@cubis/foundry 0.3.68 → 0.3.70

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/backend-specialist.md

@@ -3,7 +3,13 @@ name: backend-specialist
 description: Backend specialist for API contracts, service logic, schema-aware backend changes, auth-sensitive implementation, payment integrations, and serverless architecture. Triggers on backend, api, endpoint, route, middleware, database, migration, auth, jwt, oauth, oidc, passkey, rbac, session, tenant, secrets, payments, stripe, serverless.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: api-designer, api-patterns, architecture-designer, auth-architect, database-skills, database-design, database-optimizer, drizzle-expert, firebase, microservices-architect, nodejs-best-practices, nestjs-expert, fastapi-expert, graphql-architect, stripe-best-practices, serverless-patterns, i18n-localization, typescript-pro, javascript-pro, python-pro, golang-pro, java-pro, csharp-pro, kotlin-pro, rust-pro, php-pro, ruby-pro
+handoffs:
+  - agent: "test-engineer"
+    title: "Test Backend"
+  - agent: "database-architect"
+    title: "Review Schema"
 ---
 
 # Backend Specialist

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/code-archaeologist.md

@@ -17,7 +17,14 @@ triggers:
   ]
 tools: Read, Grep, Glob, Edit, Write
 model: inherit
+maxTurns: 25
+memory: project
 skills: skill-creator, spec-miner, legacy-modernizer, static-analysis, typescript-pro, javascript-pro, python-pro
+handoffs:
+  - agent: "researcher"
+    title: "Deep Research"
+  - agent: "project-planner"
+    title: "Plan Modernization"
 ---
 
 # Code Archaeologist

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/database-architect.md

@@ -3,7 +3,13 @@ name: database-architect
 description: Expert database architect for schema design, query optimization, migrations, and modern serverless databases. Use for database operations, schema changes, indexing, and data modeling. Triggers on database, sql, schema, migration, query, postgres, index, table.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: architecture-designer, database-skills, database-design, database-optimizer, drizzle-expert, postgres, mysql, sqlite, mongodb, redis, supabase, firebase, vitess, neki, typescript-pro, javascript-pro, python-pro, golang-pro, java-pro, php-pro, ruby-pro
+handoffs:
+  - agent: "backend-specialist"
+    title: "Implement Schema Changes"
+  - agent: "validator"
+    title: "Validate Migrations"
 ---
 
 # Database Architect

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/debugger.md

@@ -3,7 +3,14 @@ name: debugger
 description: Expert in evidence-first debugging, root-cause isolation, regression triage, flaky failure investigation, and structured error observability across browser, backend, and data paths.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
+memory: project
 skills: debugging-strategies, error-ux-observability, testing-patterns, webapp-testing, playwright-e2e, typescript-pro, javascript-pro, python-pro, golang-pro, java-pro, csharp-pro, kotlin-pro, rust-pro
+handoffs:
+  - agent: "test-engineer"
+    title: "Add Regression Tests"
+  - agent: "validator"
+    title: "Validate Fix"
 ---
 
 # Debugger

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/devops-engineer.md

@@ -3,7 +3,13 @@ name: devops-engineer
 description: Expert in deployment, server management, CI/CD, production operations, infrastructure-as-code, and serverless architecture. CRITICAL — Use for deployment, server access, rollback, and production changes. HIGH RISK operations. Triggers on deploy, production, server, pm2, ssh, release, rollback, ci/cd, infrastructure, serverless.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: devops-engineer, sre-engineer, ci-cd-pipelines, docker-kubernetes, observability, serverless-patterns, git-workflow, debugging-strategies, nodejs-best-practices, typescript-pro, javascript-pro, python-pro, golang-pro
+handoffs:
+  - agent: "sre-engineer"
+    title: "Review Reliability"
+  - agent: "validator"
+    title: "Validate Pipeline"
 ---
 
 # DevOps Engineer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/documentation-writer.md

@@ -3,7 +3,11 @@ name: documentation-writer
 description: Expert in technical documentation. Use ONLY when user explicitly requests documentation such as README files, API docs, changelogs, tutorials, or docstrings. DO NOT auto-invoke during normal development. Triggers on README, API docs, changelog, tutorial, docstring, documentation.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: documentation-templates, changelog-generator, typescript-pro, javascript-pro, python-pro
+handoffs:
+  - agent: "validator"
+    title: "Validate Documentation"
 ---
 
 # Documentation Writer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/frontend-specialist.md

@@ -17,7 +17,13 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: react-expert, nextjs-developer, frontend-design, tailwind-patterns, design-system-builder, web-perf, frontend-code-review, react-best-practices, i18n-localization, error-ux-observability, typescript-pro, javascript-pro
+handoffs:
+  - agent: "test-engineer"
+    title: "Test UI Components"
+  - agent: "validator"
+    title: "Validate Frontend"
 ---
 
 # Frontend Specialist

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/game-developer.md

@@ -3,6 +3,7 @@ name: game-developer
 description: Game development across all platforms (PC, Web, Mobile, VR/AR). Use when building games with Unity, Godot, Unreal, Phaser, Three.js, or similar engines. Covers game mechanics, multiplayer, optimization, 2D/3D graphics, and game design patterns. Triggers on game, gameplay, unity, godot, unreal, phaser, multiplayer, rendering, shader.
 tools: Read, Write, Edit, Bash, Grep, Glob
 model: inherit
+maxTurns: 25
 skills: game-development, typescript-pro, javascript-pro, cpp-pro, c-pro, csharp-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/mobile-developer.md

@@ -3,7 +3,13 @@ name: mobile-developer
 description: Expert in Flutter delivery and mobile product design for cross-platform apps. Use for Flutter architecture, native integrations, mobile UX, platform behavior, and release readiness. Triggers on mobile, flutter, ios, android, app store, play store, touch UX.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: mobile-design, i18n-localization, dart-pro, swift-pro, kotlin-pro, react-expert, debugging-strategies, webapp-testing, typescript-pro, javascript-pro, flutter-design-system, flutter-drift, flutter-feature, flutter-go-router, flutter-offline-sync, flutter-repository, flutter-riverpod, flutter-state-machine, flutter-testing
+handoffs:
+  - agent: "test-engineer"
+    title: "Test Mobile"
+  - agent: "validator"
+    title: "Validate Mobile App"
 ---
 
 # Mobile Developer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/orchestrator.md

@@ -3,7 +3,15 @@ name: orchestrator
 description: Pure orchestration agent using Repeat-Until-Good (RUG) pattern. NEVER does implementation work directly — EVERY piece of work MUST be delegated to a specialist subagent with explicit acceptance criteria. Use when a task requires multiple perspectives, parallel analysis, or coordinated execution across different domains. Triggers on orchestrate, coordinate agents, parallel workstreams, cross-domain task, handoff, multi-step execution.
 tools: Read, Grep, Glob, Bash, Write, Edit
 model: inherit
+maxTurns: 30
+memory: project
 skills: architecture-designer, api-designer, database-skills, deep-research, mcp-builder, openai-docs, prompt-engineer, skill-creator, typescript-pro, javascript-pro, python-pro
+handoffs:
+  - agent: "validator"
+    title: "Validate Results"
+  - agent: "project-planner"
+    title: "Revise Plan"
+agents: ["*"]
 ---
 
 # Orchestrator — Repeat-Until-Good (RUG) Pattern

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/penetration-tester.md

@@ -21,7 +21,11 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash
 model: inherit
+maxTurns: 25
 skills: security-engineer, vulnerability-scanner, auth-architect, api-designer, typescript-pro, javascript-pro, python-pro, golang-pro, rust-pro
+handoffs:
+  - agent: "security-auditor"
+    title: "Review Findings"
 ---
 
 # Penetration Tester

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/performance-optimizer.md

@@ -3,7 +3,11 @@ name: performance-optimizer
 description: Expert in performance optimization, profiling, Core Web Vitals, bundle optimization, and static analysis. Use for improving speed, reducing bundle size, and optimizing runtime performance. Triggers on performance, optimize, speed, slow, memory, cpu, benchmark, lighthouse.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: performance-profiling, web-perf, static-analysis, typescript-pro, javascript-pro, python-pro, golang-pro, rust-pro, cpp-pro
+handoffs:
+  - agent: "validator"
+    title: "Validate Performance Gains"
 ---
 
 # Performance Optimizer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/product-manager.md

@@ -18,6 +18,7 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash
 model: inherit
+maxTurns: 25
 skills: architecture-designer, api-designer, skill-creator, typescript-pro, javascript-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/project-planner.md

@@ -3,7 +3,15 @@ name: project-planner
 description: Smart project planning agent. Breaks down user requests into tasks, plans file structure, determines which agent does what, and creates dependency graphs. Use when starting new projects or planning major features. Triggers on plan project, implementation plan, task breakdown, milestone plan, dependency graph, file structure.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 30
+memory: project
 skills: architecture-designer, api-designer, database-skills, deep-research, mcp-builder, openai-docs, prompt-engineer, skill-creator, typescript-pro, javascript-pro, python-pro
+handoffs:
+  - agent: "orchestrator"
+    title: "Start Implementation"
+  - agent: "researcher"
+    title: "Research First"
+agents: ["researcher", "orchestrator"]
 ---
 
 # Project Planner

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/qa-automation-engineer.md

@@ -18,6 +18,7 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: webapp-testing, playwright-e2e, testing-patterns, static-analysis, agentic-eval, debugging-strategies, typescript-pro, javascript-pro, python-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/researcher.md

@@ -16,7 +16,12 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash
 model: inherit
+maxTurns: 30
+memory: project
 skills: deep-research, architecture-designer, database-skills, openai-docs, prompt-engineer
+handoffs:
+  - agent: "project-planner"
+    title: "Plan Implementation"
 ---
 
 # Researcher

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/security-auditor.md

@@ -29,7 +29,13 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: security-engineer, auth-architect, vulnerability-scanner, static-analysis, api-designer, graphql-architect, nodejs-best-practices, nestjs-expert, fastapi-expert, typescript-pro, javascript-pro, python-pro, golang-pro, rust-pro
+handoffs:
+  - agent: "penetration-tester"
+    title: "Run Exploit Simulation"
+  - agent: "validator"
+    title: "Validate Remediation"
 ---
 
 # Security Auditor

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/seo-specialist.md

@@ -3,6 +3,7 @@ name: seo-specialist
 description: SEO and GEO (Generative Engine Optimization) expert. Handles SEO audits, Core Web Vitals, E-E-A-T optimization, and AI search visibility. Use for SEO improvements, content optimization, or AI citation strategies. Triggers on SEO audit, Core Web Vitals, metadata, schema markup, GEO, AI search, citation strategy.
 tools: Read, Grep, Glob, Bash, Write
 model: inherit
+maxTurns: 25
 skills: seo-fundamentals, geo-fundamentals, typescript-pro, javascript-pro, python-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/sre-engineer.md

@@ -22,7 +22,13 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: sre-engineer, devops-engineer, error-ux-observability, observability, serverless-patterns, docker-kubernetes, ci-cd-pipelines, debugging-strategies, python-pro, golang-pro, typescript-pro
+handoffs:
+  - agent: "devops-engineer"
+    title: "Implement Changes"
+  - agent: "validator"
+    title: "Validate Reliability"
 ---
 
 # SRE Engineer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/test-engineer.md

@@ -18,7 +18,12 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
+memory: project
 skills: webapp-testing, playwright-e2e, testing-patterns, error-ux-observability, debugging-strategies, frontend-code-review, typescript-pro, javascript-pro, python-pro, golang-pro, java-pro
+handoffs:
+  - agent: "validator"
+    title: "Validate Test Quality"
 ---
 
 # Test Engineer

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/validator.md

@@ -14,6 +14,7 @@ triggers:
   ]
 tools: Read, Grep, Glob, Bash
 model: inherit
+maxTurns: 25
 skills: debugging-strategies, testing-patterns, static-analysis, webapp-testing, playwright-e2e, agentic-eval, typescript-pro, javascript-pro, python-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/agents/vercel-expert.md

@@ -3,6 +3,7 @@ name: vercel-expert
 description: Expert in Vercel platform delivery, runtime behavior, security controls, observability, and automation. Use for deployments, project configuration, middleware/routing, domains, flags, AI Gateway, and incident-ready operations. Triggers on vercel, deployment, domain, edge function, middleware, runtime, cache, AI Gateway, rollout.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+maxTurns: 25
 skills: nextjs-developer, react-expert, tailwind-patterns, web-perf, serverless-patterns, nodejs-best-practices, typescript-pro, javascript-pro
 ---
 

package/workflows/workflows/agent-environment-setup/platforms/codex/rules/AGENTS.md

@@ -320,6 +320,6 @@ Keep MCP context lazy and exact. Skills are supporting context, not the route la
 5. Call `skill_get` with `includeReferences:false` by default.
 6. Load at most one sidecar markdown file at a time with `skill_get_reference`.
 7. Do not auto-prime every specialist with a skill. Load only what the task clearly needs.
-8. Use upstream MCP servers such as `postman` for real cloud actions when available.
+8. Use upstream MCP servers such as `postman`, `stitch`, or `playwright` for real cloud/browser actions when available.
 
 <!-- cbx:mcp:auto:end -->

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/backend-specialist.md

@@ -3,6 +3,11 @@ name: backend-specialist
 description: Backend specialist for API contracts, service logic, schema-aware backend changes, auth-sensitive implementation, payment integrations, and serverless architecture. Triggers on backend, api, endpoint, route, middleware, database, migration, auth, jwt, oauth, oidc, passkey, rbac, session, tenant, secrets, payments, stripe, serverless.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "test-engineer"
+    title: "Test Backend"
+  - agent: "database-architect"
+    title: "Review Schema"
 ---
 
 # Backend Specialist

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/code-archaeologist.md

@@ -3,6 +3,11 @@ name: code-archaeologist
 description: Expert in legacy code, refactoring, and understanding undocumented systems. Use for reading messy code, reverse engineering, modernization planning, and static code analysis. Triggers on legacy, refactor, spaghetti code, analyze repo, explain codebase.
 tools: Read, Grep, Glob, Edit, Write
 model: inherit
+handoffs:
+  - agent: "researcher"
+    title: "Deep Research"
+  - agent: "project-planner"
+    title: "Plan Modernization"
 ---
 
 # Code Archaeologist

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/database-architect.md

@@ -3,6 +3,11 @@ name: database-architect
 description: Expert database architect for schema design, query optimization, migrations, and modern serverless databases. Use for database operations, schema changes, indexing, and data modeling. Triggers on database, sql, schema, migration, query, postgres, index, table.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "backend-specialist"
+    title: "Implement Schema Changes"
+  - agent: "validator"
+    title: "Validate Migrations"
 ---
 
 # Database Architect

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/debugger.md

@@ -3,6 +3,11 @@ name: debugger
 description: Expert in evidence-first debugging, root-cause isolation, regression triage, flaky failure investigation, and structured error observability across browser, backend, and data paths.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "test-engineer"
+    title: "Add Regression Tests"
+  - agent: "validator"
+    title: "Validate Fix"
 ---
 
 # Debugger

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/devops-engineer.md

@@ -3,6 +3,11 @@ name: devops-engineer
 description: Expert in deployment, server management, CI/CD, production operations, infrastructure-as-code, and serverless architecture. CRITICAL — Use for deployment, server access, rollback, and production changes. HIGH RISK operations. Triggers on deploy, production, server, pm2, ssh, release, rollback, ci/cd, infrastructure, serverless.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "sre-engineer"
+    title: "Review Reliability"
+  - agent: "validator"
+    title: "Validate Pipeline"
 ---
 
 # DevOps Engineer

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/documentation-writer.md

@@ -3,6 +3,9 @@ name: documentation-writer
 description: Expert in technical documentation. Use ONLY when user explicitly requests documentation such as README files, API docs, changelogs, tutorials, or docstrings. DO NOT auto-invoke during normal development. Triggers on README, API docs, changelog, tutorial, docstring, documentation.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "validator"
+    title: "Validate Documentation"
 ---
 
 # Documentation Writer

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/frontend-specialist.md

@@ -3,6 +3,11 @@ name: frontend-specialist
 description: Senior frontend specialist for React, Next.js, UI architecture, interaction quality, accessibility, rendering performance, design-system consistency, and internationalization.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "test-engineer"
+    title: "Test UI Components"
+  - agent: "validator"
+    title: "Validate Frontend"
 ---
 
 # Frontend Specialist

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/mobile-developer.md

@@ -3,6 +3,11 @@ name: mobile-developer
 description: Expert in Flutter delivery and mobile product design for cross-platform apps. Use for Flutter architecture, native integrations, mobile UX, platform behavior, and release readiness. Triggers on mobile, flutter, ios, android, app store, play store, touch UX.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "test-engineer"
+    title: "Test Mobile"
+  - agent: "validator"
+    title: "Validate Mobile App"
 ---
 
 # Mobile Developer

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/orchestrator.md

@@ -3,6 +3,12 @@ name: orchestrator
 description: Pure orchestration agent using Repeat-Until-Good (RUG) pattern. NEVER does implementation work directly — EVERY piece of work MUST be delegated to a specialist subagent with explicit acceptance criteria. Use when a task requires multiple perspectives, parallel analysis, or coordinated execution across different domains. Triggers on orchestrate, coordinate agents, parallel workstreams, cross-domain task, handoff, multi-step execution.
 tools: Read, Grep, Glob, Bash, Write, Edit
 model: inherit
+handoffs:
+  - agent: "validator"
+    title: "Validate Results"
+  - agent: "project-planner"
+    title: "Revise Plan"
+agents: ["*"]
 ---
 
 # Orchestrator — Repeat-Until-Good (RUG) Pattern

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/penetration-tester.md

@@ -3,6 +3,9 @@ name: penetration-tester
 description: Offensive security specialist for attack-surface mapping, exploitation validation, DAST/SAST analysis, vulnerability scanning, and red-team exercises. Use for penetration testing, exploit validation, attack simulation, and offensive security assessments. Triggers on pentest, exploit, redteam, offensive, attack surface, DAST, SAST, bug bounty.
 tools: Read, Grep, Glob, Bash
 model: inherit
+handoffs:
+  - agent: "security-auditor"
+    title: "Review Findings"
 ---
 
 # Penetration Tester

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/performance-optimizer.md

@@ -3,6 +3,9 @@ name: performance-optimizer
 description: Expert in performance optimization, profiling, Core Web Vitals, bundle optimization, and static analysis. Use for improving speed, reducing bundle size, and optimizing runtime performance. Triggers on performance, optimize, speed, slow, memory, cpu, benchmark, lighthouse.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "validator"
+    title: "Validate Performance Gains"
 ---
 
 # Performance Optimizer

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/project-planner.md

@@ -3,6 +3,12 @@ name: project-planner
 description: Smart project planning agent. Breaks down user requests into tasks, plans file structure, determines which agent does what, and creates dependency graphs. Use when starting new projects or planning major features. Triggers on plan project, implementation plan, task breakdown, milestone plan, dependency graph, file structure.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "orchestrator"
+    title: "Start Implementation"
+  - agent: "researcher"
+    title: "Research First"
+agents: ["researcher", "orchestrator"]
 ---
 
 # Project Planner

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/researcher.md

@@ -3,6 +3,9 @@ name: researcher
 description: Deep research and codebase exploration agent. Systematically investigates codebases, documentation, and external sources to produce structured findings before implementation begins. Use when a task needs understanding before action, or when external knowledge must be verified. Triggers on research, investigate, explore codebase, find patterns, understand system, analyze dependencies, compare approaches.
 tools: Read, Grep, Glob, Bash
 model: inherit
+handoffs:
+  - agent: "project-planner"
+    title: "Plan Implementation"
 ---
 
 # Researcher

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/security-auditor.md

@@ -3,6 +3,11 @@ name: security-auditor
 description: Security auditor for exploitability-first review, auth and policy design, secret handling, code-path hardening, vulnerability scanning, and static analysis. Triggers on security, vulnerability, owasp, xss, injection, auth, jwt, oauth, oidc, rbac, session, passkey, secrets, supply chain, pentest.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "penetration-tester"
+    title: "Run Exploit Simulation"
+  - agent: "validator"
+    title: "Validate Remediation"
 ---
 
 # Security Auditor

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/sre-engineer.md

@@ -3,6 +3,11 @@ name: sre-engineer
 description: Site reliability engineer for SLO-driven operations, incident management, toil reduction, production reliability, and structured error observability. Use for reliability engineering, SLO/SLA design, incident response, capacity planning, and operational toil reduction. Triggers on SRE, reliability, SLO, SLA, incident, on-call, toil, error budget, uptime, latency.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "devops-engineer"
+    title: "Implement Changes"
+  - agent: "validator"
+    title: "Validate Reliability"
 ---
 
 # SRE Engineer

package/workflows/workflows/agent-environment-setup/platforms/copilot/agents/test-engineer.md

@@ -3,6 +3,9 @@ name: test-engineer
 description: Expert in test strategy, browser verification, coverage triage, regression-proof automation, and structured testing patterns. Use for writing tests, improving coverage, debugging test failures, or deciding the right verification layer.
 tools: Read, Grep, Glob, Bash, Edit, Write
 model: inherit
+handoffs:
+  - agent: "validator"
+    title: "Validate Test Quality"
 ---
 
 # Test Engineer