@raishin/vanguard-frontier-agentic 2.8.0 → 2.10.0

package/skills/cross-functional/netsuite-routing-protocol/SKILL.md

@@ -0,0 +1,150 @@
+---
+name: netsuite-routing-protocol
+description: Use this skill when a NetSuite matter must be classified and routed to the right specialist agent, when a matter crosses multiple NetSuite domains and needs parallel review, when a live-account mutation intent must be gated, or when specialist agents disagree and the conflict must be resolved. It defines routing rules per matter type, the cross-domain overlap matrix covering finance × developer × identity × integration × analytics × OneWorld × AI-connector × compliance, and the conflict-resolution protocol. Does not give NetSuite or business advice; routing is a recommendation only and never makes a binding routing decision on behalf of a human owner.
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-06-09"
+  category: platform
+  lifecycle: experimental
+---
+
+# NetSuite Routing Protocol
+
+## Purpose
+This skill defines how a NetSuite matter is classified, routed to the right
+specialist agent, and coordinated when it crosses multiple NetSuite domains. It
+exists so agents never work in silos when risk crosses a domain boundary, and so
+every handoff is controlled and auditable rather than free-form. It does not give
+NetSuite or business advice; routing is a recommendation that a human owner
+confirms.
+
+## When to use
+- The `netsuite-maestro-agent` must classify an incoming NetSuite matter and dispatch it.
+- A specialist agent finds a matter has crossed into another NetSuite domain.
+- A matter triggers an escalation gate and must be paused.
+- Specialist agents reach conflicting recommendations.
+- A matter is ambiguous and cannot be confidently assigned to a single domain.
+
+## When not to use
+- The matter is already classified and a specialist agent is actively working it.
+- The matter is outside NetSuite scope entirely.
+- You need direct live-account mutation handling — that is owned by
+  `netsuite-live-org-mutation-guard-agent`, not this routing skill.
+
+## Communication principles
+- One accountable human owner per matter. One primary agent per matter.
+- Parallel review only when the matter genuinely crosses domains.
+- No agent makes a final configuration, deployment, posting, period-close,
+  or compliance decision.
+- Every high-risk cross-domain matter produces a **pause and escalate**
+  recommendation unless sufficient documented controls already exist.
+- Every agent defaults to least-privilege access (never the Administrator role)
+  and minimum-necessary, sanitized data.
+
+## Routing rules
+
+### Governance / evidence / release drift
+Evidence labelling, release-sensitive claims, biannual NetSuite release drift →
+**netsuite-evidence-release-drift-agent**.
+
+### Enterprise architecture
+Multi-account/OneWorld topology, solution design, platform strategy →
+**netsuite-enterprise-architecture-agent**.
+
+### Audit / SOX / financial controls
+Segregation of duties, posting, period close, revenue recognition, approval
+workflows, audit trail → **netsuite-audit-controls-sox-agent**.
+
+### Foundation / administration / consulting
+SuiteFoundation setup, administration, ERP consulting and configuration →
+**netsuite-suitefoundation-agent**, **netsuite-administrator-agent**, or
+**netsuite-erp-consultant-agent**.
+
+### Finance
+Financial setup, AP/AR, accounting configuration →
+**netsuite-financial-foundations-agent** (escalate close-impacting items to
+audit-controls-sox).
+
+### BI / reporting / saved searches
+Reports, dashboards, KPIs, data-source semantics →
+**netsuite-bi-reporting-agent**; saved search and SuiteAnalytics Workbook
+mechanics, PII-in-export → **netsuite-saved-searches-workbook-agent**.
+
+### Development
+SuiteScript records and UIF/SPA → **netsuite-application-developer-agent**;
+SDF and SuiteScript upgrade → **netsuite-suitecloud-developer-agent**; static
+SuiteScript security review → **netsuite-suitescript-secure-code-review-agent**;
+SuiteFlow workflow review → **netsuite-suiteflow-automation-agent**.
+
+### Identity / access / auth
+Roles, permissions, segregation of duties → **netsuite-identity-access-role-permission-agent**;
+OAuth 2.0 / TBA / SSO / SAML authentication → **netsuite-sso-oauth-tba-agent**.
+
+### Integration
+SuiteTalk REST/SOAP record APIs → **netsuite-web-services-integration-agent**;
+end-to-end integration architecture and SOAP→REST migration →
+**netsuite-integration-migration-agent**.
+
+### OneWorld / multi-subsidiary
+Subsidiary, currency, tax jurisdiction, legal entity, intercompany boundaries →
+**netsuite-oneworld-multisubsidiary-agent**.
+
+### Data governance / privacy
+PII exposure, retention, field-level access, export controls →
+**netsuite-data-governance-privacy-agent**.
+
+### AI Connector / MCP
+AI Connector and MCP governance, tool allowlists, prompt-injection testing →
+**netsuite-ai-connector-mcp-agent**.
+
+### Sandbox / non-production governance
+Sandbox vs release-preview vs production separation, sandbox OAuth
+re-authorization → **netsuite-sandbox-nonproduction-governance-agent**.
+
+### SDF / DevOps / release
+SuiteCloud Development Framework project structure, deployment controls,
+environment promotion → **netsuite-sdf-devops-release-agent**.
+
+## Cross-domain overlap matrix
+
+| Overlap scenario | Primary agent | Secondary agents | Escalation gate |
+|---|---|---|---|
+| Saved search exposes cross-subsidiary data | netsuite-saved-searches-workbook-agent | netsuite-oneworld-multisubsidiary-agent, netsuite-data-governance-privacy-agent | cross-subsidiary-data |
+| SuiteScript change + auth/secret handling | netsuite-suitescript-secure-code-review-agent | netsuite-sso-oauth-tba-agent | production-data |
+| AI Connector tool scope + permissions | netsuite-ai-connector-mcp-agent | netsuite-identity-access-role-permission-agent | autonomous-AI-action |
+| Role change + segregation of duties | netsuite-identity-access-role-permission-agent | netsuite-audit-controls-sox-agent | segregation-of-duties |
+| SDF deploy + live mutation | netsuite-sdf-devops-release-agent | netsuite-live-org-mutation-guard-agent | irreversible-deploy |
+| SOAP integration + migration timeline | netsuite-integration-migration-agent | netsuite-web-services-integration-agent | soap-deprecation |
+| Reporting logic + period close impact | netsuite-bi-reporting-agent | netsuite-audit-controls-sox-agent | finance/revenue |
+
+## Conflict-resolution protocol
+When specialist agents disagree, follow this order and stop at the first unmet step:
+1. Freeze any irreversible action.
+2. Preserve evidence; preserve sandbox state if applicable.
+3. State the disagreement precisely — what each agent concluded and why.
+4. Separate technical risk from financial/operational risk; do not collapse them.
+5. Identify the accountable human owner.
+6. Escalate to a qualified NetSuite architect or control owner.
+7. Document unresolved assumptions and open questions.
+8. Produce options, not a single conclusion.
+9. Require human approval before any action.
+10. Log the decision path in the audit log.
+
+## Security notes
+- Routing is a recommendation, never an authorization. The protocol never
+  approves, denies, or directs a deployment, posting, or configuration action.
+- A matter is routed on sanitized signals. Never request account credentials,
+  tokens, the Administrator role, customer PII, or production account IDs to classify.
+- When classification is ambiguous, mark the matter `unclassified` rather than guessing.
+- This protocol does not authorize live-account mutations; those route to
+  `netsuite-live-org-mutation-guard-agent`.
+
+## Audit log fields
+- matter_id, agent_id, agent_version, invoked_by, input_hash, evidence_quality, output_verdict, escalation_fired, timestamp
+
+## Stop conditions
+- A live-mutation action is requested — stop and route to netsuite-live-org-mutation-guard-agent.
+- Classification requires production account credentials — stop and refuse.
+- Matter involves regulated personal data and jurisdiction is unknown — stop and escalate.

package/skills/cross-functional/netsuite-routing-protocol/metadata.json

@@ -0,0 +1,18 @@
+{
+  "id": "netsuite-routing-protocol",
+  "name": "NetSuite Routing Protocol",
+  "type": "skill",
+  "provider": "generic",
+  "harnesses": ["codex", "claude-code", "cursor", "gemini", "kiro", "other"],
+  "summary": "Classification and routing discipline for NetSuite matters — routing rules per matter type, the cross-domain overlap matrix (finance × developer × identity × integration × analytics × OneWorld × AI-connector × compliance), and the conflict-resolution protocol. Does not give NetSuite or business advice; routing is a recommendation only.",
+  "source_type": "original",
+  "official_docs": [
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/index.html"
+  ],
+  "security_notes": "Routing is a recommendation, never an authorization; never approves, denies, or directs deployment, posting, or configuration actions. Classifies matters from sanitized signals only and never requests account credentials, tokens, the Administrator role, or production account IDs.",
+  "last_verified": "2026-06-09",
+  "path": "skills/cross-functional/netsuite-routing-protocol",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}

package/skills/netsuite/README.md

@@ -0,0 +1,138 @@
+# Oracle NetSuite Skills
+
+Companion skill library for the 25 NetSuite agents. Each skill provides procedures, decision logic, safety checklists, and least-privilege guidance.
+
+## Portfolio Overview
+
+**25 skills** (1:1 with agents):
+- Layer 1 Governance & Routing (5)
+- Layer 2 Domain Specialists (20)
+
+Each skill includes:
+- `SKILL.md` – Description, when-to-use, workflow, safety rules, decision logic
+- `metadata.json` – Catalog metadata (id, name, provider, harnesses, allowed-tools, etc.)
+- `references/` – Official sources, safety checklists, least-privilege notes, release drift, topic-specific guides
+
+## Key Features
+
+### Evidence Hierarchy
+Skills declare evidence quality per step:
+1. LIVE_EVIDENCE (NetSuite live API, current state)
+2. REPOSITORY_EVIDENCE (project git, version control)
+3. USER_PROVIDED (context from engineer)
+4. OFFICIAL_DOCUMENTATION (NetSuite/Oracle docs + date)
+5. INFERENCE (agent reasoning)
+6. UNVERIFIED (claims without source)
+7. BLOCKED (denied—credentials, live mutations, fabrications)
+
+### Least Privilege by Default
+Each skill's `references/least-privilege.md` provides:
+- Standard role baseline
+- Permission removal checklist
+- Module requirements
+- 2FA mandate for privileged roles
+- Forbidden permission combinations
+
+### Release Sensitivity
+Skills track NetSuite's biannual release timeline:
+- 2026.1 – OAuth2 default, SOAP deprecation
+- 2027.1 – New SOAP integrations disabled
+- 2028.2 – SOAP sunset (estimated)
+
+Claims impacting future releases are labeled explicitly.
+
+### Safety Checklists
+Each `references/safety-checklist.md` covers:
+- Refusal triggers (credentials, live mutations, admin role)
+- Escalation gates (cross-domain, segregation of duties, etc.)
+- Evidence quality gates
+- Compliance and audit trails
+
+## Companion to Agents
+
+Each skill is paired with its agent:
+- Agent performs judgment and review
+- Skill provides step-by-step procedure and safety rules
+- Together they form a complete advisory capability
+
+Example: `netsuite-sso-oauth-tba-agent` + `netsuite-sso-oauth-tba-skill`
+- Agent: "This design uses TBA. Is that optimal given your integrations?"
+- Skill: "TBA use cases, OAuth2 preference, token management, 2FA requirements, release timeline…"
+
+## Routing & Cross-Domain
+
+The cross-functional `netsuite-routing-protocol` skill coordinates:
+- Multi-domain escalations (saved-search + oneworld + data-governance, etc.)
+- Conflict resolution when agents disagree
+- Escalation gates (segregation-of-duties, irreversible-deploy, finance/revenue, etc.)
+
+Skills reference this protocol when matters cross boundaries.
+
+## Official Sources
+
+All skills cite official NetSuite/Oracle sources with verification dates:
+- NetSuite Certification Resource Center
+- Oracle NetSuite Help Portal
+- SuiteTalk API documentation
+- SuiteCloud SDK github
+- Release notes and breaking-change bulletins
+
+No fabrication. All facts trace back to official docs.
+
+## Files
+
+- `netsuite/<agent-id>-skill/` – Individual skill directories
+  - `SKILL.md` – Main skill spec (allowed-tools in frontmatter)
+  - `metadata.json` – Catalog metadata
+  - `references/official-sources.md` – Citation list with URLs and dates
+  - `references/safety-checklist.md` – Refusal triggers, escalation gates, evidence quality
+  - `references/least-privilege.md` – Role, permission, 2FA, module guidance
+  - `references/release-drift.md` – NetSuite release timeline and impacts
+  - `references/<topic>.md` – Topic-specific guides (e.g., sandbox-oauth-isolation.md)
+
+## No Live Mutations
+
+Skills are advisory and procedural ONLY. They do NOT:
+- Deploy to production
+- Modify permissions or roles in live accounts
+- Execute workflows
+- Edit data
+- Activate features
+
+Live actions require `netsuite-live-org-mutation-guard-agent` + separate human authorization.
+
+## Least-Privilege Baseline
+
+Skills enforce:
+- Never Administrator unless scoping requires it (then document removal plan)
+- 2FA on all privileged custom roles
+- OAuth2 for REST/RESTlets/SuiteAnalytics; TBA only as fallback
+- No user credentials; service accounts with OAuth2 tokens
+- Minimum-necessary modules and permissions per role
+
+## Escalation & Conflict Resolution
+
+When matters cross domains or agents disagree:
+1. netsuite-routing-protocol applies conflict-resolution protocol
+2. Escalation gate fires (e.g., segregation-of-duties, irreversible-deploy)
+3. Matter pauses and escalates to human owner
+4. Decision logged in audit trail
+
+Skills document escalation triggers and gates explicitly.
+
+## Tools & Boundaries
+
+Each skill declares `allowed-tools` in SKILL.md frontmatter:
+- Read – read project files, official docs
+- Grep – search code and specs
+- Glob – find files by pattern
+- **NOT** allowed by default: Bash, GitHub mutation, live NetSuite API calls
+
+This enforces the advisory boundary: judgment without destructive capability.
+
+---
+
+**Version:** 0.1.0  
+**Provider:** netsuite  
+**Source:** github: Raishin  
+**Last updated:** 2026-06-09

package/skills/netsuite/netsuite-administrator-skill/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: netsuite-administrator-skill
+description: "Flashlight skill for reviewing NetSuite account administration configurations aligned to the Administrator Professional certification (N16291GC10). T0 static review — no live account connection required, never Administrator role. TRIGGER when: user asks to review accounting preferences, tax nexus setup, currency management, user provisioning policy, email template defaults, sandbox refresh procedures, release preview planning, or account-level system preferences in NetSuite. Trigger phrases: review account setup, audit user provisioning, check accounting preferences, validate tax configuration, sandbox refresh checklist, release preview prep, administrator review. DO NOT TRIGGER when: request concerns OAuth 2.0 or TBA authentication flows (use netsuite-sso-oauth-tba-agent), role permission and SoD matrix design (use netsuite-identity-access-role-permission-agent), financial close controls or posting periods (use netsuite-financial-foundations-agent), SuiteScript code review (use netsuite-application-developer-agent), or any live mutation in a production account is requested."
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-06-09"
+  category: platform
+  lifecycle: experimental
+  execution_tier: static-review
+  mcp_servers: []
+  oauth_scopes: []
+  run_as_permissions:
+    required: []
+    denied: []
+---
+
+# NetSuite Administrator Skill
+
+## Purpose
+
+Validates enterprise-grade NetSuite account administration decisions and settings that require Administrator Professional-level depth (N16291GC10) but are executed through least-privilege custom roles, never via the Administrator role itself. Surfaces misconfigurations in account preferences, tax engine setup, user access controls, and sandbox lifecycle governance that carry outsized compliance and operational risk in Fortune-50 deployments. T0 static review — no NetSuite account connection required; output is a draft for human review.
+
+## When This Skill Owns the Task
+
+- Enterprise implementation team needs account-level administration configurations reviewed before go-live
+- CoE or IT governance team submits accounting preferences, tax setup, or user provisioning policies for audit
+- Fortune-50 administrator needs sandbox refresh governance documentation reviewed for OAuth 2.0 re-authorization compliance
+- Release preview impact assessment is needed for an upcoming NetSuite version upgrade
+
+## Recommended Workflow
+
+1. Step 1 — Collect sanitized inputs: accounting preferences export, tax nexus summary, currency settings, user provisioning template, and sandbox refresh runbook
+2. Step 2 — Review accounting preferences: fiscal year alignment, period management defaults, accounting impact settings, and GL preferences
+3. Step 3 — Audit tax and currency: validate nexus completeness, tax engine selection rationality, base currency correctness, and exchange rate source configuration
+4. Step 4 — Evaluate user provisioning: role assignment patterns, 2FA designation for sensitive roles, separation of concerns in provisioning workflow
+5. Step 5 — Assess sandbox and release posture: verify OAuth 2.0 re-authorization procedures exist for post-refresh environments; identify SOAP integration deprecation risks against 2026.1–2028.2 timeline
+6. Step 6 — Emit findings report: rated Critical / High / Medium / Low with [FACT] / [INFERENCE] / [ASSUMPTION] labels, explicit Administrator-role prohibition reminders, and safe-next-actions for each finding
+
+## Evidence Hierarchy
+
+LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED
+
+## Safety Checklist
+
+- No live NetSuite connection — all inputs are sanitized configuration excerpts only
+- No credentials, tokens, passwords, or consumer keys in submitted inputs
+- Administrator role never recommended under any circumstances
+- 2FA designation verified for all roles holding sensitive administrative permissions
+- Sandbox refresh runbook includes OAuth 2.0 re-authorization checklist (evidence-matrix rows 8a, 8b)
+- SOAP deprecation risk surfaced if any integration is identified as SOAP-based
+
+## Rules — Hard-Stop Constraints
+
+- Static review only; never connect to a live NetSuite account or invoke APIs/SuiteScript/SDF.
+- Never request or accept credentials, tokens, or secrets.
+- Never depend on the Administrator role; recommend least-privilege custom roles (note 2FA).
+- Prefer OAuth 2.0 (REST/RESTlets/SuiteAnalytics Connect) over SOAP; treat SOAP as a migration risk.
+- Never claim a Coming-Soon certification is available.
+
+## Refusal Triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, passwords, or any authentication material — stop and require sanitization before resubmitting
+- Request involves executing, deploying, or activating any configuration change in a live or production account
+- Request to use or recommend the Administrator role for any purpose — an absolute refusal; cite evidence-matrix rows 7a and 7b
+- Request to connect, authenticate, or log in to any NetSuite environment
+- Claim that AI Specialist or AI Professional certifications are available — those are COMING SOON; only AI Foundations Associate (N16765GC10) is currently available
+- Request to approve production-environment changes without documented sandbox validation evidence
+
+## T0 Contract
+
+No account connection, no OAuth, no secrets. Output is draft review text for a human owner.
+
+## Security Notes
+
+Static review only — works exclusively from sanitized configuration exports; never requests or accepts credentials, tokens, session IDs, consumer keys, or any authentication material. Does not connect to, query, or mutate any NetSuite account. The Administrator role is absolutely prohibited — custom roles are always derived from standard roles with View-only permissions. OAuth 2.0 sandbox isolation requirements (re-authorization after each refresh) are surfaced in every sandbox governance review. SOAP deprecation risks (2026.1 / 2027.1 / 2028.2 milestones) are flagged for any integration posture identified during review.
+
+## Reference File Index
+
+- [official-sources.md](references/official-sources.md) — Oracle NetSuite Administrator Professional certification and help URLs from evidence-matrix
+- [safety-checklist.md](references/safety-checklist.md) — Pre-submission sanitization and least-privilege custom role construction checklist
+- [least-privilege.md](references/least-privilege.md) — Custom role derivation pattern for administrative reviewer — never Administrator role
+- [release-drift.md](references/release-drift.md) — SOAP removal timeline (2026.1 / 2027.1 / 2028.2) and OAuth 2.0 default migration impact
+- [sandbox-oauth-isolation.md](references/sandbox-oauth-isolation.md) — OAuth 2.0 and TBA token isolation rules for sandbox and Release Preview environments

package/skills/netsuite/netsuite-administrator-skill/metadata.json

@@ -0,0 +1,36 @@
+{
+  "id": "netsuite-administrator-skill",
+  "name": "NetSuite Administrator Skill",
+  "type": "skill",
+  "provider": "netsuite",
+  "harnesses": [
+    "claude-code",
+    "codex",
+    "cursor",
+    "gemini",
+    "kiro",
+    "other"
+  ],
+  "summary": "Flashlight skill for reviewing NetSuite account administration configurations aligned to the Administrator Professional certification (N16291GC10). T0 static review — no live account connection required, never Administrator role. TRIGGER when: user asks to review accounting preferences, tax nexus se",
+  "source_type": "original",
+  "category": "platform",
+  "execution_tier": "static-review",
+  "oauth_scopes": [],
+  "mcp_servers": [],
+  "run_as_permissions": {},
+  "sandbox_only": false,
+  "production_allowed": true,
+  "official_docs": [
+    "https://education.oracle.com/oracle-netsuite-administrator-professional/pexam_N16291GC10",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157771979135.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html"
+  ],
+  "security_notes": "Static review only — works exclusively from sanitized configuration exports; never requests or accepts credentials, tokens, session IDs, consumer keys, or any authentication material. Does not connect to, query, or mutate any NetSuite account. The Administrator role is absolutely prohibited — custom roles are always derived from standard roles with View-only permissions. OAuth 2.0 sandbox isolation requirements (re-authorization after each refresh) are surfaced in every sandbox governance review. SOAP deprecation risks (2026.1 / 2027.1 / 2028.2 milestones) are flagged for any integration posture identified during review.",
+  "last_verified": "2026-06-09",
+  "path": "skills/netsuite/netsuite-administrator-skill",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}

package/skills/netsuite/netsuite-administrator-skill/references/least-privilege.md

@@ -0,0 +1,66 @@
+# Least-privilege NetSuite posture for NetSuite Administrator Agent
+
+## Execution tier
+
+**T0 — Static Review**
+
+Rationale: `execution_tier: "static-review"` declared in `metadata.json`. This agent reviews sanitized configuration excerpts and never holds a live NetSuite session.
+
+## Identity model
+
+No live NetSuite identity is required for the agent itself. When a human operator acts on this agent's review, they SHOULD use the least-privilege custom role below — never the Administrator role.
+
+## Recommended custom role
+
+- **Custom role name:** NetSuite Administrator Reviewer (custom)
+- **Copy from standard role:** Full Access (read-only copy, stripped of all Edit/Create/Full levels) (NetSuite guidance: start from a copy of a standard role, then remove unneeded permissions).
+- **Modules in scope:** Core Administration, Company Preferences, Currency Management, User Management, Email Management
+- **Two-Factor Authentication required:** Yes
+
+### Minimal permissions
+
+- **Company Information** (View) — Inspect legal entity, tax registration, and nexus settings
+- **Accounting Preferences** (View) — Review fiscal year, period, and accounting impact defaults
+- **Currency** (View) — Review base currency, multi-currency, and exchange rate source settings
+- **Manage Users** (View) — Review user provisioning patterns and role assignment without editing user records
+- **Setup** (View) — Review page layout, tab customization, and system preferences
+- **Email Preferences** (View) — Inspect email template defaults and bounce handling settings
+- **Sandbox Management** (View) — Review sandbox environment list and refresh history (no initiation rights)
+
+## Forbidden
+
+- Administrator role — absolute prohibition regardless of context
+- Edit or Full level on any Setup or Users/Roles page
+- Access Token Management permission
+- OAuth 2.0 Authorized Applications Management permission
+- Core Administration Permissions bundle
+
+## Blast-radius bound
+
+Even if fully compromised, this agent cannot mutate a NetSuite account: it has no live session, no API tokens, and no SDF deploy rights. It can only produce review text.
+
+## Refusal triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, passwords, or any authentication material — stop and require sanitization before resubmitting
+- Request involves executing, deploying, or activating any configuration change in a live or production account
+- Request to use or recommend the Administrator role for any purpose — an absolute refusal; cite evidence-matrix rows 7a and 7b
+- Request to connect, authenticate, or log in to any NetSuite environment
+- Claim that AI Specialist or AI Professional certifications are available — those are COMING SOON; only AI Foundations Associate (N16765GC10) is currently available
+- Request to approve production-environment changes without documented sandbox validation evidence
+
+## Escalation path
+
+Route all live-account changes to `netsuite-live-org-mutation-guard-agent` with a named human decision owner and a structured case capsule.
+
+## Role creation steps
+
+1. In the target SANDBOX, copy the standard role named above to a new custom role.
+2. Remove every permission not listed under Minimal permissions.
+3. Add only the listed permissions at the stated access level.
+4. Confirm the role is NOT Administrator and grants no global/cross-subsidiary access beyond remit.
+5. Enable 2FA enforcement if the role touches privileged permissions.
+6. Test in sandbox, then assign to the integration/review user; monitor for least-privilege drift.
+
+## Companion skill
+
+`netsuite-administrator-skill` — NetSuite Administrator Skill

package/skills/netsuite/netsuite-administrator-skill/references/official-sources.md

@@ -0,0 +1,12 @@
+# Official Sources
+
+Oracle NetSuite Administrator Professional certification and help URLs from evidence-matrix
+
+Verified 2026-06-09 against official Oracle/NetSuite documentation:
+
+- https://education.oracle.com/oracle-netsuite-administrator-professional/pexam_N16291GC10
+- https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157771979135.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html

package/skills/netsuite/netsuite-administrator-skill/references/release-drift.md

@@ -0,0 +1,11 @@
+# Release Drift
+
+SOAP removal timeline (2026.1 / 2027.1 / 2028.2) and OAuth 2.0 default migration impact
+
+NetSuite releases biannually. Content verified 2026-06-09.
+
+Release-sensitive items to re-verify each release:
+
+- SOAP web services removal timeline (REST + OAuth 2.0 recommended for new integrations from 2026.1; new SOAP integrations blocked at 2027.1).
+- Certification availability (AI Specialist/Professional and BI & Reporting Professional are Coming Soon — re-check status).
+- AI Connector / MCP permission names and role restrictions.

package/skills/netsuite/netsuite-administrator-skill/references/safety-checklist.md

@@ -0,0 +1,19 @@
+# Safety Checklist
+
+Pre-submission sanitization and least-privilege custom role construction checklist
+
+- No live NetSuite connection — all inputs are sanitized configuration excerpts only
+- No credentials, tokens, passwords, or consumer keys in submitted inputs
+- Administrator role never recommended under any circumstances
+- 2FA designation verified for all roles holding sensitive administrative permissions
+- Sandbox refresh runbook includes OAuth 2.0 re-authorization checklist (evidence-matrix rows 8a, 8b)
+- SOAP deprecation risk surfaced if any integration is identified as SOAP-based
+
+## Refusal triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, passwords, or any authentication material — stop and require sanitization before resubmitting
+- Request involves executing, deploying, or activating any configuration change in a live or production account
+- Request to use or recommend the Administrator role for any purpose — an absolute refusal; cite evidence-matrix rows 7a and 7b
+- Request to connect, authenticate, or log in to any NetSuite environment
+- Claim that AI Specialist or AI Professional certifications are available — those are COMING SOON; only AI Foundations Associate (N16765GC10) is currently available
+- Request to approve production-environment changes without documented sandbox validation evidence

package/skills/netsuite/netsuite-administrator-skill/references/sandbox-oauth-isolation.md

@@ -0,0 +1,14 @@
+# Sandbox Oauth Isolation
+
+OAuth 2.0 and TBA token isolation rules for sandbox and Release Preview environments
+
+Scope: Validates enterprise-grade NetSuite account administration decisions and settings that require Administrator Professional-level depth (N16291GC10) but are executed through least-privilege custom roles, never via the Administrator role itself. Surfaces misconfigurations in account preferences, tax engine setup, user access controls, and sandbox lifecycle governance that carry outsized compliance and operational risk in Fortune-50 deployments.
+
+- Accounting preferences review — fiscal year setup, period management preferences, default accounting impact settings
+- Company information and tax configuration — legal entity registration, nexus setup, tax engine selection and preferences
+- Currency and exchange rate management — base currency, multi-currency preferences, exchange rate sources
+- User provisioning review — employee record defaults, role assignment patterns, global permission flag settings
+- Email and notification management — email preferences, bulk processing defaults, bounce handling configuration
+- Page and tab customization — center tab layout, portlet arrangement, company-level defaults
+- Sandbox refresh governance — pre-refresh checklist, OAuth 2.0 re-authorization requirements, TBA token lifecycle post-refresh
+- Release preview preparation — feature flag review, deprecation impact assessment, sandbox validation planning