@bluefly/openstandardagents 0.3.2 → 0.3.3

package/dist/spec/v0.3.2/agent-test.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "https://openstandardagents.org/schemas/v0.3.1/agent-test.json",
+  "$id": "https://openstandardagents.org/schemas/v0.3.3/agent-test.json",
   "title": "OSSA AgentTest Resource",
   "description": "Test definition for OSSA agents - declarative testing framework for agent behavior, performance, and compliance validation",
   "type": "object",
@@ -13,7 +13,7 @@
   "properties": {
     "apiVersion": {
       "type": "string",
-      "const": "ossa/v0.3.1",
+      "const": "ossa/v0.3.3",
       "description": "OSSA API version for AgentTest resources"
     },
     "kind": {

package/dist/spec/v0.3.2/examples/access-tiers/README.md

@@ -1,6 +1,6 @@
-# OSSA v0.3.2 Access Tiers Examples
+# OSSA v0.3.3 Access Tiers Examples
 
-This directory contains example agent manifests demonstrating the **Access Tiers** and **Separation of Duties** features introduced in OSSA v0.3.2.
+This directory contains example agent manifests demonstrating the **Access Tiers** and **Separation of Duties** features introduced in OSSA v0.3.3.
 
 ## Access Tier Hierarchy
 
@@ -49,7 +49,7 @@ In security/compliance domains, readers should not write:
 ## Usage in Agent Manifests
 
 ```yaml
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
 
 metadata:
@@ -103,4 +103,4 @@ ossa audit --tier-violations
 
 - [access_tiers.yaml](../../access_tiers.yaml) - Full access tier definitions
 - [taxonomy.yaml](../../taxonomy.yaml) - Domain taxonomy with tier mappings
-- [ossa-0.3.2.schema.json](../../ossa-0.3.2.schema.json) - JSON Schema with tier validation
+- [ossa-0.3.3.schema.json](../../ossa-0.3.3.schema.json) - JSON Schema with tier validation

package/dist/spec/v0.3.2/examples/access-tiers/code-critic.ossa.yaml

@@ -1,13 +1,5 @@
-# =============================================================================
-# OSSA v0.3.2 - Critic Example: Code Reviewer (Cannot Approve)
-# =============================================================================
-# Demonstrates critic-executor separation rule
-# Critics can review and provide feedback but CANNOT approve or merge
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
-
 metadata:
   name: code-critic
   version: 1.0.0
@@ -16,10 +8,11 @@ metadata:
     team: platform
     access_tier: tier_1_read
     domain: development
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   type: critic
-
   role: |
     You are a code review critic that analyzes merge requests and provides
     detailed feedback on code quality, architecture, and best practices.
@@ -32,13 +25,10 @@ spec:
 
     Your role is to critique, not to approve. Approvals must come from
     human reviewers or designated approver agents (which you cannot be).
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.2
-
-  # Taxonomy Classification (v0.3.2+)
   taxonomy:
     domain: development
     subdomain: code-review
@@ -46,8 +36,6 @@ spec:
     concerns:
       - quality
       - architecture
-
-  # Access Tier Configuration (v0.3.2+)
   access:
     tier: tier_1_read
     permissions:
@@ -62,8 +50,6 @@ spec:
       - approve
     audit_level: standard
     requires_approval: false
-
-  # Separation of Duties (v0.3.2+)
   separation:
     role: critic
     conflicts_with:
@@ -74,7 +60,6 @@ spec:
       - approve
       - merge
       - execute
-
   tools:
     - name: gitlab-mr-reader
       type: api
@@ -88,7 +73,6 @@ spec:
       type: mcp
       config:
         server: code-analysis-mcp-server
-
   autonomy:
     level: semi_autonomous
     allowed_actions:
@@ -100,7 +84,6 @@ spec:
       - approve_mr
       - merge_mr
       - execute_code
-
   messaging:
     publishes:
       - channel: reviews.feedback
@@ -112,7 +95,10 @@ spec:
               type: integer
             feedback_type:
               type: string
-              enum: [comment, request_changes, praise]
+              enum:
+                - comment
+                - request_changes
+                - praise
             issues_found:
               type: array
             recommendations:

package/dist/spec/v0.3.2/examples/access-tiers/compliance-governor.ossa.yaml

@@ -1,13 +1,5 @@
-# =============================================================================
-# OSSA v0.3.2 - Tier 4 (Policy) Example: Compliance Governor
-# =============================================================================
-# Demonstrates separation of duties for policy-defining governor agents
-# ISOLATED: Can define policies but CANNOT execute - must delegate to Tier 3
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
-
 metadata:
   name: compliance-governor
   version: 1.0.0
@@ -16,10 +8,11 @@ metadata:
     team: security
     access_tier: tier_4_policy
     domain: security
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   type: governor
-
   role: |
     You are a compliance governance agent responsible for defining and
     publishing security and compliance policies. You monitor policy adherence
@@ -33,14 +26,11 @@ spec:
 
     Your role is legislative, not executive. You define the rules;
     operators enforce them.
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
-    temperature: 0.0
+    temperature: 0
     profile: safe
-
-  # Taxonomy Classification (v0.3.2+)
   taxonomy:
     domain: security
     subdomain: compliance
@@ -49,8 +39,6 @@ spec:
       - governance
       - quality
       - reliability
-
-  # Access Tier Configuration (v0.3.2+)
   access:
     tier: tier_4_policy
     permissions:
@@ -74,8 +62,6 @@ spec:
     audit_level: comprehensive
     requires_approval: false
     isolation: strict
-
-  # Separation of Duties (v0.3.2+)
   separation:
     role: governor
     conflicts_with:
@@ -91,8 +77,6 @@ spec:
       - deploy
       - merge
       - modify_production
-
-  # Delegation Configuration (v0.3.2+)
   delegation:
     enabled: true
     allowed_tiers:
@@ -106,7 +90,6 @@ spec:
       - audit_trail
       - violation_report
       - approval
-
   tools:
     - name: policy-reader
       type: mcp
@@ -119,12 +102,11 @@ spec:
         endpoint: https://api.compliance.local
         methods:
           - GET
-          - POST  # For publishing policies only
+          - POST
     - name: audit-logger
       type: mcp
       config:
         server: audit-mcp-server
-
   autonomy:
     level: autonomous
     allowed_actions:
@@ -139,7 +121,6 @@ spec:
       - merge
       - modify_infrastructure
       - remediate_directly
-
   compliance:
     frameworks:
       - SOC2
@@ -147,7 +128,6 @@ spec:
       - GDPR
     audit_logging: required
     pii_handling: redact
-
   safety:
     guardrails:
       enabled: true
@@ -157,7 +137,6 @@ spec:
         - no_execution
         - delegation_only
         - audit_all_actions
-
   observability:
     tracing:
       enabled: true
@@ -177,7 +156,6 @@ spec:
     logging:
       level: info
       format: json
-
   messaging:
     publishes:
       - channel: governance.policies
@@ -203,7 +181,11 @@ spec:
               type: string
             severity:
               type: string
-              enum: [critical, high, medium, low]
+              enum:
+                - critical
+                - high
+                - medium
+                - low
             remediation_required:
               type: boolean
             delegate_to:

package/dist/spec/v0.3.2/examples/access-tiers/deployment-operator.ossa.yaml

@@ -1,13 +1,5 @@
-# =============================================================================
-# OSSA v0.3.2 - Tier 3 (Write Elevated) Example: Deployment Operator
-# =============================================================================
-# Demonstrates separation of duties for elevated-access operator agents
-# Can modify production systems but requires approval chains
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
-
 metadata:
   name: deployment-operator
   version: 1.0.0
@@ -16,10 +8,11 @@ metadata:
     team: platform
     access_tier: tier_3_write_elevated
     domain: infrastructure
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   type: operator
-
   role: |
     You are a deployment operator that manages CI/CD pipelines, deployments,
     and infrastructure changes. You have elevated access to production systems
@@ -27,14 +20,11 @@ spec:
 
     CRITICAL: Never bypass approval processes. Never delete production data.
     Always ensure rollback plans exist before deployment.
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.1
     profile: safe
-
-  # Taxonomy Classification (v0.3.2+)
   taxonomy:
     domain: infrastructure
     subdomain: deployment
@@ -43,8 +33,6 @@ spec:
       - reliability
       - observability
       - performance
-
-  # Access Tier Configuration (v0.3.2+)
   access:
     tier: tier_3_write_elevated
     permissions:
@@ -65,8 +53,6 @@ spec:
     audit_level: detailed
     requires_approval: true
     approval_chain: elevated
-
-  # Separation of Duties (v0.3.2+)
   separation:
     role: deployer
     conflicts_with:
@@ -76,8 +62,6 @@ spec:
     can_delegate_to:
       - worker
       - analyzer
-
-  # Delegation Configuration (v0.3.2+)
   delegation:
     enabled: true
     allowed_tiers:
@@ -91,7 +75,6 @@ spec:
     requires:
       - task_specification
       - audit_trail
-
   tools:
     - name: kubernetes
       type: kubernetes
@@ -109,7 +92,6 @@ spec:
       type: mcp
       config:
         server: monitoring-mcp-server
-
   autonomy:
     level: supervised
     approval_required:
@@ -128,7 +110,6 @@ spec:
       notify:
         - slack:#platform-alerts
         - gitlab:@platform-team
-
   safety:
     guardrails:
       enabled: true
@@ -144,7 +125,6 @@ spec:
         - production_deployment
         - infrastructure_change
         - security_modification
-
   identity:
     provider: gitlab
     service_account:
@@ -159,7 +139,6 @@ spec:
         - api
         - write_repository
         - read_registry
-
   observability:
     tracing:
       enabled: true
@@ -180,7 +159,6 @@ spec:
       availability: 99.9
       latency_p95_ms: 30000
       error_budget: 0.1
-
   messaging:
     subscribes:
       - channel: ci.pipeline_complete
@@ -196,6 +174,10 @@ spec:
               type: string
             status:
               type: string
-              enum: [started, success, failed, rolled_back]
+              enum:
+                - started
+                - success
+                - failed
+                - rolled_back
             version:
               type: string

package/dist/spec/v0.3.2/examples/access-tiers/doc-generator.ossa.yaml

@@ -1,13 +1,5 @@
-# =============================================================================
-# OSSA v0.3.2 - Tier 2 (Write Limited) Example: Documentation Generator
-# =============================================================================
-# Demonstrates separation of duties for limited-write worker agents
-# Can write docs, tests, scaffolds - but not production code
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
-
 metadata:
   name: doc-generator
   version: 1.0.0
@@ -16,10 +8,11 @@ metadata:
     team: platform
     access_tier: tier_2_write_limited
     domain: documentation
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   type: worker
-
   role: |
     You are a documentation generator that creates and updates documentation
     based on code analysis. You can write to documentation files, create
@@ -27,13 +20,10 @@ spec:
 
     IMPORTANT: You cannot modify production code or merge changes. All changes
     must go through review by a human or supervisor agent.
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.3
-
-  # Taxonomy Classification (v0.3.2+)
   taxonomy:
     domain: documentation
     subdomain: api-docs
@@ -41,8 +31,6 @@ spec:
     concerns:
       - quality
       - architecture
-
-  # Access Tier Configuration (v0.3.2+)
   access:
     tier: tier_2_write_limited
     permissions:
@@ -60,8 +48,6 @@ spec:
       - modify_infrastructure
     audit_level: standard
     requires_approval: false
-
-  # Separation of Duties (v0.3.2+)
   separation:
     role: documenter
     conflicts_with:
@@ -69,8 +55,6 @@ spec:
       - deployer
     can_delegate_to:
       - analyzer
-
-  # Delegation Configuration (v0.3.2+)
   delegation:
     enabled: true
     allowed_tiers:
@@ -80,7 +64,6 @@ spec:
       - scan_dependencies
     requires:
       - task_specification
-
   tools:
     - name: filesystem
       type: mcp
@@ -95,7 +78,6 @@ spec:
       config:
         server: filesystem-mcp-server
         read_only: true
-
   autonomy:
     level: assisted
     allowed_actions:
@@ -106,7 +88,6 @@ spec:
       - modify_production_code
       - merge_changes
       - deploy
-
   identity:
     provider: gitlab
     service_account:

package/dist/spec/v0.3.2/examples/access-tiers/security-scanner.ossa.yaml

@@ -1,13 +1,5 @@
-# =============================================================================
-# OSSA v0.3.2 - Tier 1 (Read Only) Example: Security Scanner
-# =============================================================================
-# Demonstrates separation of duties for read-only analyzer agents
-# Cannot modify code, only scan and report - critics cannot execute
-# =============================================================================
-
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
-
 metadata:
   name: security-scanner
   version: 1.0.0
@@ -16,23 +8,21 @@ metadata:
     team: security
     access_tier: tier_1_read
     domain: security
-
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   type: analyzer
-
   role: |
     You are a security vulnerability scanner that analyzes code for potential
     security issues. You can read code, scan dependencies, and report findings.
 
     IMPORTANT: You cannot modify code, approve changes, or execute remediations.
     You must report findings to a tier_3 remediator agent for action.
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.1
-
-  # Taxonomy Classification (v0.3.2+)
   taxonomy:
     domain: security
     subdomain: vulnerability
@@ -41,8 +31,6 @@ spec:
       - quality
       - governance
     recommended_tier: tier_1_read
-
-  # Access Tier Configuration (v0.3.2+)
   access:
     tier: tier_1_read
     permissions:
@@ -57,8 +45,6 @@ spec:
       - modify_infrastructure
     audit_level: standard
     requires_approval: false
-
-  # Separation of Duties (v0.3.2+)
   separation:
     role: scanner
     conflicts_with:
@@ -69,7 +55,6 @@ spec:
       - execute
       - merge
       - approve
-
   tools:
     - name: code-reader
       type: mcp
@@ -81,7 +66,6 @@ spec:
       config:
         endpoint: https://api.security.local/scan
         method: GET
-
   autonomy:
     level: semi_autonomous
     allowed_actions:
@@ -92,7 +76,6 @@ spec:
       - modify_code
       - execute_fix
       - approve_mr
-
   safety:
     content_filtering:
       enabled: true
@@ -103,7 +86,6 @@ spec:
     rate_limiting:
       enabled: true
       requests_per_minute: 60
-
   observability:
     metrics:
       enabled: true
@@ -114,7 +96,6 @@ spec:
         - name: scan_duration_seconds
           type: histogram
           description: Time to complete security scan
-
   messaging:
     publishes:
       - channel: security.vulnerabilities
@@ -124,7 +105,11 @@ spec:
           properties:
             severity:
               type: string
-              enum: [critical, high, medium, low]
+              enum:
+                - critical
+                - high
+                - medium
+                - low
             cve:
               type: string
             affected_file:

package/dist/spec/v0.3.2/examples/agent-with-identity.ossa.yaml

@@ -1,6 +1,4 @@
-# OSSA v0.3.1 Agent with Identity Configuration
-# Demonstrates service account integration for automated git operations
-apiVersion: ossa/v0.3.2
+apiVersion: ossa/v0.3.3
 kind: Agent
 metadata:
   name: typescript-worker
@@ -9,17 +7,17 @@ metadata:
   labels:
     team: platform
     tier: development
+  annotations:
+    ossa.io/migration: v0.3.3-to-v0.3.3
+    ossa.io/migrated-date: 2026-01-07
 spec:
   role: |
     You are a TypeScript development assistant that manages code changes
     for the agent-buildkit and related TypeScript projects.
-
   llm:
     provider: anthropic
     model: claude-sonnet-4-20250514
     temperature: 0.2
-
-  # Agent Identity Configuration (v0.3.1+)
   identity:
     provider: gitlab
     service_account:
@@ -43,8 +41,7 @@ spec:
     observability:
       service_name: typescript-worker
       service_namespace: development
-      service_version: "1.0.0"
-
+      service_version: 1.0.0
   tools:
     - name: git
       type: mcp
@@ -54,14 +51,12 @@ spec:
       type: mcp
       config:
         server: filesystem-mcp-server
-
   autonomy:
     level: supervised
     require_approval:
       - push_to_protected_branch
       - delete_branch
       - force_push
-
   safety:
     max_tokens_per_turn: 8000
     rate_limits: