@nockdev/awf 6.2.0

package/.agent/skills/cross-cutting/audit-pro/data/scoring.yaml

@@ -0,0 +1,101 @@
+# Audit Pro — Scoring & Grading System
+# Supports 12-Expert Panel with conditional activation
+
+scoring:
+  scale: 10
+  formula: weighted_average(active_expert_scores)
+
+  # Default weights (5 core experts only)
+  weights:
+    {
+      security: 0.30,
+      architecture: 0.20,
+      performance: 0.20,
+      quality: 0.15,
+      devops: 0.15,
+    }
+
+  # Weight profiles for different audit scopes
+  # Note: when conditional experts are skipped, their weight
+  # redistributes proportionally to remaining active experts
+  weight_profiles:
+    default:
+      security: 0.30
+      architecture: 0.20
+      performance: 0.20
+      quality: 0.15
+      devops: 0.15
+    full_audit:
+      security: 0.18
+      architecture: 0.12
+      performance: 0.10
+      quality: 0.10
+      devops: 0.08
+      ux: 0.06
+      data: 0.06
+      compliance: 0.06
+      product: 0.06
+      reliability: 0.06
+      cloud: 0.06
+      ai_safety: 0.06
+    backend_focus:
+      security: 0.25
+      architecture: 0.20
+      performance: 0.20
+      quality: 0.10
+      devops: 0.10
+      data: 0.10
+      reliability: 0.05
+    frontend_focus:
+      security: 0.15
+      quality: 0.20
+      ux: 0.25
+      performance: 0.20
+      architecture: 0.10
+      product: 0.10
+    security_focus:
+      security: 0.35
+      compliance: 0.30
+      architecture: 0.10
+      quality: 0.10
+      devops: 0.15
+    ai_ml_focus:
+      ai_safety: 0.25
+      security: 0.20
+      data: 0.15
+      reliability: 0.15
+      performance: 0.15
+      quality: 0.10
+
+  redistribution:
+    method: proportional
+    description: "When a conditional expert is inactive, its weight is redistributed proportionally to remaining active experts"
+
+  # level | label | meaning | sla | penalty
+  priorities:
+    - P0 | 🔴 Critical | Security/Data loss risk | Fix immediately | -2.0
+    - P1 | 🟠 High | Affects core functionality | Fix before deploy | -1.0
+    - P2 | 🟡 Medium | Should fix soon | Fix this sprint | -0.5
+    - P3 | 🟢 Low | Nice to have | Backlog | -0.1
+
+  # range | label | action
+  grades:
+    - 9.0-10.0 | 🏆 Production Ready | Deploy with confidence
+    - 7.0-8.9 | ✅ Ready with minor fixes | Fix P1s before deploy
+    - 5.0-6.9 | ⚠️ Needs work | Address P0/P1 before deploy
+    - 3.0-4.9 | 🚫 Not ready | Significant remediation needed
+    - 0.0-2.9 | ❌ Critical issues | Do not deploy, major rework
+
+  # id | label | estimate | coverage | use_case | experts
+  scope_options:
+    - 1 | 🔴 FULL AUDIT | ~2h | All 12 experts | Pre-production, Major releases
+    - 2 | 🟠 BACKEND | ~1h | Core 5 + Data + Reliability | Backend changes, API updates
+    - 3 | 🟡 FRONTEND | ~30m | Security + Quality + UX + Perf | UI changes, UX updates
+    - 4 | 🟢 SECURITY ONLY | ~1h | Security + Compliance | Security review, Compliance
+    - 5 | 🔵 CUSTOM | ? | User-defined | Specific areas of concern
+
+  consensus:
+    voting: Weighted average by severity
+    conflicts: Highlight disagreements
+    final: Human arbitration for P0
+    confidence: { high: ">80%", medium: "60-80%", low: "<60% → flag" }

package/.agent/skills/cross-cutting/aws/META.yaml

@@ -0,0 +1,75 @@
+name: aws
+version: "6.2.0"
+category: infrastructure
+tier: 3
+
+desc: "AWS cloud services patterns for serverless, containers, and AI/ML. Covers Lambda, S3, ECS, EKS, Bedrock, and SageMaker."
+
+patterns:
+  total: 25
+  domains:
+    compute: 6
+    storage: 5
+    kubernetes: 5
+    ai-ml: 5
+    serverless: 4
+
+hsa:
+  enabled: true
+  adapter: aws_adapter.py
+
+triggers:
+  file_patterns:
+    - "*.tf"
+    - "serverless.yml"
+    - "sam.yaml"
+    - "cdk.json"
+    - "template.yaml"
+  keywords:
+    # Services
+    - aws
+    - lambda
+    - s3
+    - ecs
+    - eks
+    - bedrock
+    - sagemaker
+    - dynamodb
+    - api gateway
+    - cloudfront
+    # Lambda
+    - lambda function
+    - serverless
+    - event bridge
+    - lambda layer
+    - lambda durable
+    # S3
+    - s3 vectors
+    - s3 tables
+    - s3 metadata
+    - iceberg
+    # ECS/EKS
+    - fargate
+    - ecs managed instances
+    - pod identity
+    - eks capabilities
+    # AI/ML
+    - bedrock
+    - sagemaker
+    - mlflow
+    - model training
+  intents:
+    - deploy aws
+    - create lambda
+    - setup s3
+    - configure eks
+    - train model
+
+related_skills:
+  - docker
+  - kubernetes
+  - ci-cd
+  - security
+
+prevent_confusion_with:
+  - kubernetes: "aws covers EKS specifically, kubernetes is general k8s patterns"

package/.agent/skills/cross-cutting/aws/data/ai_ml.yaml

@@ -0,0 +1,194 @@
+# =============================================================================
+# AWS AI/ML Patterns - Bedrock & SageMaker (Feb 2026)
+# =============================================================================
+# AgentCore, Cross-Region Inference, SageMaker Unified Studio
+
+metadata:
+  skill: aws
+  domain: ai-ml
+  version: "2026.1"
+  updated: "2026-02-05"
+  patterns_count: 5
+
+patterns:
+  - id: aws030
+    name: Bedrock AgentCore
+    category: bedrock
+    version: "2026+"
+    description: Quality evaluations and policy controls for trusted AI agents
+    text: bedrock agentcore ai agents evaluation policies trust safety
+    example: |
+      import boto3
+
+      bedrock_agent = boto3.client('bedrock-agent-runtime')
+
+      # Create agent with AgentCore policies
+      response = bedrock_agent.create_agent(
+          agentName='customer-service-agent',
+          foundationModel='anthropic.claude-3-sonnet',
+          instruction='Help customers with orders...',
+          # AgentCore: Quality and safety controls
+          agentCoreConfiguration={
+              'qualityEvaluation': {
+                  'enabled': True,
+                  'metrics': ['accuracy', 'relevance', 'safety']
+              },
+              'policyControls': {
+                  'contentFilters': ['HATE', 'VIOLENCE', 'SEXUAL'],
+                  'piiBehavior': 'REDACT',
+                  'groundingCheck': True
+              }
+          }
+      )
+
+      # Monitor agent quality in CloudWatch
+    severity: CRITICAL
+    docs_url: https://aws.amazon.com/bedrock/agentcore/
+
+  - id: aws031
+    name: Bedrock Cross-Region Inference
+    category: bedrock
+    version: "2026+"
+    description: Automatic failover to other regions during outages
+    text: bedrock cross region inference failover reliability ha
+    example: |
+      import boto3
+
+      # Create inference profile with cross-region
+      bedrock = boto3.client('bedrock')
+
+      response = bedrock.create_inference_profile(
+          inferenceProfileName='resilient-claude',
+          description='Cross-region Claude Sonnet',
+          modelSource={
+              'foundationModel': 'anthropic.claude-3-sonnet-20240229-v1:0'
+          },
+          crossRegionInference={
+              'enabled': True,
+              'regions': ['us-east-1', 'us-west-2', 'eu-west-1'],
+              'failoverBehavior': 'AUTOMATIC'
+          }
+      )
+
+      # Use the profile - automatic failover on outages
+      runtime = boto3.client('bedrock-runtime')
+      response = runtime.invoke_model(
+          modelId=response['inferenceProfileArn'],
+          body=json.dumps({'prompt': 'Hello!'})
+      )
+
+      # Benefits:
+      # - 99.99% availability
+      # - No code changes needed
+      # - Automatic routing
+    severity: HIGH
+    docs_url: https://docs.aws.amazon.com/bedrock/latest/userguide/cross-region-inference.html
+
+  - id: aws032
+    name: Bedrock Extended Prompt Caching
+    category: bedrock
+    version: "2026+"
+    description: 1-hour TTL for prompt caching in long-running agent workflows
+    text: bedrock prompt caching performance cost cache ttl
+    example: |
+      import boto3
+
+      runtime = boto3.client('bedrock-runtime')
+
+      # Enable extended prompt caching for agents
+      response = runtime.invoke_model(
+          modelId='anthropic.claude-3-sonnet',
+          body=json.dumps({
+              'prompt': 'You are a helpful assistant...',
+              'messages': [...]
+          }),
+          # Extended caching (up to 1 hour TTL)
+          cacheConfig={
+              'enabled': True,
+              'ttlSeconds': 3600,  # 1 hour
+              'cacheablePrefix': 'system_prompt'
+          }
+      )
+
+      # Benefits:
+      # - Cost reduction for repeated prompts
+      # - Faster response times
+      # - Ideal for long-running agent workflows
+    severity: MEDIUM
+    docs_url: https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-caching.html
+
+  - id: aws033
+    name: SageMaker Unified Studio
+    category: sagemaker
+    version: "2026+"
+    description: Unified workspace with VPC connectivity and cross-account subscriptions
+    text: sagemaker unified studio workspace vpc cross account
+    example: |
+      # SageMaker Unified Studio features (2026):
+
+      # 1. Private VPC Connectivity
+      aws sagemaker create-domain \
+        --domain-name unified-studio \
+        --vpc-id vpc-12345 \
+        --subnet-ids subnet-a subnet-b \
+        --app-network-access-type VpcOnly
+
+      # 2. Cross-Account Subscriptions
+      aws sagemaker create-subscription \
+        --domain-id domain-123 \
+        --source-account 987654321 \
+        --permission-type ReadOnly
+
+      # 3. Agent-Generated Code
+      # UI now includes AI-generated SQL and Python
+      # Type natural language → get working code
+
+      # 4. New UI Design
+      # Unified workspace for:
+      # - Notebooks (JupyterLab)
+      # - Data catalog
+      # - Model registry
+      # - Feature store
+      # - MLflow experiments
+    severity: HIGH
+    docs_url: https://docs.aws.amazon.com/sagemaker/latest/dg/studio.html
+
+  - id: aws034
+    name: SageMaker Serverless MLflow
+    category: sagemaker
+    version: "2026+"
+    description: Managed MLflow for AI experimentation with zero infrastructure
+    text: sagemaker mlflow experiment tracking serverless managed
+    example: |
+      import mlflow
+      import sagemaker
+
+      # Connect to SageMaker Managed MLflow
+      mlflow.set_tracking_uri(
+          sagemaker.get_execution_role_mlflow_uri()
+      )
+
+      # Log experiments - zero infrastructure
+      with mlflow.start_run():
+          mlflow.log_param("learning_rate", 0.01)
+          mlflow.log_param("epochs", 100)
+
+          # Train model
+          model = train_model(...)
+
+          mlflow.log_metric("accuracy", 0.95)
+          mlflow.log_metric("f1_score", 0.92)
+
+          # Register model
+          mlflow.sklearn.log_model(
+              model,
+              "model",
+              registered_model_name="my-classifier"
+          )
+
+      # Features:
+      # - Fully managed (no MLflow server)
+      # - Integrates with SageMaker Pipelines
+      # - Auto-scales to workload
+    severity: HIGH
+    docs_url: https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html

package/.agent/skills/cross-cutting/aws/data/compute.yaml

@@ -0,0 +1,191 @@
+# =============================================================================
+# AWS Lambda & ECS Compute Patterns (Feb 2026)
+# =============================================================================
+# Serverless and container compute patterns from re:Invent 2025+
+
+metadata:
+  skill: aws
+  domain: compute
+  version: "2026.1"
+  updated: "2026-02-05"
+  patterns_count: 6
+
+patterns:
+  - id: aws001
+    name: Lambda .NET 10 Runtime
+    category: lambda
+    version: "2026+"
+    description: .NET 10 managed runtime with automatic updates
+    text: lambda dotnet net10 runtime managed auto update
+    example: |
+      # serverless.yml
+      service: my-dotnet-service
+      provider:
+        name: aws
+        runtime: dotnet10
+      functions:
+        hello:
+          handler: MyAssembly::MyNamespace.Function::Handler
+
+      # SAM template
+      Resources:
+        Function:
+          Type: AWS::Serverless::Function
+          Properties:
+            Runtime: dotnet10
+            Handler: Bootstrap::Handler
+    severity: HIGH
+    docs_url: https://aws.amazon.com/lambda/
+
+  - id: aws002
+    name: Lambda Durable Functions
+    category: lambda
+    version: "2026+"
+    description: Multi-step workflows with long-running orchestration
+    text: lambda durable functions workflow orchestration steps state machine
+    example: |
+      // Lambda Durable for multi-step AI workflows
+      const { orchestrate } = require('@aws-sdk/lambda-durable');
+
+      exports.handler = orchestrate(async (ctx) => {
+        // Step 1: Get data
+        const data = await ctx.call('fetchData', { id: ctx.input.id });
+
+        // Step 2: Process with AI (can take hours)
+        const result = await ctx.call('processWithBedrock', data);
+
+        // Step 3: Store results
+        await ctx.call('storeResults', result);
+
+        return result;
+      });
+
+      // Features:
+      // - Pause/resume without paying for idle time
+      // - Built-in retries and error handling
+      // - Coordinate tasks over hours/days
+    severity: CRITICAL
+    docs_url: https://aws.amazon.com/lambda/durable-functions/
+
+  - id: aws003
+    name: Lambda Managed Instances
+    category: lambda
+    version: "2026+"
+    description: Run Lambda on EC2 for specialized hardware and cost optimization
+    text: lambda managed instances ec2 gpu graviton cost optimization
+    example: |
+      Resources:
+        Function:
+          Type: AWS::Serverless::Function
+          Properties:
+            FunctionName: my-ml-function
+            # Use Managed Instances for specialized compute
+            ComputeType: ManagedInstance
+            ManagedInstanceConfig:
+              InstanceType: ml.g5.xlarge  # GPU instance
+              # Or for cost optimization:
+              # InstanceType: m7g.large   # Graviton
+            Runtime: python3.12
+            Handler: app.handler
+
+      # Benefits:
+      # - Access to GPU, Graviton, custom AMIs
+      # - EC2 pricing (up to 30% cheaper for steady workloads)
+      # - Serverless operations (no patching)
+    severity: HIGH
+    docs_url: https://aws.amazon.com/lambda/managed-instances/
+
+  - id: aws004
+    name: ECS tmpfs Mounts
+    category: ecs
+    version: "2026+"
+    description: Memory-backed file systems for ECS Fargate tasks
+    text: ecs fargate tmpfs memory filesystem ephemeral storage
+    example: |
+      {
+        "containerDefinitions": [{
+          "name": "app",
+          "mountPoints": [{
+            "sourceVolume": "scratch",
+            "containerPath": "/tmp"
+          }]
+        }],
+        "volumes": [{
+          "name": "scratch",
+          "dockerVolumeConfiguration": {
+            "scope": "task",
+            "driver": "local",
+            "driverOpts": {
+              "type": "tmpfs",
+              "device": "tmpfs",
+              "o": "size=512M"
+            }
+          }
+        }]
+      }
+
+      # Use cases:
+      # - High-speed temporary storage
+      # - Sensitive data (ephemeral)
+      # - ML model caching
+    severity: MEDIUM
+    docs_url: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/
+
+  - id: aws005
+    name: ECS NLB Canary Deployments
+    category: ecs
+    version: "2026+"
+    description: Linear and Canary traffic shifting with Network Load Balancer
+    text: ecs nlb canary linear deployment traffic shifting blue green
+    example: |
+      DeploymentConfiguration:
+        DeploymentType: LINEAR
+        TrafficRoutingConfig:
+          Type: TimeBasedLinear
+          TimeBasedLinear:
+            LinearInterval: 5
+            LinearPercentage: 10
+
+      # Canary deployment
+      DeploymentConfiguration:
+        DeploymentType: CANARY
+        TrafficRoutingConfig:
+          Type: TimeBasedCanary
+          TimeBasedCanary:
+            CanaryInterval: 10
+            CanaryPercentage: 10
+
+      # Monitor with CloudWatch alarms for auto-rollback
+    severity: HIGH
+    docs_url: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html
+
+  - id: aws006
+    name: Lambda CloudWatch Metrics
+    category: lambda
+    version: "2026+"
+    description: Enhanced CloudWatch metrics for event source polling
+    text: lambda cloudwatch metrics polling sqs kinesis event source monitoring
+    example: |
+      # New CloudWatch metrics for Lambda event sources:
+
+      # SQS Polling
+      - "SQSPollingDuration"
+      - "SQSMessagesReceived"
+      - "SQSPollingErrors"
+
+      # Kinesis Polling
+      - "KinesisIteratorAge"
+      - "KinesisRecordsBehind"
+
+      # Create CloudWatch Alarm
+      aws cloudwatch put-metric-alarm \
+        --alarm-name HighPollingErrors \
+        --metric-name SQSPollingErrors \
+        --namespace AWS/Lambda \
+        --statistic Sum \
+        --threshold 10 \
+        --evaluation-periods 5 \
+        --period 60 \
+        --comparison-operator GreaterThanThreshold
+    severity: MEDIUM
+    docs_url: https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics.html