effect at time of alleged conduct)"
    status: open
    notes: ""
  - id: 9
    source: "Org chart and reporting relationships at time of alleged conduct"
    status: open
    notes: ""
  - id: 10
    source: "Calendar records — any meetings or events mentioned in accounts"
    status: open
    notes: ""
  - id: 11
    source: "Registro do procedimento apuratório — canal de denúncia acionado,
             atas da CIPA/comissão interna, medidas de proteção ao denunciante,
             garantia de sigilo (Lei 14.457/2022); confirmar que o devido
             processo interno está documentado"
    status: open
    notes: ""
  - id: 12
    source: "Base legal LGPD para coleta de dados do empregado (e-mails,
             mensagens, registros de acesso, dados sensíveis) — finalidade
             específica e minimização (Lei 13.709/2018)"
    status: open
    notes: ""
```

**Financial misconduct sources:**
```yaml
sources:
  - id: 1
    source: "Expense reports — subject, relevant period"
    status: open
    notes: ""
  - id: 2
    source: "Approval records — who approved the expenses or transactions"
    status: open
    notes: ""
  - id: 3
    source: "Vendor/contractor records — contracts, invoices, payment records"
    status: open
    notes: ""
  - id: 4
    source: "Financial system records — AP, GL entries for relevant accounts"
    status: open
    notes: ""
  - id: 5
    source: "Email/messaging review — subject, approvers, counterparties"
    status: open
    notes: ""
  - id: 6
    source: "Subject interview"
    status: open
    notes: ""
  - id: 7
    source: "Approver interviews"
    status: open
    notes: ""
  - id: 8
    source: "Counterparty/vendor interviews (if accessible)"
    status: open
    notes: ""
  - id: 9
    source: "Audit logs — system access logs for relevant accounts/systems"
    status: open
    notes: ""
  - id: 10
    source: "Prior audits or reviews covering the relevant period"
    status: open
    notes: ""
  - id: 11
    source: "Registro do devido processo interno — apuração imparcial, sigilo,
             proteção do denunciante (Lei 14.457/2022 quando houver denúncia);
             base legal LGPD para acesso a dados financeiros e de acesso do
             empregado (Lei 13.709/2018)"
    status: open
    notes: ""
```

**Executive misconduct sources:**
```yaml
sources:
  - id: 1
    source: "Subject interview"
    status: open
    notes: ""
  - id: 2
    source: "Board/compensation committee records — relevant resolutions,
             minutes, approvals"
    status: open
    notes: ""
  - id: 3
    source: "Employment agreement and any amendments"
    status: open
    notes: ""
  - id: 4
    source: "Equity records — grants, exercises, vesting"
    status: open
    notes: ""
  - id: 5
    source: "Expense reports and approval records"
    status: open
    notes: ""
  - id: 6
    source: "Email/messaging review — subject, relevant counterparties"
    status: open
    notes: ""
  - id: 7
    source: "Conflict of interest disclosures (or absence thereof)"
    status: open
    notes: ""
  - id: 8
    source: "Outside business activity records"
    status: open
    notes: ""
  - id: 9
    source: "Witness interviews — direct reports, peers, board members"
    status: open
    notes: ""
  - id: 10
    source: "Prior complaints or concerns raised about subject"
    status: open
    notes: ""
  - id: 11
    source: "Registro do devido processo interno — apuração imparcial e sigilo;
             base legal LGPD para acesso a comunicações e dados do executivo
             (Lei 13.709/2018)"
    status: open
    notes: ""
```

**Whistleblower sources:**
```yaml
sources:
  - id: 1
    source: "Complainant interview"
    status: open
    notes: ""
  - id: 2
    source: "Original complaint or tip — written form if exists"
    status: open
    notes: ""
  - id: 3
    source: "Records related to the underlying allegation (the thing
             complainant blew the whistle on)"
    status: open
    notes: ""
  - id: 4
    source: "Records related to any adverse action taken against complainant
             after the protected activity"
    status: open
    notes: ""
  - id: 5
    source: "Decision-maker interviews — who made the adverse action decision"
    status: open
    notes: ""
  - id: 6
    source: "Comparator data — treatment of similarly situated employees
             who did not engage in protected activity"
    status: open
    notes: ""
  - id: 7
    source: "Email/messaging review — decision-makers, relevant timeframe"
    status: open
    notes: ""
  - id: 8
    source: "Timing analysis — proximity of protected activity to adverse
             action"
    status: open
    notes: ""
  - id: 9
    source: "Respondent/decision-maker interviews"
    status: open
    notes: ""
  - id: 10
    source: "Registro da proteção do denunciante contra retaliação e do
             procedimento apuratório (Lei 14.457/2022 quando aplicável);
             base legal LGPD para dados coletados na apuração (Lei 13.709/2018)"
    status: open
    notes: ""
```

After presenting the checklist, write it to
`~/.claude/plugins/config/claude-for-legal/employment-legal/investigation-[slug]/sources-checklist.yaml`.

---

## Mode 2: Add data

Triggered by `/employment-legal:investigation-add` or "add to the [matter]
investigation" or when the attorney pastes documents or interview notes.

### Step 1 — Identify the matter

If multiple investigation folders exist in `~/.claude/plugins/config/claude-for-legal/employment-legal/`, ask which matter this
data belongs to. If only one, proceed.

### Step 2 — Identify the data type

Ask (if not clear from context):
- Interview notes (whose interview?)
- Document batch (emails, records, files)
- Attorney notes or observations
- Registro do procedimento apuratório / proteção do denunciante (Lei 14.457/2022)

### Step 3 — Document pull criteria

For any document batch, apply the following pull criteria. A document is
surfaced if it meets ANY of the following. The criteria are intentionally
set to pull slightly aggressively — it is better to surface a false positive
than to miss a significant item.

**Pull criteria:**
1. Contains the name of any party to the investigation (complainant,
   respondent, witnesses named in prior log entries)
2. Was authored or received by a party during the key conduct timeframe
3. Contains keywords related to the allegation type (identified at intake
   and from prior log entries — update the keyword list as new terms emerge
   from accounts)
4. Contains explicit or implicit admissions ("I shouldn't have," "I know
   how this looks," "don't put this in writing," "delete this")
5. Contains language contradicting any account already in the log — flag
   the specific contradiction and the log entry it conflicts with
6. Contains language that would be sensitive in litigation: discriminatory
   terms, threats, discussions of protected characteristics or activities,
   financial irregularities matching the allegation pattern
7. Is a document type that has been mentioned in prior accounts but has
   not yet appeared in the document set (e.g., a meeting was mentioned in
   an interview but no calendar invite has been reviewed) → log as
   evidentiary gap, not a surfaced document

**Disposition for every document reviewed:**
- `surfaced`: meets one or more pull criteria — added to log as a log entry
- `reviewed-nothing-significant`: reviewed, does not meet pull criteria —
  logged in documents-reviewed.yaml with one-line description only

**After processing a document batch, report:**

```
Document review complete.
Reviewed: [N] documents
Surfaced: [N] as potentially significant
Logged as reviewed / nothing significant: [N]
New evidentiary gaps identified: [N]

Surfaced items:
[list with one-line description and which pull criterion triggered]
```

This report is the answer to "what about missed needles." The pull criteria
are documented, the surface ratio is visible, and the attorney can review
the full document log at any time. In Q&A mode, "I have not seen any document
on [topic] in the [N] documents reviewed" is a meaningful statement only
because every document reviewed is logged.

### Step 4 — Write log entries

For each surfaced item, append to `log.yaml`:

```yaml
- entry_id: [auto-increment]
  entry_type: [interview / document / attorney-note / gap]
  date_of_event: "[date the event occurred — not when logged]"
  date_logged: "[ISO datetime]"
  source: "[witness name/role, or document filename/description]"
  source_type: [complainant / respondent / witness / document / attorney-note]
  issues: ["[which investigation issue(s) this entry relates to]"]
  significance: [high / medium / background]
  summary: "[what this entry adds to the record — 2-5 sentences]"
  quote: "[verbatim quote if significant — otherwise empty]"
  contradicts_entry: [entry_id or null]
  corroborates_entry: [entry_id or null]
  credibility_note: ""
  pull_criterion: "[which criterion triggered — for documents]"
  privilege: sigilo-profissional-advogado
```

For evidentiary gaps:

```yaml
- gap_id: [auto-increment]
  description: "[what document/source should exist but hasn't been found]"
  identified_from: "[which log entry or account raised this]"
  source_to_obtain: "[where to get it]"
  priority: [high / medium / low]
  status: open
```

### Step 5 — Update sources checklist

If the data added corresponds to a checklist item, ask the attorney if it
should be marked complete or in-progress. Do not auto-mark complete —
the attorney decides when a source is adequately covered.

---

## Mode 3: Query the log

Triggered by `/employment-legal:investigation-query` or any question
phrased against the investigation (e.g., "what did [witness] say about",
"what documents corroborate", "what do we still need", "what's the
strongest evidence on each side").

Read the full log before answering. Answer types:

**Factual query** ("what did X say about Y"):
Answer from the log entries, citing entry IDs. If the log contains nothing
on the topic: "I have not seen any information on [topic] in this
investigation log ([N] entries reviewed). This may be worth flagging as
a gap."

**Conflict query** ("where do accounts conflict"):
Surface all contradicts_entry links. For each conflict: state what the
conflict is, which entries are in tension, and what (if any) documentary
evidence bears on the conflict.

**Coverage query** ("what do we still need" / "what are our gaps"):
Read sources-checklist.yaml and evidentiary_gaps in log.yaml. Report:
- Checklist items still open
- Evidentiary gaps logged
- Any accounts that reference sources not yet gathered

**Strength query** ("what's the strongest evidence on each issue"):
For each issue in the log, identify: the highest-significance log entries,
any documentary corroboration, and any unresolved conflicts. Present
issue by issue.

**Devido-processo query** ("já documentamos o procedimento apuratório / proteção do denunciante"):
Check the Lei 14.457/2022 / devido-processo-interno checklist item and any log
entries tagged as procedimento apuratório or proteção do denunciante. Flag if
not yet completed. (US-workforce fallback: if US employees are involved, also
check Upjohn-warning documentation for the US-worker subset.)

---

## Mode 4: Draft or update the memo

Triggered by `/employment-legal:investigation-memo` or "draft the memo"
or "update the memo".

### If no memo exists — first draft

Read the full log. Do not draft until the following are complete (warn if
not):
- At least one entry for each open issue
- Complainant and respondent entries present
- Sources checklist reviewed (flag any high-priority open items)

Draft the memo in the following structure, following standard internal
investigation memorandum practice:

```markdown
[WORK-PRODUCT HEADER — per plugin config ## Outputs — differs by role; see `## Who's using this`]

---

**MEMORANDUM**

To: [Attorney to fill in]
From: [Attorney to fill in]
Date: [Date]
Re: Internal Investigation — [Matter name]
Status: PRELIMINARY DRAFT

---

## Executive Summary

[2-3 paragraphs: allegation in plain terms, investigation scope and
methodology summary, key findings in bullet form (Sustained / Not
Sustained / Inconclusive), recommended actions. Written last but
appears first.]

---

## Background and Scope

**Triggering event:** [What initiated the investigation]

**Allegations investigated:**
[Each issue from the log as a numbered allegation]

**Out of scope:** [Anything explicitly not investigated and why]

**Investigation period:** [Dates of conduct alleged]
**Investigation conducted:** [Date opened] to [present or close date]

---

## Methodology

**Interviews conducted:**
| Witness | Role | Date | Notes |
|---|---|---|---|
[Populated from log entries with source_type = interview]

**Documents reviewed:**
[Summary of document categories reviewed, volume, date range.
Full document log is maintained separately.]

**Other sources:**
[Any other sources from checklist — policies, HR records, etc.]

**Limitations:** [Any sources requested but not obtained, any constraints]

---

## Factual Findings

*[Organized by issue — one section per allegation. Not by witness,
not purely chronological.]*

### Issue 1: [Allegation]

[Narrative of what the evidence shows on this issue. Cite log entry IDs
inline in brackets. Where accounts conflict, present the conflict directly
— do not smooth it over. Documentary evidence presented with quotes where
significant.]

### Issue 2: [Allegation]

[Same structure]

[Continue for each issue]

---

## Credibility Assessment

*[Standalone section. Address only witnesses whose credibility is
determinative — i.e., where the finding on an issue depends on which
account is credited.]*

### [Witness name/role]

**Internal consistency:** [Consistent / Inconsistent — note specifics]
**Corroboration:** [What documentary or other evidence corroborates
or undermines the account]
**Motive:** [Any reason to credit or discount the account]
**Demeanor:** [Attorney's observations if interviews were in person —
leave blank if not applicable or not observed]
**Assessment:** [Credit / Do not credit / Partially credit — with basis]

---

## Relevant Policies

[Policies in effect at the time of alleged conduct that bear on the issues.
Cite the version. Do not cite policies that were adopted after the conduct.]

---

## Conclusions

| Issue | Finding | Basis |
|---|---|---|
| [Issue 1] | Sustained / Not Sustained / Inconclusive | [One sentence] |
| [Issue 2] | ... | ... |

*As conclusões baseiam-se no conjunto probatório apurado (apuração interna, não
processo judicial). Cada finding — Procedente / Improcedente / Inconclusivo —
deve estar amparado no devido processo interno e no contraditório proporcional
concedido ao investigado.*

---

## Recommendations

[Organized by action type:]

**Disciplinary action:** [If any — state the basis, not just the outcome]
**Policy or process changes:** [If any gap in policies contributed]
**Training:** [If indicated]
**Further investigation:** [Any threads not fully resolved]
**Monitoring:** [Any follow-up needed]

---

## Appendix A: Chronology of Events

[Auto-generated from log entries sorted by date_of_event, not date_logged.
Format: Date | Summary | Source (Entry ID)]

## Appendix B: Documents Reviewed

[Summary table from documents-reviewed.yaml]
```

Write the draft to `~/.claude/plugins/config/claude-for-legal/employment-legal/investigation-[slug]/memo.md`.

### If memo already exists — update

Read the memo and the log. Identify log entries added since the memo was
last drafted (compare date_logged against memo's last-updated date).

Report what has changed:

```
Since the last memo draft ([date]), the following has been added to the log:

[N] new entries
New issues: [any]
New conflicts: [any]
Resolved gaps: [any]

Sections that need updating:
  Factual findings: [which issues are affected]
  Credibility: [any new credibility-relevant entries]
  Conclusions: [any findings that should be revisited]
  Appendix A: [N] new chronology entries
```

Ask: "Want me to update the full memo, or just the affected sections?"

Apply updates. Preserve prior drafting. Mark changed sections with
`[UPDATED: date]` until the attorney reviews.

---

## Mode 5: Draft audience summary

Triggered by `/employment-legal:investigation-summary` or "draft a
summary for [audience]".

Ask: who is the audience and what decision or action does this summary
support?

**HR summary** (for HR decision on disciplinary action):
- What happened (factual summary, no legal analysis)
- Finding on each allegation (Sustained/Not Sustained/Inconclusive)
- Recommended action
- What is NOT in this summary: privilege analysis, credibility methodology,
  legal exposure assessment, attorney mental impressions
- Header: "Confidential — HR Use Only — Do Not Distribute"
- Do not include entry IDs or document citations — those stay in the memo

**Leadership/Board summary** (for governance decision):
- The allegation and scope in one paragraph
- Key findings
- Business impact / exposure (high level — no specific legal analysis)
- What the company is doing about it
- Header: "[WORK-PRODUCT HEADER — per plugin config ## Outputs — differs by role; see `## Who's using this`]"

**Outside counsel briefing** (handing off for litigation or deeper review):
- Full context including legal exposure analysis
- Open evidentiary threads
- Credibility issues that remain contested
- Documents that would be most significant in litigation
- Header: "[WORK-PRODUCT HEADER — per plugin config ## Outputs — differs by role; see `## Who's using this`]"

---

## Consequential-action gate (respond to a demand or complaint)

**Before producing a summary, memo, or content intended for an external response (resposta a notificação/inquérito do MPT — Ministério Público do Trabalho, resposta à fiscalização do trabalho / auditor fiscal, defesa em reclamatória trabalhista, resposta a notificação sindical, ou qualquer réplica formal a denúncia externa):** Read `## Who's using this` in `~/.claude/plugins/config/claude-for-legal/employment-legal/CLAUDE.md`. If the Role is **Non-lawyer**:

> Responder a uma notificação, inquérito ou reclamação tem consequências jurídicas — posições assumidas aqui viram confissão em processo posterior, defesas podem ser renunciadas por inadvertência, e o sigilo profissional sobre a investigação subjacente pode ser perdido. Você revisou esta resposta com um advogado? Se sim, prossiga. Se não, aqui vai um resumo para levar a ele:
>
> - A alegação, o órgão/foro (MPT, fiscalização do trabalho, Justiça do Trabalho, sindicato) e o prazo
> - O que a apuração levantou (findings por alegação; documentos revisados; testemunhas ouvidas; devido processo interno e proteção do denunciante documentados ou não, Lei 14.457/2022)
> - Qualquer thread probatório em aberto ou disputa de credibilidade
> - O que a resposta proposta diz e o que concede implicitamente
> - Questões abertas e o que ficou irresolvido
> - O que pode dar errado (quebra de sigilo, declarações fáticas inconsistentes, defesa/preliminar perdida)
> - O que perguntar ao advogado (é a tese certa; estamos preservando defesas; escritório externo deve assumir; o que precisa de tarja/redação; há dado pessoal sensível a proteger sob LGPD antes de exibir)
>
> Se precisar encontrar um advogado inscrito na OAB: contate a seccional da OAB (Ordem dos Advogados do Brasil) do seu estado para serviço de referência. Respostas a órgãos fiscalizadores e a notificações são justamente onde réplicas sem assessoria costumam criar mais exposição do que a alegação original.

Do not produce an external-response draft past this gate without an explicit yes. Internal memos, HR summaries, and leadership briefings used only within the organization do not trip this gate (but the privilege-formation caveat at the top of this skill still applies).

---

## What this skill does NOT do

- Make disciplinary decisions — it supports the attorney's findings,
  not HR's action
- Guarantee sigilo — o sigilo profissional depende de como a investigação é
  estruturada (advogado dirigindo/supervisionando), não de como o memo é rotulado
- Process documents it cannot read — if files are in formats that cannot
  be parsed, flag them for manual review
- Conduct interviews — it logs interview notes, it does not interview witnesses
- Substituir o procedimento apuratório da Lei 14.457/2022 — rastreia se o devido
  processo interno e a proteção do denunciante foram documentados, não os conduz
  (e, no US-workforce fallback, rastreia Upjohn warnings sem dá-las)

## Close with the next-steps decision tree

End with the next-steps decision tree per CLAUDE.md `## Outputs`. Customize the options to what this skill just produced — the five default branches (draft the X, escalate, get more facts, watch and wait, something else) are a starting point, not a lock-in. The tree is the output; the lawyer picks.