@raishin/vanguard-frontier-agentic 2.1.0 → 2.3.0

package/catalog/skills.json

@@ -3921,6 +3921,280 @@
     "author": "github: Raishin",
     "version": "0.1.0"
   },
+  {
+    "id": "dotnet-aspire-cloud-native-review",
+    "name": ".NET Aspire Cloud-Native Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of .NET Aspire AppHost and service-defaults projects for cloud-native readiness — health checks, service dependency wiring, resiliency policies, configuration and secret hygiene, and the boundary to a real deployment platform. Reads source and sanitized configuration only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/aspire/",
+      "https://learn.microsoft.com/en-us/dotnet/aspire/fundamentals/service-defaults",
+      "https://learn.microsoft.com/en-us/dotnet/aspire/fundamentals/app-host-overview",
+      "https://learn.microsoft.com/en-us/dotnet/aspire/fundamentals/health-checks"
+    ],
+    "security_notes": "Static review only — reads the AppHost project, ServiceDefaults, the Aspire manifest, and sanitized configuration; never runs the AppHost or deploys. Flags secrets committed in appsettings as critical. Never requests secrets, connection strings, or customer data; ask for sanitized appsettings with placeholders. Note: .NET Aspire APIs evolve quickly — keep last_verified current.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-aspire-cloud-native-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-aspnetcore-api-review",
+    "name": ".NET ASP.NET Core API Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of ASP.NET Core HTTP API architecture — middleware ordering, dependency-injection lifetimes, CORS, model validation, API versioning, error responses, rate limiting, and health/readiness boundaries. Reads source and sanitized configuration only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/aspnet/core/fundamentals/middleware/",
+      "https://learn.microsoft.com/en-us/aspnet/core/fundamentals/dependency-injection",
+      "https://learn.microsoft.com/en-us/aspnet/core/security/cors",
+      "https://learn.microsoft.com/en-us/aspnet/core/performance/rate-limit",
+      "https://learn.microsoft.com/en-us/aspnet/core/fundamentals/minimal-apis/security"
+    ],
+    "security_notes": "Static review only — reads source and sanitized configuration, never runs the app or calls endpoints. Never requests secrets, connection strings, tokens, signing keys, or customer data; ask for sanitized appsettings with placeholders.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-aspnetcore-api-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-aspnetcore-identity-authz-review",
+    "name": ".NET ASP.NET Core Identity & AuthZ Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of ASP.NET Core authentication, authorization, identity boundaries, JWT token validation, cookie and session security, and multi-tenant isolation. Reads source and sanitized configuration only — never runs the app or contacts an identity provider.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/aspnet/core/security/",
+      "https://learn.microsoft.com/en-us/aspnet/core/security/authentication/configure-jwt-bearer-authentication",
+      "https://learn.microsoft.com/en-us/aspnet/core/security/authorization/introduction",
+      "https://learn.microsoft.com/en-us/aspnet/core/security/authorization/policies",
+      "https://learn.microsoft.com/en-us/aspnet/core/security/authentication/cookie"
+    ],
+    "security_notes": "Static review only — reads source and sanitized configuration, never runs the application, mints or inspects tokens, or contacts an identity provider. Flags disabled token validation, anonymous state-changing endpoints, and client-supplied tenant claims as critical. Never requests secrets, signing keys, client secrets, tokens, connection strings, tenant identifiers, or customer data.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-aspnetcore-identity-authz-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-csharp-runtime-review",
+    "name": ".NET C# & Runtime Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of C# language and runtime correctness — nullable reference types, async/await, cancellation, disposal, allocations on hot paths, LINQ misuse, and AOT/trimming hazards. Reads source only; never compiles or runs code.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/csharp/",
+      "https://learn.microsoft.com/en-us/dotnet/standard/asynchronous-programming-patterns/",
+      "https://learn.microsoft.com/en-us/dotnet/csharp/language-reference/builtin-types/nullable-reference-types",
+      "https://learn.microsoft.com/en-us/dotnet/core/diagnostics/debug-threadpool-starvation",
+      "https://learn.microsoft.com/en-us/dotnet/core/deploying/trimming/trim-warnings"
+    ],
+    "security_notes": "Static review only — reads C# source and project files, never compiles, runs, or instruments code. Never requests secrets, connection strings, tokens, or customer data.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-csharp-runtime-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-efcore-data-access-review",
+    "name": ".NET EF Core Data Access Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of EF Core data access — DbContext lifetime, N+1 queries, unbounded result sets, raw SQL injection surface, optimistic concurrency tokens, migration discipline, multi-tenant query filters, and connection resiliency. Reads source only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/ef/core/",
+      "https://learn.microsoft.com/en-us/ef/core/dbcontext-configuration",
+      "https://learn.microsoft.com/en-us/ef/core/querying/single-split-queries",
+      "https://learn.microsoft.com/en-us/ef/core/miscellaneous/multitenancy",
+      "https://learn.microsoft.com/en-us/ef/core/saving/concurrency"
+    ],
+    "security_notes": "Static review only — reads DbContext classes, entity configuration, migrations, and query sites; never runs migrations, opens a database connection, or executes SQL. Never requests connection strings, database credentials, or customer data.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-efcore-data-access-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-maestro",
+    "name": ".NET Maestro",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Router skill for the .NET board. Classifies a .NET task and dispatches the narrowest specialist agent, or a parallel team of up to four for multi-domain tasks. Routes only — never answers .NET questions itself.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/",
+      "https://learn.microsoft.com/en-us/aspnet/core/",
+      "https://learn.microsoft.com/en-us/ef/core/"
+    ],
+    "security_notes": "Routing only — performs no review itself, never runs code, never requests secrets, connection strings, tokens, tenant identifiers, or customer data. Every dispatched .NET specialist is static-review.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-maestro",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-observability-otel-review",
+    "name": ".NET Observability & OpenTelemetry Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of in-application OpenTelemetry wiring in ASP.NET Core — SDK registration, trace context propagation, structured logging, correlation IDs, metrics instrumentation, sampling, and PII leakage in telemetry. Reads source and sanitized configuration only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/core/diagnostics/observability-with-otel",
+      "https://learn.microsoft.com/en-us/dotnet/core/extensions/logging",
+      "https://learn.microsoft.com/en-us/aspnet/core/fundamentals/logging/",
+      "https://learn.microsoft.com/en-us/dotnet/core/diagnostics/distributed-tracing"
+    ],
+    "security_notes": "Static review only — reads OpenTelemetry registration, logging configuration, and instrumentation source; never runs the app or contacts a telemetry backend. Flags PII in spans or logs as critical. Never requests secrets, tokens, or customer data; ask for sanitized appsettings with placeholders.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-observability-otel-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-performance-aot-review",
+    "name": ".NET Performance, AOT & Trimming Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static, evidence-gated review of .NET performance posture, Native AOT, and trimming readiness — reflection and serialization hazards, hot-path allocations, and benchmark discipline. Any performance claim with no benchmark artifact is downgraded to inference.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/core/deploying/native-aot/",
+      "https://learn.microsoft.com/en-us/dotnet/core/deploying/trimming/trim-self-contained",
+      "https://learn.microsoft.com/en-us/dotnet/core/deploying/trimming/trim-warnings",
+      "https://learn.microsoft.com/en-us/dotnet/core/diagnostics/"
+    ],
+    "security_notes": "Static review only — reads project files, benchmark results, trim-warning output, and hot-path source; never runs the application, a benchmark, or a profiler. Never requests secrets or customer data.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-performance-aot-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-supply-chain-review",
+    "name": ".NET Supply Chain Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of .NET CI/CD and NuGet supply-chain integrity — SDK pinning, package version pinning and lock files, feed trust, fork-PR secret exposure, vulnerability scanning, and build reproducibility. Reads workflow and project configuration only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/nuget/",
+      "https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management",
+      "https://learn.microsoft.com/en-us/dotnet/core/tools/global-json",
+      "https://learn.microsoft.com/en-us/nuget/consume-packages/package-references-in-project-files",
+      "https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions"
+    ],
+    "security_notes": "Static review only — reads CI workflow files, global.json, Directory.Packages.props, NuGet.config, lock files, and publish profiles; never triggers a pipeline or restores packages. Flags secret exposure to fork-PR builds as critical. Never requests CI secrets, feed credentials, or signing keys.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-supply-chain-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "dotnet-testing-quality-review",
+    "name": ".NET Testing Quality Review",
+    "type": "skill",
+    "provider": "dotnet",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Static review of .NET test suites — detects assertion-free and tautological tests, over-mocking, coverage theater, weak isolation, flaky patterns, and missing negative or security tests across xUnit, NUnit, and MSTest. Reads test source only; never runs the suite.",
+    "source_type": "original",
+    "official_docs": [
+      "https://learn.microsoft.com/en-us/dotnet/core/testing/",
+      "https://learn.microsoft.com/en-us/dotnet/core/testing/unit-testing-best-practices",
+      "https://learn.microsoft.com/en-us/aspnet/core/test/integration-tests",
+      "https://learn.microsoft.com/en-us/aspnet/core/test/middleware"
+    ],
+    "security_notes": "Static review only — reads test projects, test source, and coverage configuration; never runs the test suite, a coverage tool, or a test container. Never requests secrets or customer data.",
+    "last_verified": "2026-05-19",
+    "path": "skills/dotnet/dotnet-testing-quality-review",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
   {
     "id": "email-sender-authentication-review",
     "name": "Email Sender Authentication Review",
@@ -5746,6 +6020,35 @@
     "author": "github: Raishin",
     "version": "0.1.0"
   },
+  {
+    "id": "hr-risk-triage-review",
+    "name": "HR Risk Triage Review",
+    "type": "skill",
+    "provider": "hr",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Adversarial HR and employment-risk triage discipline for terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, layoffs, and HR policy exceptions — surfaces risks, evidence gaps, and escalation paths for employment counsel. Does not give legal or HR advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.eeoc.gov/laws-guidance",
+      "https://www.dol.gov/agencies/whd/flsa",
+      "https://www.acas.org.uk/advice",
+      "https://www.gov.uk/browse/working",
+      "https://www.mom.gov.sg/employment-practices",
+      "https://www.fairwork.gov.au/"
+    ],
+    "security_notes": "Static review only — works from sanitized excerpts; never requests employee medical records, personal data, or protected-characteristic data beyond what the question requires. Does not issue binding employment-law conclusions; refuses pretextual or retaliatory documentation and recommends escalation to employment counsel.",
+    "last_verified": "2026-05-18",
+    "path": "skills/hr/hr-risk-triage-review",
+    "author": "github: Raishin",
+    "version": "0.1.0"
+  },
   {
     "id": "huawei-cce-container-platform-operator",
     "name": "Huawei CCE Container Platform Operator",
@@ -7433,6 +7736,113 @@
     "author": "github: Raishin",
     "version": "0.1.0"
   },
+  {
+    "id": "legal-counsel-review",
+    "name": "Legal Counsel Review",
+    "type": "skill",
+    "provider": "legal",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Adversarial legal-risk review discipline for contracts, privacy, regulatory, litigation, compliance, and policy-exception questions — surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel. Does not give legal advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj",
+      "https://commission.europa.eu/law/law-topic/data-protection/data-protection-eu_en",
+      "https://www.legislation.gov.uk/ukpga/2018/12/contents",
+      "https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act",
+      "https://www.oaic.gov.au/privacy/the-privacy-act",
+      "https://www.law.cornell.edu/wex"
+    ],
+    "security_notes": "Static review only — works from sanitized excerpts; never requests secrets, credentials, personal data, employee medical detail, or trade secrets. Does not issue binding legal conclusions; flags privileged material and recommends escalation to qualified counsel.",
+    "last_verified": "2026-05-18",
+    "path": "skills/legal/legal-counsel-review",
+    "author": "github: Raishin",
+    "version": "0.1.0"
+  },
+  {
+    "id": "legal-hr-case-capsule",
+    "name": "Legal-HR Case Capsule",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Shared, auditable handoff contract for Legal and HR agents — a redacted case capsule carrying facts, uncertainty, evidence quality, risk labels, privilege and privacy posture, a named decision owner, and an explicit do-not-do list. Does not give legal or HR advice.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "Defines a minimum-necessary handoff record; never carries medical records, government IDs, credentials, privileged email text, or protected-class data beyond what the matter requires. Never authorizes action; flags privilege and privacy posture and routes decisions to a named human owner.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-case-capsule",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "legal-hr-risk-taxonomy",
+    "name": "Legal-HR Risk Taxonomy",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Shared risk vocabulary for the Legal and HR agent ecosystem — severity ratings, privilege and privacy sensitivity labels, matter-type classes, escalation-gate triggers, and the audit-log schema. Does not give legal or HR advice and never concludes a matter is safe or compliant.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "A risk rating is an opinion on exposure, never a clearance; never records a matter as compliant or safe. The audit-log schema is minimum-necessary and carries labels and summaries, never raw medical, privileged, credential, or protected-class content. Rates Unknown and escalates when facts are missing.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-risk-taxonomy",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
+  {
+    "id": "legal-hr-routing-protocol",
+    "name": "Legal-HR Routing Protocol",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Classification and routing discipline for Legal and HR matters — routing rules, the cross-domain overlap handoff matrix, controlled-handoff communication principles, and the Legal-HR conflict-resolution protocol. Does not give legal or HR advice and never makes a binding routing decision.",
+    "source_type": "original",
+    "official_docs": [
+      "https://www.nist.gov/privacy-framework",
+      "https://www.eeoc.gov",
+      "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+    ],
+    "security_notes": "Routing is a recommendation, never an authorization; never approves, denies, or directs adverse action. Classifies matters from sanitized signals only and never requests medical detail, government IDs, credentials, or protected-class data. Routes ambiguous matters to a maestro rather than guessing a specialist.",
+    "last_verified": "2026-05-18",
+    "path": "skills/cross-functional/legal-hr-routing-protocol",
+    "version": "0.1.0",
+    "author": "github: Raishin"
+  },
   {
     "id": "llm-ai-pipeline-test-review",
     "name": "LLM AI Pipeline Test Review",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.1.0",
+  "version": "2.3.0",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "Raishin",

package/schemas/agent.schema.json

@@ -49,7 +49,10 @@
         "kubernetes",
         "terraform",
         "multi-cloud",
-        "generic"
+        "generic",
+        "dotnet",
+        "hr",
+        "legal"
       ]
     },
     "harnesses": {

package/schemas/skill.schema.json

@@ -42,7 +42,10 @@
         "kubernetes",
         "terraform",
         "multi-cloud",
-        "generic"
+        "generic",
+        "dotnet",
+        "hr",
+        "legal"
       ]
     },
     "harnesses": {

package/scripts/export-marketplace-agents.mjs

@@ -304,8 +304,20 @@ function loadSkills() {
     for (const skill of fs.readdirSync(providerDir, { withFileTypes: true })) {
       if (!skill.isDirectory()) continue;
       const skillDir = path.join(providerDir, skill.name);
+      const metaFile = path.join(skillDir, "metadata.json");
       if (fs.existsSync(path.join(skillDir, "SKILL.md"))) {
-        byName.set(skill.name, { dir: skillDir, provider: provider.name });
+        let skillProvider = provider.name;
+        if (fs.existsSync(metaFile)) {
+          try {
+            const meta = JSON.parse(fs.readFileSync(metaFile, "utf8"));
+            if (meta.provider) {
+              skillProvider = meta.provider;
+            }
+          } catch (err) {
+            // Fall back to directory name if metadata.json is invalid.
+          }
+        }
+        byName.set(skill.name, { dir: skillDir, provider: skillProvider });
       }
     }
   }

package/skills/cross-functional/legal-hr-case-capsule/README.md

@@ -0,0 +1,45 @@
+# 📦 Legal-HR Case Capsule
+
+The **case capsule** is the single, auditable handoff contract for Legal and HR agentic coordination. When a matter crosses a boundary — an HR investigation that needs privileged legal review, or a legal litigation hold that triggers an HR data freeze — the case capsule carries a structured, redacted payload between agents while preserving privilege, minimizing personal data, and recording the escalation path.
+
+## What is a case capsule?
+
+A 30-field structured handoff contract that:
+- **Carries facts and risk posture**, never an authorization or final decision
+- **Minimizes personal and sensitive data** through explicit redaction rules
+- **Preserves legal and HR privilege** with mandatory do-not-disclose markers
+- **Names one decision owner** — the human responsible for the next action
+- **Enforces a do-not-do list** — irreversible actions that are explicitly forbidden until human sign-off
+
+See [`SKILL.md`](SKILL.md) for the skill itself, and [`references/capsule-schema.md`](references/capsule-schema.md) for the complete 30-field specification, redaction rules, and a worked example.
+
+## Why a case capsule?
+
+Without a case capsule, agents would improvise handoffs — dumping raw case context, leaking personal data, losing track of who said what, and creating audit gaps. The case capsule is the guardrail: it enforces a shape, a payload contract, and a privilege boundary.
+
+Every handoff is auditable: an auditor, a regulator, or opposing counsel can trace exactly what facts moved between agents, why, and who approved the motion.
+
+## For Legal agents
+
+When your review reveals an HR issue (wrongful termination exposure, discrimination risk, retaliation red flag), you hand off to HR via a case capsule. The capsule says *"here's what I found, here are the privilege markers, here's who owns the next step, here's what we must NOT do without consent."*
+
+## For HR agents
+
+When your review reveals a legal issue (whistleblower report, conflict of interest, anti-bribery exposure), you hand off to Legal via a case capsule. The capsule carries the HR context without leaking the employee's medical history, protected-characteristic data, or confidential HR files.
+
+## Vault principles
+
+- **Redaction is mandatory.** Every field has a redaction rule; no field carries unredacted personal data unless explicitly required.
+- **Privilege is explicit.** Mandatory `attorney_client_privilege` and `work_product_doctrine` labels control what can be disclosed downstream.
+- **One human owner.** Every handoff names a single `decision_owner` (a real person's title or role) who is accountable for the next irreversible action.
+- **Refusal by default.** The case capsule carries a `do_not_do_list` — explicit, non-empty actions that are forbidden until human approval.
+
+## Cross-references
+
+- [`SKILL.md`](SKILL.md) — the skill prompt and scaffold for case-capsule composition
+- [`references/capsule-schema.md`](references/capsule-schema.md) — 30-field specification, redaction rules, worked example, and validation checklist
+- [`docs/architecture/legal-hr-agent-communication.md`](/docs/architecture/legal-hr-agent-communication.md) — cross-functional coordination principles, case capsule as the only channel, audit trail
+
+---
+
+*The case capsule is part of the vanguard frontier's cross-functional protocol layer. It enables agentic coordination that survives audit and legal scrutiny.*

package/skills/cross-functional/legal-hr-case-capsule/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: legal-hr-case-capsule
+description: Use this skill when a Legal or HR agent must hand a matter to another agent and the context, uncertainty, evidence quality, privilege posture, and privacy posture must survive the handoff. It defines the shared legal-hr-case-capsule — a controlled, auditable exchange record with redacted identifiers, risk labels, privilege and privacy labels, a decision-owner field, and an explicit do-not-do list. It does not give legal or HR advice and does not authorize any action.
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-05-18"
+  category: compliance
+  lifecycle: experimental
+---
+
+# Legal-HR Case Capsule
+
+## Purpose
+This skill defines the **legal-hr-case-capsule** — the single structured record
+that Legal and HR agents exchange when a matter crosses an agent boundary. The
+capsule exists so that no agent works in a silo, no context is lost in a
+handoff, and every cross-domain exchange is auditable. It is a data contract,
+not a decision: a capsule never approves, denies, or directs an action. It
+carries facts, uncertainty, risk posture, and an explicit decision owner.
+
+## When to use
+- A maestro agent routes a matter to one or more specialist agents.
+- A specialist agent escalates a matter that has crossed into another domain.
+- Any matter touches both Legal and HR risk and must be reviewed in parallel.
+- A matter must be paused and escalated to a human owner.
+
+## Core rules
+- Every cross-agent handoff MUST be expressed as a capsule. No free-form
+  agent-to-agent chatter.
+- Every capsule MUST name exactly one `decision_owner` (an accountable human)
+  and exactly one `primary_agent`.
+- Every capsule MUST carry a `do_not_do_list`. An empty list is not acceptable;
+  if nothing is prohibited, the capsule is not ready to send.
+- Every capsule MUST label `privilege_sensitivity` and `privacy_sensitivity`.
+- Identifiers MUST be redacted to the minimum necessary. Use role and
+  business-unit references, not names, government IDs, or contact details.
+- A capsule records uncertainty honestly: `assumptions`, `inferences`, and
+  `missing_evidence` are mandatory fields, not optional.
+- A capsule never states "this is legal", "this is compliant", or "this action
+  is approved". `risk_rating` uses risk language only.
+- High-risk cross-domain capsules MUST set `escalation_required: true` and
+  `recommended_next_action` to a pause-and-escalate posture unless documented
+  controls already exist.
+
+## Capsule field set
+The capsule has 30 required fields. See
+[references/capsule-schema.md](references/capsule-schema.md) for the full field
+definitions, allowed values, and redaction rules. Summary:
+
+- Identity and routing: `case_id`, `source_agent`, `receiving_agent`,
+  `primary_agent`, `secondary_agents`, `matter_type`,
+  `employee_or_party_identifiers_redacted`, `jurisdiction_or_location_if_known`,
+  `business_unit`, `timeline`.
+- Evidence discipline: `facts`, `allegations`, `assumptions`, `inferences`,
+  `missing_evidence`, `evidence_quality`.
+- Risk posture: `risk_rating`, `privilege_sensitivity`, `privacy_sensitivity`,
+  `retaliation_risk`, `discrimination_or_harassment_risk`, `regulatory_risk`,
+  `litigation_hold_needed`, `data_minimization_notes`.
+- Ownership and action: `decision_owner`, `human_approval_required`,
+  `escalation_required`, `recommended_next_action`, `do_not_do_list`,
+  `audit_log_summary`.
+
+## References
+Load only when needed:
+- [Capsule schema and redaction rules](references/capsule-schema.md) — full
+  field-by-field contract, allowed values, and worked example.
+
+## Security notes
+- The capsule is a minimum-necessary record. Never widen it to carry medical
+  records, government IDs, credentials, privileged email text, or
+  protected-class data beyond what the matter strictly requires.
+- A capsule that would extend the circulation of privileged or investigation
+  material must be narrowed before it is sent; flag privilege explicitly.
+- The capsule never authorizes action. Any field that reads as a directive to
+  terminate, discipline, settle, file, notify a regulator, or send an employee
+  communication is a defect — rewrite it as a recommendation with a named human
+  owner.

package/skills/cross-functional/legal-hr-case-capsule/metadata.json

@@ -0,0 +1,19 @@
+{
+  "id": "legal-hr-case-capsule",
+  "name": "Legal-HR Case Capsule",
+  "type": "skill",
+  "provider": "generic",
+  "harnesses": ["codex", "claude-code", "cursor", "gemini", "kiro", "other"],
+  "summary": "Shared, auditable handoff contract for Legal and HR agents — a redacted case capsule carrying facts, uncertainty, evidence quality, risk labels, privilege and privacy posture, a named decision owner, and an explicit do-not-do list. Does not give legal or HR advice.",
+  "source_type": "original",
+  "official_docs": [
+    "https://www.nist.gov/privacy-framework",
+    "https://www.eeoc.gov",
+    "https://eur-lex.europa.eu/eli/reg/2016/679/oj"
+  ],
+  "security_notes": "Defines a minimum-necessary handoff record; never carries medical records, government IDs, credentials, privileged email text, or protected-class data beyond what the matter requires. Never authorizes action; flags privilege and privacy posture and routes decisions to a named human owner.",
+  "last_verified": "2026-05-18",
+  "path": "skills/cross-functional/legal-hr-case-capsule",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}