@raishin/vanguard-frontier-agentic 1.0.0 → 1.2.0

package/skills/finops/finops-cloud-price-advisor/metadata.json

@@ -0,0 +1,26 @@
+{
+  "id": "finops-cloud-price-advisor",
+  "name": "FinOps Cloud Price Advisor",
+  "type": "skill",
+  "provider": "multi-cloud",
+  "harnesses": [
+    "codex",
+    "claude-code",
+    "cursor",
+    "gemini",
+    "kiro",
+    "other"
+  ],
+  "summary": "Fetch live public prices and build cost estimates for AWS, Azure, and OCI using each cloud's public pricing API. Supports live-environment and prototype cost planning. Currency defaults to USD.",
+  "source_type": "original",
+  "official_docs": [
+    "https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/price-changes.html",
+    "https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices",
+    "https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/costanalysisoverview.htm"
+  ],
+  "security_notes": "All three public pricing APIs require no authentication. Never accept or request cloud credentials, billing account IDs, cost export access, or tenant-specific data to fetch list prices.",
+  "last_verified": "2026-04-30",
+  "path": "skills/finops/finops-cloud-price-advisor",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}

package/skills/finops/finops-cloud-price-advisor/references/currency-handling.md

@@ -0,0 +1,100 @@
+# Currency Handling
+
+## Default: USD
+
+All cloud pricing APIs return prices in USD by default. Unless the user explicitly requests a different currency, return all estimates in USD.
+
+State the currency clearly in the output header:
+```
+Currency: USD (on-demand list price, no discounts applied)
+```
+
+---
+
+## Other Currencies — User Request
+
+When the user asks for a non-USD estimate:
+
+1. Fetch the USD price from the cloud pricing API.
+2. Convert using an exchange rate from one of these public sources (WebFetch):
+   - **Preferred** — ExchangeRate-API free endpoint: `https://open.er-api.com/v6/latest/USD` (no auth, returns JSON with major currencies).
+   - Fallback — European Central Bank daily reference rates: `https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml` (no auth, EUR-denominated).
+
+> **Do not use** Open Exchange Rates (`openexchangerates.org`) for this skill. It requires
+> an `app_id` API key. This agent must not accept or store API keys. The two public
+> sources above are sufficient for approximation.
+
+### Preferred approach (ExchangeRate-API, no auth)
+
+```
+GET https://open.er-api.com/v6/latest/USD
+```
+
+Response:
+```json
+{
+  "base_code": "USD",
+  "time_last_update_utc": "2026-04-30 00:02:01",
+  "rates": {
+    "EUR": 0.9245,
+    "GBP": 0.7931,
+    "JPY": 144.52,
+    "AUD": 1.5521,
+    "CAD": 1.3802,
+    "SGD": 1.3357,
+    "HKD": 7.7823,
+    "BRL": 5.6741,
+    "INR": 83.47
+  }
+}
+```
+
+Usage: `amount_in_target_currency = usd_price × rates[TARGET_CURRENCY_CODE]`
+
+### Labelling converted amounts
+
+Always show both the USD source and the converted amount:
+
+```
+Monthly cost: $234.50 USD → €216.84 EUR (ECB rate 2026-04-30: 1 USD = 0.9245 EUR)
+```
+
+Never present a converted price without disclosing the exchange rate and its date.
+
+---
+
+## Azure Retail Prices API — Native Currency Support
+
+The Azure Retail Prices API accepts a `currencyCode` query parameter and returns prices in that currency natively:
+
+```
+GET https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview
+    &currencyCode=EUR
+    &$filter=armRegionName eq 'westeurope' and serviceName eq 'Virtual Machines'
+```
+
+Supported currency codes: EUR, GBP, JPY, AUD, CAD, SGD, HKD, BRL, INR, CHF, SEK, DKK, NOK, KRW, MXN, ZAR, and others. Check the API response; unsupported codes return HTTP 400.
+
+When using the Azure API for non-USD estimates, prefer the native `currencyCode` parameter over post-fetch conversion. Note the effective date from the response.
+
+---
+
+## AWS and OCI — USD Only from API
+
+AWS Price List API and OCI pricing API return USD only. For non-USD on these clouds, use the post-fetch conversion approach above.
+
+---
+
+## Rounding
+
+- Show unit prices to 4 decimal places (e.g., $0.0960/hr).
+- Show monthly totals to 2 decimal places (e.g., $70.08/month).
+- Annual totals: multiply monthly by 12, round to 2 decimal places.
+
+---
+
+## Disclaimer Template
+
+Include in every non-USD estimate:
+
+> Exchange rate applied: {RATE} (source: {SOURCE}, {DATE}). Cloud list prices are in USD; converted amounts are approximate. Actual billing currency and exchange rate depend on your cloud provider agreement and may differ.

package/skills/finops/finops-cloud-price-advisor/references/estimation-workflow.md

@@ -0,0 +1,145 @@
+# Estimation Workflow
+
+Two distinct modes: **live-environment** (current inventory → cost) and **prototype** (planned spec → cost).
+
+---
+
+## Mode 1 — Live Environment Cost Estimate
+
+Use when: the user wants to know what an existing deployed environment costs based on actual running resources.
+
+### Step 1 — Confirm scope
+
+Before fetching anything:
+- Cloud provider(s): AWS / Azure / OCI (or multi-cloud)
+- Region(s): confirm exact region; pricing varies
+- Resource scope: specific service, entire account/subscription/tenancy, or filtered subset
+- Time window: monthly (default) or annual
+- Currency: USD (default) or specified
+
+### Step 2 — Inventory
+
+Preferred: user provides a resource list (instance IDs, sizes, quantities).
+
+Fallback: ask user to share a sanitized inventory export:
+- AWS: `aws ec2 describe-instances --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name]'`
+- Azure: `az resource list --query '[].{id:id,type:type,location:location}'`
+- OCI: `oci compute instance list --compartment-id <ocid> --all --query 'data[*].{id:id,"shape":shape,"state":"lifecycle-state"}'`
+
+Do not ask for raw API responses with secrets, billing account IDs, or customer-specific metadata.
+
+### Step 3 — Fetch live prices
+
+For each unique (resource-type, region) pair in the inventory:
+1. Load `references/pricing-apis.md`
+2. Call the appropriate public pricing API via WebFetch
+3. Record: unit price, unit of measure, effective date, currency (USD)
+
+### Step 4 — Calculate
+
+For each line item:
+```
+monthly_cost = unit_price_per_hour × hours_per_month × quantity
+hours_per_month = 730  (standard FinOps convention: 365 days × 24 hours / 12)
+```
+
+For storage (priced per GB-month):
+```
+monthly_cost = price_per_gb_month × total_gb × quantity
+```
+
+For data transfer (priced per GB):
+```
+monthly_cost = price_per_gb × estimated_monthly_gb_transferred
+```
+
+### Step 5 — Output
+
+Return the line-item table and totals. See SKILL.md "Response minimum" for format.
+
+---
+
+## Mode 2 — Prototype Cost Estimate
+
+Use when: the user wants to estimate cost for a planned architecture before provisioning.
+
+### Step 1 — Collect the spec
+
+Ask the user to describe the planned architecture. Minimum needed:
+- Resource types (e.g., EC2 m5.xlarge, Azure Standard_D4s_v3, OCI VM.Standard.E4.Flex)
+- Quantities (instance count, GB of storage, expected GB data transfer/month)
+- Region(s)
+- Operating system / license model (Linux / Windows; affects compute pricing)
+- Expected usage hours per month (default: 730 = always-on)
+
+For prototype mode, it is acceptable to use reasonable defaults when the user has not specified every detail. Clearly label every assumed value.
+
+### Step 2 — Decompose into billable components
+
+Typical components for a web application prototype:
+
+| Component | Billable units |
+|-----------|---------------|
+| Compute (VM / container) | CPU-hours |
+| OS / license (Windows, RHEL) | Additional per-hour |
+| Managed database | vCPU-hours + storage GB-month + backup storage |
+| Object storage | GB stored/month + GET/PUT requests + egress GB |
+| Load balancer | Per hour + LCU or data-processed GB |
+| Container orchestration | Cluster management fee + node hours |
+| Serverless functions | Invocations + GB-seconds |
+| Egress / data transfer | GB out to internet |
+| Monitoring / logging | GB ingested + GB stored |
+
+Only include components that are in the user's spec. Do not inflate with unused services.
+
+### Step 3 — Fetch live prices
+
+Same as Mode 1 Step 3.
+
+### Step 4 — Calculate
+
+Same as Mode 1 Step 4.
+
+Label every assumed value in the output with `[assumed]`.
+
+### Step 5 — Sensitivity summary
+
+For prototype estimates, include a brief sensitivity section:
+- What is the biggest cost driver?
+- What assumption has the most uncertainty?
+- What would change the estimate by >20% if revised?
+
+Example:
+```
+Biggest driver: RDS db.r6g.xlarge instance ($0.48/hr × 730 hr = $350/month, 42% of total)
+Highest uncertainty: data egress volume — assumed 100 GB/month; at 1 TB/month cost doubles
+```
+
+---
+
+## Multi-Cloud Comparison
+
+When comparing AWS vs Azure vs OCI for the same workload:
+
+1. Map resource types to equivalents across clouds:
+
+| Workload | AWS | Azure | OCI |
+|---------|-----|-------|-----|
+| 4 vCPU / 16 GB VM | m5.xlarge | Standard_D4s_v3 | VM.Standard.E4.Flex (4 OCPU, 16 GB) |
+| Managed PostgreSQL | RDS PostgreSQL db.t4g.medium | Azure Database for PostgreSQL Flexible | OCI MySQL Database / ADB-S |
+| Object storage | S3 Standard | Azure Blob Storage LRS | OCI Object Storage |
+| Container cluster | EKS | AKS | OKE |
+
+2. Fetch prices for each cloud in the user's preferred region(s).
+3. Present side-by-side comparison table, USD, monthly.
+4. Note: OCI often prices differently for Flex shapes (OCPU + memory separately); adjust comparison accordingly.
+
+---
+
+## Estimate Quality Labels
+
+Always label estimates with one of:
+- `live-price`: price fetched from API in this session with timestamp
+- `documentation-based`: price from official pricing page docs (may be weeks old)
+- `assumed`: value not provided by user and not fetched; based on typical pattern
+- `excluded`: component not included in estimate; state why

package/skills/finops/finops-cloud-price-advisor/references/official-sources.md

@@ -0,0 +1,64 @@
+# Official Sources
+
+Authoritative pricing documentation for each cloud provider. Use these as ground truth when live API results are ambiguous or unavailable.
+
+---
+
+## AWS
+
+| Resource | URL |
+|----------|-----|
+| Price List API overview | `https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/price-changes.html` |
+| Price List API reference | `https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/using-ppslong.html` |
+| EC2 pricing page | `https://aws.amazon.com/ec2/pricing/on-demand/` |
+| RDS pricing page | `https://aws.amazon.com/rds/pricing/` |
+| S3 pricing page | `https://aws.amazon.com/s3/pricing/` |
+| Lambda pricing page | `https://aws.amazon.com/lambda/pricing/` |
+| EKS pricing page | `https://aws.amazon.com/eks/pricing/` |
+| Fargate pricing page | `https://aws.amazon.com/fargate/pricing/` |
+| Data Transfer pricing | `https://aws.amazon.com/ec2/pricing/on-demand/#Data_Transfer` |
+| Price List service index | `https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/index.json` |
+| AWS Pricing Calculator | `https://calculator.aws/pricing/2/home` |
+
+## Azure
+
+| Resource | URL |
+|----------|-----|
+| Retail Prices API docs | `https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices` |
+| VM pricing page | `https://azure.microsoft.com/en-us/pricing/details/virtual-machines/linux/` |
+| AKS pricing page | `https://azure.microsoft.com/en-us/pricing/details/kubernetes-service/` |
+| Azure SQL pricing | `https://azure.microsoft.com/en-us/pricing/details/azure-sql-database/single/` |
+| Azure PostgreSQL Flexible | `https://azure.microsoft.com/en-us/pricing/details/postgresql/flexible-server/` |
+| Blob Storage pricing | `https://azure.microsoft.com/en-us/pricing/details/storage/blobs/` |
+| Bandwidth pricing | `https://azure.microsoft.com/en-us/pricing/details/bandwidth/` |
+| Azure Functions pricing | `https://azure.microsoft.com/en-us/pricing/details/functions/` |
+| Azure Pricing Calculator | `https://azure.microsoft.com/en-us/pricing/calculator/` |
+| Cost Management overview | `https://learn.microsoft.com/en-us/azure/cost-management-billing/cost-management-billing-overview` |
+
+## OCI
+
+| Resource | URL |
+|----------|-----|
+| OCI Price List (HTML) | `https://www.oracle.com/cloud/price-list.html` |
+| OCI Cost Analysis overview | `https://docs.oracle.com/en-us/iaas/Content/Billing/Concepts/costanalysisoverview.htm` |
+| OCI Compute shapes | `https://docs.oracle.com/en-us/iaas/Content/Compute/References/computeshapes.htm` |
+| OCI Autonomous Database pricing | `https://www.oracle.com/autonomous-database/pricing/` |
+| OCI Object Storage pricing | `https://www.oracle.com/cloud/storage/object-storage/pricing/` |
+| OCI Networking / egress pricing | `https://www.oracle.com/cloud/networking/pricing/` |
+| OCI Cloud Estimator (calculator) | `https://cloudestimator.oracle.com` |
+| OCI Cost and Usage API | `https://docs.oracle.com/en-us/iaas/Content/Billing/Tasks/costanalysis_topic-create_report.htm` |
+
+## Exchange Rate Sources
+
+| Source | URL | Auth | Notes |
+|--------|-----|------|-------|
+| ExchangeRate-API (preferred) | `https://open.er-api.com/v6/latest/USD` | None | Major currencies; updated daily |
+| ECB daily reference rates (fallback) | `https://www.ecb.europa.eu/stats/eurofxref/eurofxref-daily.xml` | None | EUR-denominated; reliable but limited currency set |
+
+Do not use sources that require API keys (e.g., openexchangerates.org). The agent must not accept or store API keys.
+
+---
+
+## Grounding Rule
+
+When a live API fetch returns a price that differs significantly from the official pricing page, prefer the live API result (it is more current) but note the discrepancy. If the API result appears clearly wrong (e.g., $0.00 or orders-of-magnitude off), fall back to the official pricing page and label the estimate as `documentation-based`.

package/skills/finops/finops-cloud-price-advisor/references/pricing-apis.md

@@ -0,0 +1,271 @@
+# Pricing APIs
+
+Public, unauthenticated pricing endpoints for AWS, Azure, and OCI.
+
+---
+
+## AWS — Price List API
+
+**Base URL**: `https://pricing.us-east-1.amazonaws.com`
+
+No authentication. No API key. No AWS account needed.
+
+### Service index
+
+```
+GET https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/index.json
+```
+
+Returns a JSON map of all service codes and their per-service offer file paths.
+
+### Per-service, per-region offer file
+
+```
+GET https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/{serviceCode}/current/{regionCode}/index.json
+```
+
+Examples:
+```
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonEC2/current/us-east-1/index.json
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonRDS/current/us-east-1/index.json
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonS3/current/us-east-1/index.json
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonECS/current/us-east-1/index.json
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AWSLambda/current/us-east-1/index.json
+```
+
+⚠️ These files are very large (EC2 index is tens of MB). Use the CSV variant for scripting:
+```
+https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/{serviceCode}/current/{regionCode}/index.csv
+```
+
+### Key response fields (products + terms)
+
+```json
+{
+  "products": {
+    "<sku>": {
+      "sku": "...",
+      "productFamily": "Compute Instance",
+      "attributes": {
+        "instanceType": "m5.xlarge",
+        "vcpu": "4",
+        "memory": "16 GiB",
+        "operatingSystem": "Linux",
+        "tenancy": "Shared",
+        "location": "US East (N. Virginia)"
+      }
+    }
+  },
+  "terms": {
+    "OnDemand": {
+      "<sku>.<offerTermCode>": {
+        "priceDimensions": {
+          "<rateCode>": {
+            "unit": "Hrs",
+            "pricePerUnit": { "USD": "0.1920000000" },
+            "description": "$0.192 per On Demand Linux m5.xlarge Instance Hour"
+          }
+        }
+      }
+    }
+  }
+}
+```
+
+### Common service codes
+
+| Service | Code |
+|---------|------|
+| EC2 | `AmazonEC2` |
+| RDS | `AmazonRDS` |
+| S3 | `AmazonS3` |
+| Lambda | `AWSLambda` |
+| ECS / Fargate | `AmazonECS` |
+| EKS | `AmazonEKS` |
+| ElastiCache | `AmazonElastiCache` |
+| CloudFront | `AmazonCloudFront` |
+| DynamoDB | `AmazonDynamoDB` |
+| Data Transfer | `AWSDataTransfer` |
+
+### AWS region codes (selected)
+
+| Region | Code |
+|--------|------|
+| US East (N. Virginia) | `us-east-1` |
+| US West (Oregon) | `us-west-2` |
+| EU (Ireland) | `eu-west-1` |
+| EU (Frankfurt) | `eu-central-1` |
+| AP (Singapore) | `ap-southeast-1` |
+| AP (Tokyo) | `ap-northeast-1` |
+
+---
+
+## Azure — Retail Prices API
+
+**Base URL**: `https://prices.azure.com/api/retail/prices`
+
+No authentication. No API key. No Azure subscription needed.
+
+### Basic request
+
+```
+GET https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview
+```
+
+### With OData filter
+
+```
+GET https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview&$filter={filter}
+```
+
+Filter examples:
+```
+armRegionName eq 'eastus' and skuName eq 'D2s v3' and priceType eq 'Consumption'
+armRegionName eq 'eastus' and serviceName eq 'Virtual Machines' and contains(skuName, 'D2s')
+armRegionName eq 'westeurope' and serviceName eq 'Azure Database for PostgreSQL'
+armRegionName eq 'eastus' and serviceName eq 'Azure Kubernetes Service'
+armRegionName eq 'eastus' and serviceName eq 'Storage' and skuName eq 'LRS Data Stored'
+```
+
+### Key response fields
+
+```json
+{
+  "Items": [
+    {
+      "currencyCode": "USD",
+      "tierMinimumUnits": 0.0,
+      "retailPrice": 0.096,
+      "unitPrice": 0.096,
+      "armRegionName": "eastus",
+      "location": "US East",
+      "effectiveStartDate": "2024-06-01T00:00:00Z",
+      "meterId": "...",
+      "meterName": "D2s v3",
+      "productId": "...",
+      "skuId": "...",
+      "productName": "Virtual Machines DSv3 Series",
+      "skuName": "D2s v3",
+      "serviceName": "Virtual Machines",
+      "serviceFamily": "Compute",
+      "unitOfMeasure": "1 Hour",
+      "type": "Consumption",
+      "isPrimaryMeterRegion": true,
+      "armSkuName": "Standard_D2s_v3"
+    }
+  ],
+  "NextPageLink": "...",
+  "Count": 1
+}
+```
+
+### Key filter fields
+
+| Field | Purpose | Example |
+|-------|---------|---------|
+| `armRegionName` | Azure region | `eastus`, `westeurope`, `southeastasia` |
+| `serviceName` | Service category | `Virtual Machines`, `Storage`, `Azure Kubernetes Service` |
+| `skuName` | SKU identifier | `D2s v3`, `P10`, `LRS Data Stored` |
+| `priceType` | Pricing model | `Consumption` (pay-as-you-go), `Reservation` |
+| `armSkuName` | ARM SKU name (exact) | `Standard_D2s_v3` |
+
+### Azure region codes (selected)
+
+| Region | `armRegionName` |
+|--------|----------------|
+| East US | `eastus` |
+| West US 2 | `westus2` |
+| West Europe | `westeurope` |
+| North Europe | `northeurope` |
+| Southeast Asia | `southeastasia` |
+| Japan East | `japaneast` |
+
+---
+
+## OCI — Public Pricing API
+
+**Base URL**: `https://apexapps.oracle.com/pls/apex/cloudestimator/r/api`
+
+No authentication required for public list prices.
+
+### All prices endpoint
+
+```
+GET https://apexapps.oracle.com/pls/apex/cloudestimator/r/api/prices
+```
+
+Returns a JSON array with all OCI service SKUs and their list prices.
+
+### Key response fields
+
+```json
+{
+  "items": [
+    {
+      "partNumber": "B88317",
+      "displayName": "VM.Standard.E4.Flex - OCPU",
+      "currencyCodeLocalizations": [
+        {
+          "currencyCode": "USD",
+          "prices": [
+            {
+              "model": "PAY_AS_YOU_GO",
+              "value": "0.025",
+              "unit": "OCPU Per Hour"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
+```
+
+### Alternative: Oracle Cloud Pricing page JSON
+
+```
+GET https://www.oracle.com/a/ocom/docs/cloud/oci-price-list.json
+```
+
+This is the machine-readable version of the Oracle Cloud Price List. Structure may vary by release.
+
+### Oracle pricing page (human-readable)
+
+```
+https://www.oracle.com/cloud/price-list.html
+```
+
+### OCI shape pricing pattern
+
+OCI Flex VMs charge separately per OCPU and per GB of memory:
+- Compute: OCPU-hour rate × number of OCPUs
+- Memory: GB-hour rate × number of GB RAM
+- Standard shapes (non-Flex): flat hourly rate per shape
+
+### OCI regions for pricing context
+
+OCI pricing is generally region-independent for compute (same price globally), but data egress and some services do vary. Always confirm whether the target workload has significant egress.
+
+---
+
+## Pricing API Comparison
+
+| Feature | AWS | Azure | OCI |
+|---------|-----|-------|-----|
+| Auth required | No | No | No |
+| Filter by region | Yes (URL path) | Yes (OData) | N/A (global) |
+| Filter by SKU | Via JSON parse | OData `skuName` | JSON parse |
+| Unit of measure | Per hour | Per hour | Per hour / OCPU |
+| Currency in response | USD only | USD (and others via `currencyCode`) | USD |
+| Real-time | Yes | Yes | Yes |
+| Notes | Large files; prefer region-scoped | Best developer experience; OData is powerful | Flat list; Flex shapes split OCPU + memory |
+
+---
+
+## WebFetch Usage Notes
+
+When calling these endpoints via WebFetch:
+- AWS EC2 `index.json` for a single region is very large. Fetch the CSV variant or use the JSON and filter in-context.
+- Azure API returns paginated results; follow `NextPageLink` if present.
+- OCI API returns a single large array; filter by `displayName` substring or `partNumber` after fetch.
+- If a fetch fails (network timeout, 403, 429), label the result as `fetch-failed` and fall back to documentation-based estimate with explicit uncertainty warning.

package/skills/oci/oci-live-autonomous-db-lifecycle-guard/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: oci-live-autonomous-db-lifecycle-guard
+description: Guard Autonomous Database lifecycle changes — scale, start, stop, clone, terminate — with protection-tag enforcement, backup verification, and connection-string impact analysis before any mutation.
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+---
+
+# OCI Live Autonomous DB Lifecycle Guard
+
+## Purpose
+
+Act as the guarded live OCI operator for oci-live-autonomous-db-lifecycle-guard work. Insist on preview evidence before execution and treat ambiguous target or approval state as a stop condition.
+
+## When to use
+
+Use this skill when:
+
+- an Autonomous Database must be scaled, started, stopped, cloned, or terminated against a live OCI environment
+- a protection tag must be audited before a lifecycle operation that could cause data loss or outage
+- an Autonomous Database backup or wallet must be confirmed before a scale or clone operation
+
+## Lean operating rules
+
+- Prefer OCI CLI (`oci`) official documentation when available; fall back to Oracle Cloud docs and sanitized user evidence.
+- Do not execute a live OCI change until tenancy, compartment, active principal, and resource ownership are explicit.
+- Prefer plan, detect-drift, inspect, read, describe, and rollback evidence before execution.
+- If the request skips preview or rollback design, push back.
+- Never print secrets, API keys, tenancy OCIDs, private key contents, or raw config values. Summarize sanitized evidence only.
+- Load references only when needed.
+
+## References
+
+Load these only when needed:
+
+- [Preflight commands](references/preflight-commands.md) — OCI CLI commands to run before any mutation.
+- [Rollback playbook](references/rollback-playbook.md) — concrete rollback steps for this service.
+- [Permission model](references/permission-model.md) — OCI IAM policy statements and dynamic group guidance.
+- [Official sources](references/official-sources.md) — authoritative OCI documentation links.
+
+## Response minimum
+
+Return, at minimum:
+
+- confirmed tenancy, compartment, and active principal
+- preflight evidence (plan output, drift result, inspect/read, health check)
+- approval status for the proposed mutation
+- rollback posture or explicit statement of what cannot be rolled back
+- post-action verification steps or refusal reason

package/skills/oci/oci-live-autonomous-db-lifecycle-guard/metadata.json

@@ -0,0 +1,27 @@
+{
+  "id": "oci-live-autonomous-db-lifecycle-guard",
+  "name": "OCI Live Autonomous DB Lifecycle Guard",
+  "type": "skill",
+  "provider": "oci",
+  "harnesses": [
+    "codex",
+    "claude-code",
+    "cursor",
+    "gemini",
+    "kiro",
+    "other"
+  ],
+  "summary": "Guard Autonomous Database lifecycle changes \u2014 scale, start, stop, clone, terminate \u2014 with protection-tag enforcement, backup verification, and connection-string impact analysis before any mutation.",
+  "source_type": "original",
+  "official_docs": [
+    "https://docs.oracle.com/en-us/iaas/Content/Database/Tasks/adbscaling.htm",
+    "https://docs.oracle.com/en-us/iaas/Content/Database/Tasks/adbstopstart.htm",
+    "https://docs.oracle.com/en-us/iaas/Content/Database/Tasks/adbcloning.htm",
+    "https://docs.oracle.com/en-us/iaas/Content/Database/Tasks/adbbackingup.htm"
+  ],
+  "security_notes": "ADB termination is permanent \u2014 the database and all backups are deleted. Always verify protection tags before any terminate operation. ADB storage scale-up cannot be reversed. Termination blocked by defined-tag protection requires explicit tag removal approval.",
+  "last_verified": "2026-04-30",
+  "path": "skills/oci/oci-live-autonomous-db-lifecycle-guard",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}