@raishin/vanguard-frontier-agentic 2.7.1 → 2.9.0

package/skills/azure/azure-waf-security-review/references/safety-checklist.md

@@ -0,0 +1,28 @@
+# Safety checklist
+
+Use before Azure workload security reviews, hardening recommendations, policy/Defender changes, identity changes, network exposure decisions, incident-response claims, or production-readiness statements.
+
+## Non-negotiables
+
+- Do not ask for or print credentials, tokens, secrets, tenant IDs, subscription IDs, resource IDs, customer data, private keys, or raw incident payloads.
+- Keep the default mode read-only and advisory.
+- Require explicit approval before changing Entra ID, Conditional Access, RBAC, PIM, Azure Policy, Defender plans, Sentinel connectors, network controls, Key Vault settings, or production diagnostics.
+- Prefer managed identities and least privilege over stored secrets and broad standing privilege.
+- Separate Microsoft Learn documentation evidence from sampled read-only Azure evidence and sanitized user evidence.
+- Do not call a workload secure unless evidence covers identity, segmentation, data, secrets, logging, threat detection, vulnerability management, and incident response.
+- Treat paid-plan, preview, manual, and shared-responsibility controls as caveated evidence.
+
+## Component risks
+
+- **Identity and access:** broad Owner/Contributor grants, weak Conditional Access, standing privilege, unmanaged workload identities, stale service principals.
+- **Segmentation and networking:** public ingress, uncontrolled egress, flat networks, missing Private Link DNS review, NSG/firewall rules without owners.
+- **Data protection:** unclassified data, unmanaged keys, missing audit trails, untested backup/recovery security, exfiltration paths.
+- **Secrets:** secret values in code, app settings, pipelines, logs, tickets, or chat; missing rotation and emergency rotation.
+- **Policy and compliance:** broad deny effects without safe deployment, stale exemptions, compliance dashboards used as proof without control review.
+- **Threat monitoring:** unowned alerts, missing diagnostic settings, weak log retention, disconnected SecOps process.
+- **DevSecOps:** no threat model, no SAST/dependency/IaC/image scanning, findings without SLA or release gate.
+- **Incident response:** paper runbooks, unclear owner, no tabletop, no recovery security validation.
+
+## Evidence labels
+
+Use `documentation-based`, `sampled current-state evidence`, `repo evidence`, `user-provided evidence`, or `inference`. Documentation alone never proves the user's live Azure posture.

package/skills/azure/azure-waf-security-review/references/waf-security-operations.md

@@ -0,0 +1,75 @@
+# Azure WAF Security Operations
+
+> Version note: Azure service behavior and tooling change over time. Verify exact command syntax, permissions, feature availability, and recommendation semantics against Microsoft Learn documentation through the user's configured documentation MCP before production use. Do not paste secrets or sensitive identifiers into commands, files, or chat.
+
+Use this reference for current, source-grounded service behavior and the hard review gates that the lean `SKILL.md` intentionally does not carry.
+
+## What people get wrong
+
+- Treating a generic security checklist as proof of workload security.
+- Calling secure score, Defender coverage, or policy compliance production readiness without owner-reviewed evidence.
+- Equating encryption-at-rest defaults with complete data protection.
+- Assuming private endpoints or firewalls fix weak identity, secret handling, or egress paths.
+- Skipping threat modeling, secure-development controls, incident-response testing, and recovery security.
+
+## Officially grounded service shape
+
+- Microsoft Learn evidence says Well-Architected security starts from Zero Trust, the CIA triad, and recurring security improvement rather than one-time hardening.
+- The Security checklist covers baseline/compliance, secure development lifecycle and threat modeling, data classification, segmentation, strict IAM, network isolation, encryption, resource hardening, application secrets, threat monitoring, security testing, and incident response.
+- Microsoft security guidance says to verify explicitly, use least privilege for the right duration and assets, and assume breach with compensating controls that limit blast radius.
+- Defender for Cloud can assess resources against security standards such as Microsoft Cloud Security Benchmark, but documentation-based recommendations do not prove the user's configured posture.
+- MCSB and Defender compliance evidence can support prioritization, but preview controls, manual/shared responsibilities, exemptions, and paid-plan requirements must be labeled clearly.
+
+Documentation evidence proves documented Azure service behavior. It does not prove the user's tenant, subscription, RBAC, quotas, deployed resources, billing state, security posture, or production readiness.
+
+## Non-negotiable design rules
+
+- Define the workload boundary, data classification, critical flows, compliance drivers, owners, and production impact before judging security.
+- Require identity-first access, least privilege, time-bound privileged access, and workload identities before approving sensitive operations.
+- Require intentional segmentation across identity, network, resource organization, and data paths; do not treat a single perimeter as sufficient.
+- Require evidence for data protection, secret lifecycle, logging, threat monitoring, vulnerability management, and incident response.
+- Treat security recommendations as staged risk reduction, not as permission to mutate policies, networking, Defender plans, or identity controls without approval.
+
+## Minimal safe implementation flow
+
+- Scope workload, environments, data sensitivity, critical flows, compliance obligations, owners, and current evidence sources.
+- Collect Microsoft Learn documentation requirements and sampled read-only evidence when available for identity, network, data, policy, Defender, logging, secrets, and DevSecOps controls.
+- Classify gaps against Security checklist areas: baseline, SDL/threat model, classification, segmentation, IAM, networking, encryption, hardening, secrets, monitoring, testing, and incident response.
+- Prioritize fixes by exploitability, business impact, blast radius, reversibility, and owner readiness.
+- Return verdict, evidence level, blockers, staged remediation, validation checks, and residual risk.
+
+## High-risk assumptions to kill
+
+- “We use Azure, so default platform security is enough.”
+- “Secure score is high, so the workload is secure.”
+- “Private networking means attackers cannot reach the workload.”
+- “Encryption is enabled, so data protection is complete.”
+- “PIM exists, so privileged access is solved.”
+- “Defender/Sentinel is connected, so detection and response are ready.”
+- “No incidents means no security gaps.”
+
+Those are lazy assumptions.
+
+## Safe command/code verification targets
+
+- Inventory role assignments, privileged access paths, workload identities, Conditional Access dependencies, and secret usage with read-only queries.
+- Inspect segmentation evidence across resource organization, network boundaries, ingress, egress, private access, and data flows.
+- Review data classification, encryption configuration, key ownership, Key Vault posture, secret rotation, and audit logs without exposing secret values.
+- Query Defender recommendations, secure score controls, policy compliance, exemptions, diagnostic settings, alert rules, and log destinations as sampled current-state evidence.
+- Check secure-development controls such as threat models, dependency scanning, IaC scanning, image scanning, release gates, and vulnerability triage evidence.
+- Verify incident-response runbooks, alert ownership, escalation paths, tabletop/test evidence, and post-incident feedback loops before claiming readiness.
+
+## Safe verification targets
+
+- Security baseline maps to compliance requirements, platform recommendations, and workload-specific threats.
+- IAM is strict, conditional, auditable, least-privilege, and time-bound for privileged operations.
+- Data is classified and protected with encryption, key ownership, access controls, and audit trails matching sensitivity.
+- Network segmentation controls north-south and east-west traffic and has explicit egress handling.
+- Threat monitoring, alert routing, vulnerability management, testing, and incident response are owned and exercised.
+
+## When to push back
+
+- The user wants production-ready approval without workload boundary, data classification, or critical-flow context.
+- Broad roles, public exposure, static secrets, or unowned alerts are normalized as temporary shortcuts.
+- Defender, Sentinel, or policy is cited without current-state evidence and owner follow-up.
+- The recommendation would change identity, network, policy, or Defender settings without explicit approval, blast-radius review, and rollback plan.

package/skills/azure/azure-waf-security-review/references/workflow-and-output.md

@@ -0,0 +1,40 @@
+# Workflow and output contract
+
+Use this reference for full Azure Well-Architected Security reviews.
+
+## Workflow
+
+1. **Classify scope**
+   - Workload, environment, data sensitivity, critical flows, compliance obligations, owners, and production impact.
+   - Identity, network, data, secrets, monitoring, policy, DevSecOps, and incident-response surfaces in scope.
+
+2. **Ground in Microsoft Learn**
+   - Use Microsoft Learn documentation through the user's configured documentation MCP for current Well-Architected Security, MCSB, Defender, Policy, Key Vault, Entra, and Azure Monitor guidance.
+   - Treat commands and exact feature availability as version-sensitive until verified.
+
+3. **Collect current-state evidence when available**
+   - Read-only role assignments, identities, network exposure, Defender recommendations, secure score controls, policy compliance, exemptions, diagnostics, alerting, logs, secrets posture, and vulnerability controls.
+   - Do not retrieve secret values or raw customer payloads.
+
+4. **Stress test the posture**
+   - Ask what attacker path remains if identity is compromised.
+   - Ask what data can be exfiltrated if an app component is compromised.
+   - Ask which alerts fire, who owns them, and what runbook executes.
+   - Ask what breaks if a deny policy or private endpoint is rolled out too broadly.
+
+5. **Prioritize remediation**
+   - Fix broad access, public exposure, secret leakage, missing logs, and unowned alerts before nice-to-have maturity work.
+   - Stage disruptive changes and require rollback or safe-deployment plans.
+
+## Output contract
+
+Return:
+
+1. Scoped workload and evidence level
+2. Verdict: pass, conditional, or blocked
+3. Top security blockers
+4. Findings by Security checklist area
+5. Safe next actions in priority order
+6. Required approvals for any mutation
+7. Open questions and assumptions
+8. Evidence labels and source notes

package/skills/finance/README.md

@@ -0,0 +1,8 @@
+# Finance Skills
+
+Reference skills for corporate finance advisory workflows grounded in SEC, FASB, and institutional finance standards.
+
+| Skill | Purpose |
+|---|---|
+| [finance-maestro](./finance-maestro/) | Routing logic and safety protocol for finance domain |
+| [variance-analysis-advisor](./variance-analysis-advisor/) | Variance decomposition framework and SEC Reg S-K MD&A commentary guidance |

package/skills/finance/capital-allocation-advisor/README.md

@@ -0,0 +1,20 @@
+# Capital Allocation Advisor Skill
+
+Multi-jurisdiction reference framework for corporate capital allocation decisions, investment appraisal, cost of capital, M&A valuation, and capital return policy.
+
+## Coverage
+
+- Investment appraisal: NPV (formula, decision rule, common errors), IRR (formula, pitfalls), MIRR (formula, decision rule), payback period, discounted payback, profitability index — with a decision matrix showing when each metric applies
+- Cost of capital: WACC (market value weights, after-tax cost of debt), CAPM cost of equity (beta estimation, unlevering/relevering, country risk premium for emerging markets), hurdle rates by project risk, APV vs. WACC when to use
+- M&A valuation: DCF (FCFF, terminal value methods), trading comparables (EV/EBITDA, P/E, P/B, EV/FCF, control premium), precedent transactions, accretion/dilution analysis (pro forma EPS), synergy analysis (revenue, cost, financial synergies — labeled illustrative)
+- Capital return policy: ROIC vs. WACC value creation test, EVA, dividends vs. buybacks decision framework, reinvestment hierarchy, US buyback excise tax (IRC §4501)
+- Sensitivity and scenario analysis: one-way and two-way sensitivity, tornado charts, scenario analysis (bull/base/bear), Monte Carlo overview, real options (expand, abandon, defer, switch)
+- Jurisdictional tax overlays: corporate tax rates (US, Germany, France, UK, Japan, China, India, Australia), dividend and buyback withholding tax matrix (8 jurisdictions), thin capitalization rules (IRC §163(j), Zinsschranke, UK CIR, Japan earnings stripping, China 2:1 rule, India GAAR, Australia Div. 820), OECD BEPS Action 4
+
+## Companion Agent
+
+`finance-capital-allocation-advisor-agent`
+
+## Standards and Sources Cited
+
+CAPM, Modigliani-Miller, WACC (Miles-Ezzell / Harris-Pringle / Modigliani-Miller variants), APV (Myers 1974), IAS 36 (Impairment of Assets), ASC 350 (Goodwill and Intangibles), OECD BEPS Action 4 (Interest Limitations), IRC §163(j), IRC §4501, UK Finance Act 2017 (CIR), Germany Zinsschranke, Damodaran public datasets (beta, WACC, country risk premium), SEC EDGAR public filings

package/skills/finance/capital-allocation-advisor/SKILL.md

@@ -0,0 +1,463 @@
+---
+name: capital-allocation-advisor
+description: Multi-jurisdiction reference framework for corporate capital allocation, investment appraisal (NPV, IRR, MIRR, payback, profitability index), cost of capital (WACC, CAPM, hurdle rates), M&A valuation methods (DCF, trading comparables, precedent transactions, accretion/dilution), capital return policy (dividends vs. buybacks vs. reinvestment with ROIC > WACC test), and sensitivity/scenario analysis. Jurisdictional and tax overlays for US, EU, UK, Japan, China, India, and Australia. Advisory only — not investment advice and not a fairness opinion.
+allowed-tools: Skill Read WebFetch Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-06-01"
+  category: finance
+  lifecycle: experimental
+---
+
+# Capital Allocation Advisor Skill
+
+> Read-only reference framework. All conclusions are advisory. Tax rates, regulatory requirements, and market
+> benchmarks change frequently. Verify current requirements with qualified financial advisors, tax counsel,
+> and legal advisors before making any capital allocation or investment decision.
+
+---
+
+## Part 1 — Investment Appraisal Methods
+
+### 1.1 Net Present Value (NPV)
+
+**Formula:**
+
+NPV = Σ [CF_t / (1 + r)^t] − C₀
+
+where CF_t = after-tax cash flow in period t, r = discount rate (hurdle rate or WACC), C₀ = initial capital outlay, t = 1 … n.
+
+**Decision rule:** Accept if NPV > 0; reject if NPV < 0. Between mutually exclusive projects, choose the highest positive NPV.
+
+**Key inputs:**
+- Free cash flow to firm (FCFF) or free cash flow to equity (FCFE) depending on whether WACC or cost of equity is the discount rate
+- Terminal value (Gordon Growth Model or Exit Multiple): TV_n = [FCF_n × (1 + g)] / (WACC − g) or TV_n = EBITDA_n × EV/EBITDA_exit
+- Tax shield treatment: WACC method (after-tax cost of debt) vs. APV method (explicit PV of tax shields)
+
+**Common errors:**
+- Using nominal cash flows with a real discount rate (or vice versa)
+- Double-counting the tax shield in both cash flows and the discount rate
+- Ignoring changes in net working capital (NWC) as a cash flow component
+- Omitting terminal value entirely or using an unrealistic growth rate g ≥ WACC
+
+### 1.2 Internal Rate of Return (IRR)
+
+**Definition:** The discount rate r* that sets NPV = 0.
+
+NPV = Σ [CF_t / (1 + r*)^t] − C₀ = 0 → solve for r*
+
+**Decision rule:** Accept if IRR > hurdle rate (WACC or required return); reject if IRR < hurdle rate.
+
+**IRR pitfalls:**
+
+| Pitfall | Description | Remedy |
+|---|---|---|
+| Multiple IRRs | Occurs with non-conventional cash flow sign changes | Use MIRR or NPV profile |
+| Scale insensitivity | IRR ignores project size; a small project can have a higher IRR than a larger NPV project | Always compare on NPV or incremental IRR |
+| Reinvestment rate assumption | IRR implicitly assumes reinvestment at the IRR rate, which may be unrealistic | Use MIRR with explicit reinvestment rate |
+| Mutually exclusive projects | Higher IRR project may have lower NPV if cash flow timing differs | Choose by NPV for mutually exclusive decisions |
+
+### 1.3 Modified Internal Rate of Return (MIRR)
+
+**Formula:**
+
+MIRR = [FV(positive cash flows, reinvestment rate) / PV(negative cash flows, financing rate)]^(1/n) − 1
+
+**Decision rule:** Accept if MIRR > cost of capital.
+
+**Advantage over IRR:** Eliminates multiple IRR problem and uses explicit reinvestment rate (typically WACC) rather than the implicit reinvestment assumption in IRR.
+
+### 1.4 Payback Period
+
+**Formula:**
+
+Payback = Year before full recovery + (Remaining cost / Cash flow in recovery year)
+
+**Decision rule:** Accept if payback ≤ maximum acceptable payback period (management-defined).
+
+**Limitations:**
+- Ignores time value of money
+- Ignores cash flows after payback period
+- Useful as a liquidity screen; should not be the primary capital budgeting criterion
+
+### 1.5 Discounted Payback Period
+
+**Formula:** Same as payback, but uses PV of each cash flow (discounted at the hurdle rate).
+
+**Advantage:** Accounts for time value of money. Still ignores cash flows after payback period.
+
+### 1.6 Profitability Index (PI)
+
+**Formula:**
+
+PI = PV of future cash flows / Initial investment = (NPV + C₀) / C₀ = 1 + NPV/C₀
+
+**Decision rule:** Accept if PI > 1 (equivalent to NPV > 0). Useful for capital rationing — rank projects by PI when budget is constrained.
+
+### 1.7 Decision Matrix
+
+| Metric | Primary Use Case | Handles Mutually Exclusive? | Handles Capital Rationing? |
+|---|---|---|---|
+| NPV | Primary criterion — maximizes firm value | Yes (pick highest positive NPV) | No (use PI for rationing) |
+| IRR | Intuitive hurdle rate comparison | No (can conflict with NPV) | No |
+| MIRR | Corrects IRR reinvestment assumption | Better than IRR; still may conflict | No |
+| Payback | Liquidity screen; secondary check | No | No |
+| Discounted Payback | Time-value-adjusted liquidity screen | No | No |
+| PI | Capital rationing when budget is binding | No | Yes |
+
+---
+
+## Part 2 — Cost of Capital and WACC
+
+### 2.1 WACC Formula
+
+WACC = (E/V) × r_e + (D/V) × r_d × (1 − t_c)
+
+where:
+- E = market value of equity
+- D = market value of debt
+- V = E + D (enterprise value, excluding cash for levered firms; use total capital)
+- r_e = cost of equity
+- r_d = pre-tax cost of debt (yield to maturity on outstanding debt)
+- t_c = marginal corporate tax rate
+
+**Key assumption: Use market value weights, not book value weights.** Book values reflect historical accounting; market values reflect current economic claims.
+
+### 2.2 Cost of Equity — CAPM
+
+r_e = r_f + β × ERP
+
+where:
+- r_f = risk-free rate (typically yield on 10-year government bond in the currency of analysis)
+- β = equity beta (levered; from market regression or comparable company analysis)
+- ERP = equity risk premium (historical or implied; country-specific for emerging markets)
+
+**Additional adjustments for emerging markets:**
+
+r_e = r_f + β × ERP_US + CRP
+
+where CRP = country risk premium (e.g., Damodaran's sovereign default spread × relative equity market volatility ratio).
+
+**Beta estimation:**
+- Regress equity returns against market index (typically 60-month monthly returns)
+- Unlever comparable company betas: β_u = β_L / [1 + (1 − t_c) × (D/E)]
+- Relever at target capital structure: β_L = β_u × [1 + (1 − t_c) × (D/E)_target]
+
+**Reference sources (public):**
+- Damodaran betas by industry: [pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/betas.html](https://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/betas.html)
+- Damodaran country risk premium: [pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/ctryprem.html](https://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/ctryprem.html)
+
+### 2.3 Cost of Debt
+
+r_d = yield to maturity on long-term debt (for investment-grade companies)
+    = risk-free rate + default spread (for synthetic rating approach)
+
+**After-tax cost of debt:** r_d × (1 − t_c)
+
+**Note on hybrid instruments:** Preferred stock is typically excluded from D and treated as a third capital component: WACC = (E/V) × r_e + (P/V) × r_p + (D/V) × r_d × (1 − t_c).
+
+### 2.4 Hurdle Rates
+
+A hurdle rate is the minimum acceptable return for a specific project, division, or asset class. It equals WACC when the project risk matches the firm's overall risk. Adjustments:
+
+| Project Type | Adjustment to WACC |
+|---|---|
+| Business-as-usual expansion (same risk as firm) | Use firm WACC |
+| Higher-risk project (new market, technology) | WACC + risk premium (2–5% typical) |
+| Lower-risk project (regulated utility, cost reduction) | WACC − risk premium |
+| Emerging market project | Add CRP to base WACC |
+| Leveraged buyout (LBO) | IRR threshold typically 15–25%; sponsor WACC at acquisition leverage |
+
+### 2.5 Adjusted Present Value (APV)
+
+APV = Base NPV (all-equity) + PV(Tax Shields) + PV(Financing Side Effects)
+
+**When to use APV vs. WACC:**
+- WACC: constant D/E ratio target (target leverage); simpler
+- APV: changing capital structure (LBO, project finance, debt paydown); explicit tax shield modeling preferred
+
+---
+
+## Part 3 — M&A Valuation Methods
+
+### 3.1 Discounted Cash Flow (DCF)
+
+DCF valuation for M&A targets follows the same structure as project NPV but applied to the standalone enterprise:
+
+EV = Σ [FCFF_t / (1 + WACC)^t] + [TV / (1 + WACC)^n]
+
+FCFF_t = EBIT × (1 − t_c) + D&A − ΔCapEx − ΔNWC
+
+**Terminal value methods:**
+
+| Method | Formula | When to Use |
+|---|---|---|
+| Gordon Growth Model (GGM) | TV = FCFF_n+1 / (WACC − g) | Stable, mature businesses with predictable growth |
+| Exit Multiple | TV = EBITDA_n × EV/EBITDA_exit | Cyclical or high-growth businesses; anchors to market |
+
+**DCF sensitivity factors:** discount rate (±50–100 bps) and terminal growth rate (±50 bps) drive most of the value range.
+
+### 3.2 Trading Comparables (Public Market Multiples)
+
+Select publicly traded peers → compute multiples → apply to target.
+
+**Common multiples:**
+
+| Multiple | Formula | Best Used For |
+|---|---|---|
+| EV/EBITDA | Enterprise Value / EBITDA | Cross-sector; capital structure-neutral |
+| EV/EBIT | Enterprise Value / EBIT | Businesses with significant D&A differences |
+| EV/Revenue | Enterprise Value / Revenue | High-growth or negative-EBITDA companies |
+| P/E | Price / Earnings per Share | Equity value (not enterprise value) |
+| P/B | Price / Book Value | Banks and financial institutions |
+| EV/FCF | Enterprise Value / Free Cash Flow | Asset-light; capital allocation focus |
+
+**Adjustment:** Apply a control premium (typically 20–40% in M&A) to public market multiples when valuing a private target or acquiring a public company.
+
+### 3.3 Precedent Transactions
+
+Select prior M&A transactions in the same sector → analyze transaction multiples paid (EV/EBITDA, EV/Revenue, P/E) → apply to target.
+
+**Typically higher than trading comparables** because:
+- Control premium already embedded
+- Synergy value partially priced into the transaction multiple
+- Strategic vs. financial buyer dynamics
+
+**Data sources:** Public M&A disclosures (SEC filings, press releases, deal databases such as Bloomberg, Refinitiv — note these require subscriptions; for public educational analysis, SEC EDGAR filings are publicly available at [sec.gov/cgi-bin/browse-edgar](https://www.sec.gov/cgi-bin/browse-edgar?action=getcurrent)).
+
+### 3.4 Accretion / Dilution Analysis
+
+Accretion/dilution measures whether the acquisition is EPS-accretive (increases acquirer EPS) or EPS-dilutive (decreases acquirer EPS) in Year 1 (and over time).
+
+**Pro forma EPS post-acquisition:**
+
+New EPS = (Acquirer net income + Target net income + Synergies − Amortization of intangibles − After-tax financing cost) / Pro forma diluted shares
+
+**Key drivers:**
+
+| Driver | Accretive Effect | Dilutive Effect |
+|---|---|---|
+| Synergies | Higher combined earnings | — |
+| Intangible amortization | — | Increases D&A, reduces earnings |
+| Deal financing (cash vs. stock) | Cash: no share dilution | Stock: EPS dilution if target P/E > acquirer P/E |
+| Interest cost on acquisition debt | — | Reduces pre-tax earnings |
+| Tax synergies (NOL utilization) | Reduces effective tax rate | — |
+
+**Important:** EPS accretion in Year 1 does not prove value creation. A company can be EPS-accretive and NPV-negative if it overpays. The ROIC > WACC test (Part 4) is the correct value-creation check.
+
+### 3.5 Synergy Analysis
+
+| Synergy Type | Source | Realization Timeline |
+|---|---|---|
+| Revenue synergies | Cross-sell, geographic expansion, pricing power | 2–4 years; higher execution risk |
+| Cost synergies | Overhead reduction, procurement, facilities | 1–3 years; higher certainty |
+| Financial synergies | Tax benefits, debt capacity, lower cost of capital | Near-term; depends on structure |
+
+**Advisory note:** Synergy estimates are illustrative. Synergy realization is uncertain; actual results depend on integration execution, cultural fit, and competitive dynamics. Label all synergy estimates as illustrative.
+
+---
+
+## Part 4 — Capital Return Policy
+
+### 4.1 ROIC vs. WACC — The Value Creation Test
+
+**Return on Invested Capital:**
+
+ROIC = NOPAT / Invested Capital = EBIT × (1 − t_c) / (Equity + Net Debt)
+
+**Economic Value Added (EVA):**
+
+EVA = (ROIC − WACC) × Invested Capital
+
+| Condition | Implication for Capital Allocation |
+|---|---|
+| ROIC > WACC | Value is created by reinvesting; grow invested capital |
+| ROIC = WACC | Value-neutral; reinvestment neither creates nor destroys value |
+| ROIC < WACC | Value is destroyed by reinvestment; return capital to shareholders |
+
+### 4.2 Dividends
+
+**Characteristics:**
+- Creates a sticky expectation; dividend cuts signal financial distress
+- Taxed as ordinary income (in most jurisdictions) or qualified dividend rate (US)
+- Signals management confidence in earnings sustainability
+- Reduces financial flexibility
+
+**Dividend yield:** DPS / Share Price
+
+**Dividend payout ratio:** DPS / EPS
+
+**Modigliani-Miller dividend irrelevance:** In a world without taxes, transaction costs, or information asymmetry, dividend policy is irrelevant to firm value. In practice, tax treatment, signaling, and clientele effects make the choice relevant.
+
+### 4.3 Share Buybacks (Repurchases)
+
+**Characteristics:**
+- Flexible; management can vary timing and amount without signaling commitment
+- Typically tax-advantaged vs. dividends in most jurisdictions (capital gains vs. ordinary income)
+- Signals management belief that shares are undervalued
+- Returns capital to shareholders who choose to sell (others retain proportional ownership)
+
+**US Excise Tax on Buybacks (IRA 2022):** 1% excise tax on corporate stock repurchases effective January 1, 2023 (IRC §4501). Proposed increase to 4% in FY2025 budget; status subject to legislative change — verify current law.
+
+**EPS effect of buyback:**
+
+Post-buyback EPS = Net Income / (Shares Outstanding − Shares Repurchased)
+
+### 4.4 Dividends vs. Buybacks: Decision Framework
+
+| Factor | Favors Dividends | Favors Buybacks |
+|---|---|---|
+| Cash flow predictability | High recurring free cash flow | Variable or cyclical free cash flow |
+| Shareholder tax profile | Low-tax / tax-exempt holders (pension funds) | High-tax holders (individuals prefer capital gain deferral) |
+| Management outlook | Confident in sustaining the payout | Uncertain about future earnings; wants flexibility |
+| Valuation signal | Stable or growing business | Shares perceived as undervalued |
+| Leverage headroom | Levered; preserve financial flexibility | Unlevered; share count reduction improves EPS optically |
+
+### 4.5 Reinvestment vs. Return of Capital
+
+When ROIC > WACC: reinvest in organic growth or M&A.
+When ROIC < WACC: return capital to shareholders (dividends or buybacks) rather than pursuing value-destructive projects.
+
+**Hierarchy of capital allocation:**
+1. Maintain core operations and capex necessary for competitive position
+2. Fund organic growth investments with ROIC > WACC
+3. Fund M&A with rigorous valuation and post-merger integration plan
+4. Return excess capital: buybacks if shares undervalued, special dividends, or regular dividend increase
+
+---
+
+## Part 5 — Sensitivity and Scenario Analysis
+
+### 5.1 Sensitivity Analysis (One-Way / Two-Way)
+
+Test how NPV or IRR changes when one input varies (all others held constant).
+
+**Typical one-way sensitivities for NPV:**
+
+| Variable | Typical Range Tested |
+|---|---|
+| Discount rate (WACC) | ±100–200 bps |
+| Terminal growth rate | ±50–100 bps |
+| EBITDA margin | ±100–200 bps |
+| Revenue growth rate | ±2–5 percentage points |
+| Capital expenditure | ±10–20% of base case |
+| Tax rate | ±5 percentage points |
+
+**Tornado chart:** Rank inputs by magnitude of NPV impact (widest bar = highest sensitivity); identifies the key value driver.
+
+**Two-way sensitivity table:** Matrix of NPV outcomes across two variables (e.g., WACC × terminal growth rate).
+
+### 5.2 Scenario Analysis
+
+Assign full sets of assumptions to discrete scenarios:
+
+| Scenario | Description | Typical Purpose |
+|---|---|---|
+| Base case | Most likely operating outcome | Primary valuation anchor |
+| Bull case | Optimistic growth, margins, synergies | Upside; defines acquisition premium ceiling |
+| Bear case | Conservative growth; recession; integration failure | Downside; stress test; tests floor value |
+| Downside / Stress | Severe recession or specific risk event | Impairment testing; lender / rating agency use |
+
+**Probability-weighted NPV:** E[NPV] = p_bull × NPV_bull + p_base × NPV_base + p_bear × NPV_bear
+
+### 5.3 Monte Carlo Simulation
+
+Assign probability distributions to key inputs → simulate thousands of outcomes → derive NPV distribution, mean, standard deviation, and probability of negative NPV.
+
+**Useful when:** Many correlated inputs; need to quantify full distribution of outcomes rather than just a few scenarios.
+
+**Caution:** Output quality depends entirely on input distributions assumed; garbage-in-garbage-out risk is high. Document and disclose all distributional assumptions.
+
+### 5.4 Real Options
+
+Some investments embed optionality — the right but not the obligation to expand, abandon, defer, or switch operations. Standard DCF undervalues investments with significant embedded optionality.
+
+| Option Type | Example | Valuation Method |
+|---|---|---|
+| Option to expand | Phase 2 capacity addition if Phase 1 succeeds | Black-Scholes or binomial tree |
+| Option to abandon | Sell asset if market deteriorates | Put option analogy |
+| Option to defer | Delay project start to resolve uncertainty | Call option on project |
+| Option to switch | Switch production between products | Portfolio of options |
+
+**Advisory note:** Real option valuation requires explicit modeling of uncertainty (volatility of project value) and is inherently subjective. Use as a qualitative sanity check for highly uncertain projects rather than as a hard valuation output.
+
+---
+
+## Part 6 — Jurisdictional and Tax Overlays
+
+### 6.1 Corporate Tax Rates (Current — Verify Before Use)
+
+| Jurisdiction | Corporate Tax Rate | Notes |
+|---|---|---|
+| **United States** | 21% (federal) | State taxes add 0–12%; effective combined rate ~25–27% for most corporations. TCJA 2017. |
+| **Eurozone (Germany)** | ~30% | ~15% corporate income tax + ~15% trade tax (Gewerbesteuer) + solidarity surcharge (5.5% of corporate tax) |
+| **Eurozone (France)** | 25% | Standard rate since 2022 (down from 33.3% in prior years) |
+| **United Kingdom** | 25% | Increased from 19% effective April 1, 2023; small profits rate 19% for profits < £50,000 |
+| **Japan** | ~30–34% effective | National corporate tax ~23.2% + local enterprise tax + local corporate tax |
+| **China** | 25% | Standard rate; high-tech enterprise preferential rate 15% |
+| **India** | 22% (domestic; existing companies, base) + surcharge + cess = ~25.17% effective | New manufacturing companies: 15% + surcharge + cess. Minimum alternate tax (MAT) 15% applies to book income |
+| **Australia** | 30% | Small business: 25% (aggregated turnover < AUD 50M) |
+
+**Source:** OECD Tax Policy Analysis — [oecd.org/tax/tax-policy/](https://www.oecd.org/tax/tax-policy/) (public)
+
+### 6.2 Withholding Tax on Dividends and Buybacks
+
+| Country | Dividend WHT (domestic) | Treaty-Reduced (example) | Notes on Buybacks |
+|---|---|---|---|
+| **United States** | 30% (non-resident; non-treaty) | 5–15% (most tax treaties for ≥ 10% corporate shareholder) | Share buybacks: 1% excise tax on corporation; capital gain to seller at treaty capital gains rate |
+| **Germany** | 25% + solidarity surcharge = 26.375% | 5% (EU P-S Directive for EU parent; 5–15% for non-EU treaty) | Buybacks treated as capital gain to shareholder |
+| **United Kingdom** | 0% (no dividend WHT under UK domestic law) | N/A | Buybacks: capital gain to seller |
+| **Japan** | 20.42% | 5% (US-Japan treaty; ≥ 10% direct shareholding) | Buybacks: treated as dividend to the extent of retained earnings in some cases |
+| **China** | 10% | 5% (where treaty specifies ≥ 25% direct shareholding, e.g., China-HK tax arrangement) | Buybacks treated as deemed dividend for WHT purposes |
+| **India** | Distribution tax abolished (Finance Act 2020); taxed in shareholder's hands at applicable rate | Treaty rates apply to non-resident shareholders | Buybacks subject to buyback tax (Section 115QA: 20% on distributed income) |
+| **Australia** | 30% (unfranked); 0% (fully franked — imputation credit offsets) | 5–15% per treaty | Buybacks: complex franking / capital gain treatment |
+
+### 6.3 Thin Capitalization Rules
+
+| Jurisdiction | Rule | Limit |
+|---|---|---|
+| **United States** | IRC §163(j) (TCJA 2017) — Business Interest Expense Limitation | Interest deduction limited to 30% of Adjusted Taxable Income (ATI); unused capacity carries forward |
+| **Germany** | Zinsschranke (Interest Barrier) | Interest deduction limited to 30% of EBITDA (tax-adjusted); de minimis €3M; escape if standalone or equity ratio test met |
+| **United Kingdom** | Corporate Interest Restriction (Finance Act 2017) | Interest deduction limited to 30% of UK EBITDA; group ratio rule available; de minimis £2M |
+| **Japan** | Earnings stripping rules | 20% of EBITDA for related-party net interest expenses exceeding JPY 20M |
+| **China** | Related-party debt-to-equity ratio: 5:1 (financial institutions); 2:1 (others) | Interest on excess related-party debt non-deductible |
+| **India** | GAAR (Finance Act 2013) and arm's-length interest rate cap | Transfer pricing rules apply to IC interest; thin-cap rules primarily via TP |
+| **Australia** | Div. 820 ITAA 1997 | Arm's-length debt test or safe-harbor (varies by entity type) |
+
+**OECD BEPS Action 4:** Recommends 10–30% EBITDA interest limitation rule as best practice. Most G20 countries have implemented variations of this approach.
+
+**Official source:** [oecd.org/tax/beps/beps-actions/action4/](https://www.oecd.org/tax/beps/beps-actions/action4/) (public)
+
+### 6.4 Glossary of After-Tax Return Concepts
+
+| Term | Definition |
+|---|---|
+| **Pre-tax IRR** | IRR computed on pre-tax cash flows; does not reflect actual after-tax economics |
+| **After-tax IRR** | IRR on after-tax cash flows (net of corporate tax, WHT, and financing costs); the correct metric for capital allocation decisions |
+| **After-tax WACC** | WACC using after-tax cost of debt: r_d × (1 − t_c); standard approach |
+| **Effective tax rate (ETR)** | Income tax expense / Pre-tax accounting income; may differ materially from statutory rate due to deferred taxes, credits, COGS, and jurisdictional mix |
+| **Marginal tax rate** | The tax rate applicable to the next dollar of income in the relevant jurisdiction; use for WACC and capital budgeting (not ETR) |
+
+---
+
+## Part 7 — Official Documentation URLs
+
+| Standard / Resource | URL | Access |
+|---|---|---|
+| **SEC EDGAR — M&A filings (S-4, DEFM14A)** | [sec.gov/cgi-bin/browse-edgar](https://www.sec.gov/cgi-bin/browse-edgar?action=getcurrent) | Fully public |
+| **Investor.gov — NPV primer** | [investor.gov/introduction-investing/investing-basics/glossary/net-present-value](https://www.investor.gov/introduction-investing/investing-basics/glossary/net-present-value) | Fully public |
+| **Damodaran — WACC data** | [pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/wacc.html](https://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/wacc.html) | Fully public |
+| **Damodaran — Betas by sector** | [pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/betas.html](https://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/betas.html) | Fully public |
+| **Damodaran — Country Risk Premium** | [pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/ctryprem.html](https://pages.stern.nyu.edu/~adamodar/New_Home_Page/datafile/ctryprem.html) | Fully public |
+| **IAS 36 — Impairment of Assets** | [ifrs.org/issued-standards/list-of-standards/ias-36-impairment-of-assets/](https://www.ifrs.org/issued-standards/list-of-standards/ias-36-impairment-of-assets/) | Free with registration |
+| **ASC 350 — Intangibles and Goodwill (impairment)** | [asc.fasb.org/350](https://asc.fasb.org/350) | Free with registration |
+| **OECD Tax Policy Analysis** | [oecd.org/tax/tax-policy/](https://www.oecd.org/tax/tax-policy/) | Fully public |
+| **OECD BEPS Action 4 (Interest Limitations)** | [oecd.org/tax/beps/beps-actions/action4/](https://www.oecd.org/tax/beps/beps-actions/action4/) | Fully public |
+| **US IRC §163(j) — Interest Limitation** | [irs.gov/businesses/corporations/interest-expense-limitation-under-section-163j](https://www.irs.gov/businesses/corporations/interest-expense-limitation-under-section-163j) | Fully public |
+
+---
+
+## Mandatory Advisory Note
+
+This analysis is advisory and based solely on the facts described. It does not constitute investment advice, a fairness opinion, a formal valuation conclusion, or a securities recommendation of any kind. Tax rates, regulatory requirements, market benchmarks, and corporate tax rules change frequently and vary by entity type, jurisdiction, and individual circumstances. Verify current requirements with qualified financial advisors, tax counsel, and legal advisors before making any capital allocation or investment decision. This skill does not form a financial-adviser or investment-adviser relationship.