@raishin/vanguard-frontier-agentic 2.5.0 → 2.7.0

package/catalog/asset-integrity.json

@@ -20128,7 +20128,7 @@
     },
     {
       "tree": "scripts",
-      "aggregate_sha256": "61d0b8d2fddd8393d936223e26b260c84dbbdecef4da3808c4ab9869fa803335",
+      "aggregate_sha256": "6138f2412ca20a0d1699082ba5aee6b7ba2cfe6c8ff83036e753a6196289d4aa",
       "files": [
         {
           "path": "scripts/apply-skill-allowed-tools.py",
@@ -20142,8 +20142,8 @@
         },
         {
           "path": "scripts/export-marketplace-agents.mjs",
-          "sha256": "a6880e1fbd2430b72ed9db38a538995bce94e48b04d2cf5dd55dedcf227b781b",
-          "bytes": 26744
+          "sha256": "c79e3e7decbb3b9ba77f33e05145a22892bcfbf6a15231a74191a1d60e47cbac",
+          "bytes": 27654
         },
         {
           "path": "scripts/gen_azure_live_guards.py",
@@ -20167,8 +20167,8 @@
         },
         {
           "path": "scripts/generate-kiro-powers.mjs",
-          "sha256": "5bd32b71458dab9741cfa2e9bb3c0df81ea0150dbc38a2e01418022b543872ad",
-          "bytes": 20700
+          "sha256": "38c60ad9b98a6fc0d6eb0901594c1fbcb9c6cf4ac7b69f3bb246d81ac816bed6",
+          "bytes": 35147
         },
         {
           "path": "scripts/generate-plugin-manifest.mjs",
@@ -20180,6 +20180,11 @@
           "sha256": "6134b200b037ecaf94d7758d06ad9c35afec05348b4f4fddcafc6bae15e3bb0b",
           "bytes": 5674
         },
+        {
+          "path": "scripts/install-codex-home.mjs",
+          "sha256": "07189e47956afbf0a316112c6f3988558a35a33de22e3d850af6969b7354f01f",
+          "bytes": 3493
+        },
         {
           "path": "scripts/release-prepare.mjs",
           "sha256": "bc1ce887b378273fd93e458a87208011959c5355ff651d9f63757825135bb763",
@@ -20194,18 +20199,23 @@
     },
     {
       "tree": "powers",
-      "aggregate_sha256": "7a35f82ab67f5e925c1cc265bc1df5f5863f7ba16f1b9cd4d4f2669a469fdbdc",
+      "aggregate_sha256": "0ed8a6ef5bd9d7cd9ea910cb07b0b72fad0cd8bc9376e11bb0242a158e577a1c",
       "files": [
         {
           "path": "powers/README.md",
-          "sha256": "b0a8ff62a1ab2869bedb17a224e061c5e4e43f11a99deef88cabbdbb03d467bc",
-          "bytes": 3832
+          "sha256": "5f9d27fab9ced4d1a49eac13483893f05b9232862ae9a860038d1b698c796a49",
+          "bytes": 4491
         },
         {
           "path": "powers/vanguard-alibaba/POWER.md",
           "sha256": "b09a2b37781189ea99507f6c729ee93a3ff848091ea210433c70a27ae67d757d",
           "bytes": 3391
         },
+        {
+          "path": "powers/vanguard-argocd/POWER.md",
+          "sha256": "eed0a27bca26f305cc3d5f322baf58d8eb70a7546542273160d73a8cb4119862",
+          "bytes": 2193
+        },
         {
           "path": "powers/vanguard-aws/POWER.md",
           "sha256": "305cc05b3ab469f719a28c20816f6590e26ef09965dac3457e0bcd25f1817895",
@@ -20216,21 +20226,61 @@
           "sha256": "da345fff3860f7e4f3e12031f94da912eb8120e15eede8880447609dc09f56a9",
           "bytes": 3310
         },
+        {
+          "path": "powers/vanguard-backstage/POWER.md",
+          "sha256": "e40b729c9b863f0b4519dad598f373316adb63bf84bf23605c8387144b74a08f",
+          "bytes": 2224
+        },
+        {
+          "path": "powers/vanguard-cert-manager/POWER.md",
+          "sha256": "69e93d7b111357cae3f41e5e614081268778a8086db80b084ac724dad9cc7230",
+          "bytes": 2238
+        },
+        {
+          "path": "powers/vanguard-cilium/POWER.md",
+          "sha256": "98e198624678b311847ba15534f59465c14b7b301a8958c8537e47241c3c3687",
+          "bytes": 2204
+        },
         {
           "path": "powers/vanguard-contabo/POWER.md",
           "sha256": "bd66d54f12dac3b3ed7567056027ef0e4f9bb8e6704960d54e60b77b4b7d8bb5",
           "bytes": 2791
         },
+        {
+          "path": "powers/vanguard-dotnet/POWER.md",
+          "sha256": "27fe59a46c68c254ecaba9b9dd65c819867a08cf5f66947fbb31b98c7e6fccf0",
+          "bytes": 2469
+        },
+        {
+          "path": "powers/vanguard-falco/POWER.md",
+          "sha256": "39bc91075468397ec49ef77e8c48ec5a0685c26e748811516387c57a9b681c6b",
+          "bytes": 2184
+        },
+        {
+          "path": "powers/vanguard-fluxcd/POWER.md",
+          "sha256": "853288b0d4a6818a095ab3d7b83de413b84589c57de64573a221d91a70ee67fb",
+          "bytes": 2187
+        },
         {
           "path": "powers/vanguard-gcp/POWER.md",
           "sha256": "e1bfb799b1556ed9d62b0bd80045d85a8ca742a7572d6c836942a23063231a9a",
           "bytes": 3117
         },
+        {
+          "path": "powers/vanguard-generic/POWER.md",
+          "sha256": "8d8e9d028bac2b764e3dd889750a82d7b4e17aa1ba6cbc9e36bdc16982baaccb",
+          "bytes": 2281
+        },
         {
           "path": "powers/vanguard-hetzner/POWER.md",
           "sha256": "f4f0373730597e6ec3cca5b9dd709043a4d57655035873f51c9c21db48d243ef",
           "bytes": 2797
         },
+        {
+          "path": "powers/vanguard-hr/POWER.md",
+          "sha256": "fba79b9ba4c4678ba433a323015482d40645208fa3cad5d4dd691b11cc504c7b",
+          "bytes": 2422
+        },
         {
           "path": "powers/vanguard-huawei/POWER.md",
           "sha256": "5502a64508a9710f33fc35e8e785c12a794e4cd4fdff967032eb9ae7eb6a7382",
@@ -20241,11 +20291,36 @@
           "sha256": "dd63303bbadb05bbadbf71adbd759e2f21d940f38fc6275d3f8fb3804386db3c",
           "bytes": 2659
         },
+        {
+          "path": "powers/vanguard-istio/POWER.md",
+          "sha256": "cd1e64d7ad7b97cf08177fe6e8da47d5087490ff50c08116866da61115674002",
+          "bytes": 2148
+        },
         {
           "path": "powers/vanguard-kubernetes/POWER.md",
           "sha256": "5fb458af0013896e6b95dd7e9b5d7f0f619ad558f983623bd95b94de207d12a0",
           "bytes": 3552
         },
+        {
+          "path": "powers/vanguard-kyverno/POWER.md",
+          "sha256": "33d9fdd860e5293c0037eed1134b514c502dc4a678a81fa6523c34c84d556572",
+          "bytes": 2209
+        },
+        {
+          "path": "powers/vanguard-legal/POWER.md",
+          "sha256": "5c420a3f7a45bdad7b8fbf310a14712839a654a2f32be42d8d37bd51894ff5a5",
+          "bytes": 2462
+        },
+        {
+          "path": "powers/vanguard-marketing/POWER.md",
+          "sha256": "256fd80234b41929c3724af452b69dd1114b5f1ceb5698c6413a7a8de70a1061",
+          "bytes": 2633
+        },
+        {
+          "path": "powers/vanguard-multi-cloud/POWER.md",
+          "sha256": "641c7bfbb6258afe4975be060007ec8c9398fafcc1ad17421c479168089d5c89",
+          "bytes": 2454
+        },
         {
           "path": "powers/vanguard-nvidia/POWER.md",
           "sha256": "2176bcac6966618b55f97fea344729964b3e6d03f7489bda457a057489c52853",
@@ -20256,11 +20331,21 @@
           "sha256": "9fe36c6951d2cab23ffaa64b851cb08d8a0ad1118942db7b850c78a683c536c6",
           "bytes": 3291
         },
+        {
+          "path": "powers/vanguard-opentelemetry/POWER.md",
+          "sha256": "6a4849c8234d8d49111a4b04a94722b7a66dff0e29eb498ae66a96b94b45d10b",
+          "bytes": 2270
+        },
         {
           "path": "powers/vanguard-ovhcloud/POWER.md",
           "sha256": "b2d374c57933a5cd227f868f0c265f11b83476b98ee55ef894c1d05b2ef01f04",
           "bytes": 2611
         },
+        {
+          "path": "powers/vanguard-prometheus/POWER.md",
+          "sha256": "58676f3b9402efdb9ab63ae5976e58b7879aab8fb9c621b018696c02e5420955",
+          "bytes": 2245
+        },
         {
           "path": "powers/vanguard-salesforce/POWER.md",
           "sha256": "7b71640dfa49d9ce213be315da4c72dff1b527b1fafc37c213d34b5cc909ccfb",
@@ -20271,6 +20356,11 @@
           "sha256": "19ef9329b40cd528860651a41e6617b70760df70c7c1cfd3f57aed9446f4068f",
           "bytes": 2651
         },
+        {
+          "path": "powers/vanguard-sigstore/POWER.md",
+          "sha256": "66b7845eab94a6b74f7af0ad09af39e263cbd0dd2f510d1f4992f9d9b01739a5",
+          "bytes": 2230
+        },
         {
           "path": "powers/vanguard-terraform/POWER.md",
           "sha256": "f31175f2b1965b82836de12ce8f52498f828701f2f85709c8e38c7d6ddcc7770",
@@ -20280,7 +20370,7 @@
     },
     {
       "tree": "plugins",
-      "aggregate_sha256": "c8cc07cabc5b5e4aa810af98470b6c56d5913a9b26e7e460243d3d373e9f7bba",
+      "aggregate_sha256": "8c986809af21d7644c19fdaa4859657521177419e52020bdea96d3ee212cfd4b",
       "files": [
         {
           "path": "plugins/cross-platform-agent-template/.codex-plugin/plugin.json",
@@ -20289,14 +20379,19 @@
         },
         {
           "path": "plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json",
-          "sha256": "791816bfc75a13de933e6c97795d3663a6a4b2875294ca8e936a68e9033884c5",
-          "bytes": 1850
+          "sha256": "4da1eebdafe711bed3bfacec4411239e53dc870dd477e9a3fce32635d7567cd0",
+          "bytes": 1875
+        },
+        {
+          "path": "plugins/vanguard-frontier-agentic/skills/vanguard-frontier-agentic-install/SKILL.md",
+          "sha256": "e6f6380390a42e4a00b6d07f0d416bfcb6436a5fb8b377d2b7e583963f81216a",
+          "bytes": 1482
         }
       ]
     },
     {
       "tree": ".claude-plugin",
-      "aggregate_sha256": "c6c0585b941f064516306511a3c4ae53fb23a329f69828331d43c26da969d37c",
+      "aggregate_sha256": "f9c5ba5e9dc83fb6d8ade8de9fc7e879353b39ab567e1914ef5c0753109a979a",
       "files": [
         {
           "path": ".claude-plugin/README.md",
@@ -20305,19 +20400,19 @@
         },
         {
           "path": ".claude-plugin/marketplace.json",
-          "sha256": "e66fbfd20e5524f3b9544d79b5ace2efb09b4569516bee271a586c2939c7aa9d",
+          "sha256": "fa0b5e2eefc016510852acd8897e54f7bf8f3310a287b0dfc5148f9d31b2933f",
           "bytes": 1008
         },
         {
           "path": ".claude-plugin/plugin.json",
-          "sha256": "3bb0b4529f51cb0a41c6fa149dd8b030527792592448ff1615ab63d7d76fb1c5",
+          "sha256": "2887b160d5c91d5e2e10af10efd747155b7a14a74ef70286953e98e8da437148",
           "bytes": 39327
         }
       ]
     },
     {
       "tree": ".cursor-plugin",
-      "aggregate_sha256": "0f2788a978ea2608ccf23e6f0dbf3e3918459a6a6432e8d046af2a3f2ebe5fd1",
+      "aggregate_sha256": "a1f7f0536ae1376460bc1d0a0a59ea2fb16f44ddc55bd8dfcf7b94d6995f1f69",
       "files": [
         {
           "path": ".cursor-plugin/README.md",
@@ -20326,14 +20421,14 @@
         },
         {
           "path": ".cursor-plugin/plugin.json",
-          "sha256": "75dfa6dac3f5e22fed6a39aeb6ce8f1752f8a2631bb2a35d6af091d07091203c",
+          "sha256": "a37fc03681d71437bb09b4fa27d3c46815f27b27efcfc2a2405393d96dc7e8ed",
           "bytes": 37173
         }
       ]
     },
     {
       "tree": ".github/plugin",
-      "aggregate_sha256": "bd2625bee1b9855893616d48209813797a1a09a3dea980375c2685333caa5fe2",
+      "aggregate_sha256": "79f2eb7955a3726322a803a30f1312ed4c1c0045c2cfb3e198f7791e6b1e2983",
       "files": [
         {
           "path": ".github/plugin/README.md",
@@ -20342,7 +20437,7 @@
         },
         {
           "path": ".github/plugin/marketplace.json",
-          "sha256": "e2f4437d4101e30c0b3130038b1f94af18dde3ee77a3f5e40357a365ce71f5c5",
+          "sha256": "ed96d0fd8527b172fde096ba6026bbdcec1fe40f2a520c65097eba064de11977",
           "bytes": 790
         }
       ]
@@ -20365,7 +20460,7 @@
     },
     {
       "tree": "tests",
-      "aggregate_sha256": "96b0a1808d38b9001820c9561f0978d06b9dbf468b39f6b415c4c2780623cc59",
+      "aggregate_sha256": "ca295db4c108d4c6e7fbe183b19bbb980315fe68d0cf41b92480a63d3a2c1d18",
       "files": [
         {
           "path": "tests/AGENTS.md",
@@ -25397,6 +25492,11 @@
           "sha256": "30ae65384ee3d1bea4ff7d753fd4ef79acc4f6d0c5bc1934491b085549d825f7",
           "bytes": 7763
         },
+        {
+          "path": "tests/test-codex-plugin-marketplace-install.test.mjs",
+          "sha256": "158c54d2759b9e28e5e1844f4ff9c03008790ed09a9e0922df3066b04e62cc73",
+          "bytes": 4911
+        },
         {
           "path": "tests/test-copilot-skill-bundling.py",
           "sha256": "d642c65ffc814853007d833b8025d858622a7eb238eaa0c0e80acd843522fefd",
@@ -25414,8 +25514,8 @@
         },
         {
           "path": "tests/test-vfa-export-coverage.test.mjs",
-          "sha256": "e9475468429ddfd1194a86716fe937d7645c69ebe334c11dcbb51a1c4c8a0b9c",
-          "bytes": 33463
+          "sha256": "5d5de11a7c60d1fbfbf3777cfa692553fb883261ae73f68daa4dd7ce59fa4ee7",
+          "bytes": 39135
         },
         {
           "path": "tests/validate-agent-frontmatter-schema.py",
@@ -25449,8 +25549,8 @@
         },
         {
           "path": "tests/validate-codex-marketplace.py",
-          "sha256": "ea5a0a153e4299bfb0ae0a2367c0ff5e6b549cb38c4dbd241ce81782bb16c086",
-          "bytes": 5899
+          "sha256": "62a85a3d4ee2d3a0b890f1fe6eac73c9251742bab2672e39a93dd5827ac9f1be",
+          "bytes": 7333
         },
         {
           "path": "tests/validate-finops-price-fixtures.py",
@@ -25523,12 +25623,12 @@
   "root_files": [
     {
       "path": "README.md",
-      "sha256": "0e04fe0bf500fd7dd3cb79ee62840232a5e63708f0bc6479b59e9f52d0d8f454",
-      "bytes": 78319
+      "sha256": "921ce5b110a89730f5502efcb93393fd17b41068f7c21a007c91363c92fb178a",
+      "bytes": 78630
     },
     {
       "path": "SECURITY.md",
-      "sha256": "36f9875216fa8c375fafca01a2f1d49c0f806fc84608ae02d8a0b7954bb8db8a",
+      "sha256": "b0cf188155acf47f561fe8e1571e94d9b733caaa77344d8b7f9757bbaaa7468f",
       "bytes": 7073
     },
     {
@@ -25563,8 +25663,8 @@
     },
     {
       "path": "package.json",
-      "sha256": "ef0ff18dfec9cd529337902aa662633d427797e9d0e47d8fab39935b072b02cd",
-      "bytes": 5551
+      "sha256": "2ecedbae74dbb01a874fdff362b91c4389c5918ce4cc8ab92cbd721de09c2aac",
+      "bytes": 5722
     },
     {
       "path": ".releaserc.js",
@@ -25572,5 +25672,5 @@
       "bytes": 4523
     }
   ],
-  "aggregate_sha256": "d28665ecb6f7c7a64b2be030bc7e61effe320ac624d4fd498b7c38045a2ae485"
+  "aggregate_sha256": "82cac0e518e55aae22593c0e2e1cefe3471c59d5d81d27f88f4562f6ed5ccc4e"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raishin/vanguard-frontier-agentic",
-  "version": "2.5.0",
+  "version": "2.7.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "license": "Apache-2.0",
   "repository": {
@@ -37,6 +37,7 @@
   ],
   "scripts": {
     "agents:export": "node scripts/export-marketplace-agents.mjs",
+    "install:codex-home": "node scripts/install-codex-home.mjs",
     "manifest:write": "python3 tests/validate-skill-manifest.py --write",
     "manifest:check": "python3 tests/validate-skill-manifest.py",
     "validate:aws": "python3 tests/validate-aws-skill-quality.py && python3 tests/validate-aws-progressive-disclosure.py",
@@ -55,6 +56,7 @@
     "validate:kiro-powers": "python3 tests/validate-kiro-powers.py",
     "validate:multi-harness-marketplace": "python3 tests/validate-multi-harness-marketplace.py",
     "validate:codex-marketplace": "python3 tests/validate-codex-marketplace.py",
+    "test:codex-plugin-marketplace-install": "node tests/test-codex-plugin-marketplace-install.test.mjs",
     "validate:finops-fixtures": "python3 tests/validate-finops-price-fixtures.py",
     "validate:readme-counts": "node tests/validate-readme-counts.mjs",
     "validate:qa-cluster": "node tests/eval-qa-cluster.mjs",

package/plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "2.5.0",
+  "version": "2.7.0",
   "description": "Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.",
   "author": {
     "name": "Raishin",
@@ -42,5 +42,6 @@
       "Route this Alibaba Cloud task through the maestro pattern."
     ],
     "brandColor": "#3B82F6"
-  }
+  },
+  "skills": "./skills/"
 }

package/plugins/vanguard-frontier-agentic/skills/vanguard-frontier-agentic-install/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: vanguard-frontier-agentic-install
+description: Install all Vanguard Frontier Agentic Codex agents and companion skills into the current user's ~/.codex home after adding or installing the plugin marketplace.
+---
+
+# Vanguard Frontier Agentic Codex Install
+
+Use this skill when the user wants the Vanguard Frontier Agentic marketplace content installed into Codex as real user-level agents and skills.
+
+## Reliable two-stage install
+
+Run from any directory:
+
+```bash
+codex plugin marketplace add Raishin/vanguard-frontier-agentic
+npx --yes -p @raishin/vanguard-frontier-agentic \
+  vfa-export-agents --platform codex --all --repo "$HOME" --force
+```
+
+If working from a local checkout of the repository, prefer the local exporter so unpublished branch changes are used:
+
+```bash
+node scripts/export-marketplace-agents.mjs --platform codex --all --repo "$HOME" --force
+```
+
+## Verify
+
+```bash
+find "$HOME/.codex/agents" -maxdepth 1 -name '*.toml' | wc -l
+find "$HOME/.codex/skills" -mindepth 1 -maxdepth 1 -type d | wc -l
+```
+
+Expected for this release: all Codex-capable VFA agents are installed under `$HOME/.codex/agents`, and companion skills are installed under `$HOME/.codex/skills`.
+
+## Important limitation
+
+`codex plugin marketplace add` installs/tracks the marketplace source. It does not, by itself, prove that Codex installed the plugin cache or exported repo-level agent TOML files. The exporter is the deterministic second stage for agents and companion skills.

package/powers/README.md

@@ -1,6 +1,6 @@
 # `powers/` — Kiro Powers
 
-This directory holds **14 Kiro Powers** for `vanguard-frontier-agentic`, one
+This directory holds **32 Kiro Powers** for `vanguard-frontier-agentic`, one
 per cloud/platform/IaC provider. Each Power is a directory containing a
 `POWER.md` file with strict-5 frontmatter and steering content.
 
@@ -8,20 +8,38 @@ per cloud/platform/IaC provider. Each Power is a directory containing a
 
 ```
 powers/
+├── vanguard-alibaba/POWER.md
+├── vanguard-argocd/POWER.md
 ├── vanguard-aws/POWER.md
 ├── vanguard-azure/POWER.md
+├── vanguard-backstage/POWER.md
+├── vanguard-cert-manager/POWER.md
+├── vanguard-cilium/POWER.md
+├── vanguard-contabo/POWER.md
+├── vanguard-dotnet/POWER.md
+├── vanguard-falco/POWER.md
+├── vanguard-fluxcd/POWER.md
 ├── vanguard-gcp/POWER.md
-├── vanguard-oci/POWER.md
-├── vanguard-alibaba/POWER.md
-├── vanguard-huawei/POWER.md
-├── vanguard-ovhcloud/POWER.md
-├── vanguard-scaleway/POWER.md
+├── vanguard-generic/POWER.md
 ├── vanguard-hetzner/POWER.md
-├── vanguard-contabo/POWER.md
+├── vanguard-hr/POWER.md
+├── vanguard-huawei/POWER.md
 ├── vanguard-ionos/POWER.md
+├── vanguard-istio/POWER.md
 ├── vanguard-kubernetes/POWER.md
-├── vanguard-terraform/POWER.md
-└── vanguard-nvidia/POWER.md
+├── vanguard-kyverno/POWER.md
+├── vanguard-legal/POWER.md
+├── vanguard-marketing/POWER.md
+├── vanguard-multi-cloud/POWER.md
+├── vanguard-nvidia/POWER.md
+├── vanguard-oci/POWER.md
+├── vanguard-opentelemetry/POWER.md
+├── vanguard-ovhcloud/POWER.md
+├── vanguard-prometheus/POWER.md
+├── vanguard-salesforce/POWER.md
+├── vanguard-scaleway/POWER.md
+├── vanguard-sigstore/POWER.md
+└── vanguard-terraform/POWER.md
 ```
 
 Each `POWER.md` declares:
@@ -58,7 +76,7 @@ cd vanguard-frontier-agentic
 ## How to update
 
 ```bash
-# Regenerate the 14 Powers from catalog/agents.json + per-provider config:
+# Regenerate the 32 Powers from catalog/agents.json + per-provider config:
 npm run kiro-powers:write
 
 # Then verify everything is in sync:

package/powers/vanguard-argocd/POWER.md

@@ -0,0 +1,40 @@
+---
+name: "vanguard-argocd"
+displayName: "Vanguard Frontier — ArgoCD"
+description: "Curated ArgoCD review agents covering argo rollouts progressive delivery, gitops. Reference agents directly under agents/argocd/. Static review only; no live mutations."
+keywords: ["argocd", "gitops", "progressive-delivery", "application-sync"]
+author: "Raishin"
+---
+# Vanguard Frontier — ArgoCD
+
+Curated ArgoCD review agents covering argo rollouts progressive delivery, gitops. Reference agents directly under agents/argocd/. Static review only; no live mutations.
+
+## When to engage this Power
+
+Activate when the task references ArgoCD services, resources, or operations. Do not activate on unrelated requests — narrow keyword matching is required to avoid false activations (Kiro Powers convention).
+
+## Routing pattern
+
+- *(no maestro for this provider; reference agents directly under `agents/argocd/`)*
+
+Reference agents directly from agents/argocd/ without maestro-based routing.
+
+## Live-guard agents (gate_mode only)
+
+- *(none — this provider has no live-mutation guards in the catalog)*
+
+Live-guard agents enforce approval, target confirmation, evidence capture, and rollback plans before executing a mutation. They are never auto-dispatched — the maestro must place them in `live-guard-gate` or `runtime-evidence-gate` mode.
+
+## Invariants
+
+- Static review only -- agents analyze configuration and provide findings without mutating live systems.
+- Sync and rollout strategies must be validated against the target cluster GitOps workflow.
+
+## Where the agents live
+
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/Raishin/vanguard-frontier-agentic) marketplace. For this provider, see `agents/argocd/` in that repository. All 2 agents in this provider ship a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+
+## Companion install paths
+
+- **Claude Code:** `/plugin marketplace add Raishin/vanguard-frontier-agentic` then `/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic`
+- **Codex / Copilot / Cursor / Gemini CLI / Kiro (file export):** `npx vfa-export-agents --platform <harness> --provider argocd --repo .`

package/powers/vanguard-backstage/POWER.md

@@ -0,0 +1,40 @@
+---
+name: "vanguard-backstage"
+displayName: "Vanguard Frontier — Backstage"
+description: "Reviews backstage Scaffolder software templates for action blast-radius, input parameter injection, RBAC gate coverage,... Static review only; no live mutations."
+keywords: ["backstage", "scaffolder", "software-templates", "developer-portal"]
+author: "Raishin"
+---
+# Vanguard Frontier — Backstage
+
+Reviews backstage Scaffolder software templates for action blast-radius, input parameter injection, RBAC gate coverage,... Static review only; no live mutations.
+
+## When to engage this Power
+
+Activate when the task references Backstage services, resources, or operations. Do not activate on unrelated requests — narrow keyword matching is required to avoid false activations (Kiro Powers convention).
+
+## Routing pattern
+
+- *(no maestro for this provider; reference agents directly under `agents/backstage/`)*
+
+Reference agents directly from agents/backstage/ without maestro-based routing.
+
+## Live-guard agents (gate_mode only)
+
+- *(none — this provider has no live-mutation guards in the catalog)*
+
+Live-guard agents enforce approval, target confirmation, evidence capture, and rollback plans before executing a mutation. They are never auto-dispatched — the maestro must place them in `live-guard-gate` or `runtime-evidence-gate` mode.
+
+## Invariants
+
+- Static review only -- agents analyze configuration and provide findings without mutating live systems.
+- Template parameters and scaffolder actions must be reviewed for injection and secret-exposure risks.
+
+## Where the agents live
+
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/Raishin/vanguard-frontier-agentic) marketplace. For this provider, see `agents/backstage/` in that repository. The single agent in this provider ships a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+
+## Companion install paths
+
+- **Claude Code:** `/plugin marketplace add Raishin/vanguard-frontier-agentic` then `/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic`
+- **Codex / Copilot / Cursor / Gemini CLI / Kiro (file export):** `npx vfa-export-agents --platform <harness> --provider backstage --repo .`

package/powers/vanguard-cert-manager/POWER.md

@@ -0,0 +1,40 @@
+---
+name: "vanguard-cert-manager"
+displayName: "Vanguard Frontier — Cert-Manager"
+description: "Reviews cert-manager Issuer and ClusterIssuer scope, CertificateRequestPolicy coverage, certificate SAN and duration risks,... Static review only; no live mutations."
+keywords: ["cert-manager", "x509", "certificate-lifecycle", "pki"]
+author: "Raishin"
+---
+# Vanguard Frontier — Cert-Manager
+
+Reviews cert-manager Issuer and ClusterIssuer scope, CertificateRequestPolicy coverage, certificate SAN and duration risks,... Static review only; no live mutations.
+
+## When to engage this Power
+
+Activate when the task references Cert-Manager services, resources, or operations. Do not activate on unrelated requests — narrow keyword matching is required to avoid false activations (Kiro Powers convention).
+
+## Routing pattern
+
+- *(no maestro for this provider; reference agents directly under `agents/cert-manager/`)*
+
+Reference agents directly from agents/cert-manager/ without maestro-based routing.
+
+## Live-guard agents (gate_mode only)
+
+- *(none — this provider has no live-mutation guards in the catalog)*
+
+Live-guard agents enforce approval, target confirmation, evidence capture, and rollback plans before executing a mutation. They are never auto-dispatched — the maestro must place them in `live-guard-gate` or `runtime-evidence-gate` mode.
+
+## Invariants
+
+- Static review only -- agents analyze configuration and provide findings without mutating live systems.
+- Certificate renewal windows and issuer trust chains must be validated before any policy change.
+
+## Where the agents live
+
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/Raishin/vanguard-frontier-agentic) marketplace. For this provider, see `agents/cert-manager/` in that repository. The single agent in this provider ships a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+
+## Companion install paths
+
+- **Claude Code:** `/plugin marketplace add Raishin/vanguard-frontier-agentic` then `/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic`
+- **Codex / Copilot / Cursor / Gemini CLI / Kiro (file export):** `npx vfa-export-agents --platform <harness> --provider cert-manager --repo .`

package/powers/vanguard-cilium/POWER.md

@@ -0,0 +1,40 @@
+---
+name: "vanguard-cilium"
+displayName: "Vanguard Frontier — Cilium"
+description: "Reviews cilium CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy, standard NetworkPolicy, ClusterMesh cross-cluster policy... Static review only; no live mutations."
+keywords: ["cilium", "network-policy", "ebpf", "cluster-mesh"]
+author: "Raishin"
+---
+# Vanguard Frontier — Cilium
+
+Reviews cilium CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy, standard NetworkPolicy, ClusterMesh cross-cluster policy... Static review only; no live mutations.
+
+## When to engage this Power
+
+Activate when the task references Cilium services, resources, or operations. Do not activate on unrelated requests — narrow keyword matching is required to avoid false activations (Kiro Powers convention).
+
+## Routing pattern
+
+- *(no maestro for this provider; reference agents directly under `agents/cilium/`)*
+
+Reference agents directly from agents/cilium/ without maestro-based routing.
+
+## Live-guard agents (gate_mode only)
+
+- *(none — this provider has no live-mutation guards in the catalog)*
+
+Live-guard agents enforce approval, target confirmation, evidence capture, and rollback plans before executing a mutation. They are never auto-dispatched — the maestro must place them in `live-guard-gate` or `runtime-evidence-gate` mode.
+
+## Invariants
+
+- Static review only -- agents analyze configuration and provide findings without mutating live systems.
+- Network policies must be reviewed for unintended traffic blocking across namespaces and cluster-mesh endpoints.
+
+## Where the agents live
+
+Agent specs and adapters are part of the [Vanguard Frontier Agentic](https://github.com/Raishin/vanguard-frontier-agentic) marketplace. For this provider, see `agents/cilium/` in that repository. The single agent in this provider ships a Kiro adapter (`harnesses/kiro-ide.agent.md`, `kiro-cli.agent.json`).
+
+## Companion install paths
+
+- **Claude Code:** `/plugin marketplace add Raishin/vanguard-frontier-agentic` then `/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic`
+- **Codex / Copilot / Cursor / Gemini CLI / Kiro (file export):** `npx vfa-export-agents --platform <harness> --provider cilium --repo .`