@raishin/vanguard-frontier-agentic 2.9.0 → 2.10.0

package/catalog/install-roles.json

@@ -2,152 +2,380 @@
   "version": "0.1.0",
   "description": "Role-based agent and skill selections for vfa-export-agents --role installs. Each role maps to the minimal, high-value agent and skill IDs a practitioner in that function needs across all supported cloud providers. Roles are intentionally overlapping \u2014 a single agent may serve multiple roles.",
   "roles": {
-    "cloud-security-engineer": {
-      "label": "Cloud Security Engineer",
-      "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
+    "accounting-finance-advisor": {
+      "label": "Accounting & Finance Advisor",
+      "description": "Multi-jurisdiction accounting and corporate finance advisory for enterprise finance teams \u2014 revenue recognition (ASC 606/IFRS 15), financial close cycle (month-end/quarter-end/year-end across 8 jurisdictions), treasury and liquidity management (ASC 815/IFRS 9 hedge accounting, ASC 830/IAS 21 FX translation, Basel III LCR/NSFR, Dodd-Frank/EMIR), and FP&A variance analysis with SEC Regulation S-K Item 303 MD&A guidance. Advisory only \u2014 never posts journal entries, executes financial transactions, or writes to any system of record.",
       "agents": [
-        "alibaba-actiontrail-audit-analyst-agent",
-        "alibaba-certificate-manager-issuer-review-agent",
-        "alibaba-china-compliance-agent",
-        "alibaba-kms-secret-lifecycle-steward-agent",
-        "alibaba-live-kms-key-mutation-guard-agent",
-        "alibaba-live-oss-bucket-policy-guard-agent",
-        "alibaba-live-ram-policy-change-guard-agent",
-        "alibaba-oss-data-perimeter-governor-agent",
-        "alibaba-ram-iam-review-agent",
-        "alibaba-security-center-hardening-agent",
-        "alibaba-waf-security-review-agent",
-        "aws-bedrock-agent-security-governor-agent",
-        "aws-compliance-evidence-mapper-agent",
-        "aws-iam-least-privilege-review-agent",
-        "aws-kms-secrets-lifecycle-steward-agent",
-        "aws-s3-data-perimeter-governor-agent",
-        "aws-security-posture-hardening-agent",
-        "aws-waf-security-review-agent",
-        "azure-entra-id-specialist-agent",
-        "azure-governance-policy-guardrails-agent",
-        "azure-identity-governance-review-agent",
-        "azure-key-vault-secret-lifecycle-auditor-agent",
-        "azure-live-entra-role-assignment-guard-agent",
-        "azure-live-keyvault-rotation-purge-guard-agent",
-        "azure-live-pim-jit-activation-guard-agent",
-        "azure-rbac-review-agent",
-        "azure-role-selector-agent",
-        "azure-security-posture-hardening-agent",
-        "azure-waf-security-review-agent",
-        "contabo-security-hardening-agent",
-        "gcp-certificate-manager-issuer-review-agent",
-        "gcp-cloud-auth-advisor-agent",
-        "gcp-compliance-assured-workloads-agent",
-        "gcp-gcs-data-perimeter-governor-agent",
-        "gcp-iam-least-privilege-review-agent",
-        "gcp-live-bigquery-dataset-deletion-guard-agent",
-        "gcp-live-iam-policy-change-guard-agent",
-        "gcp-live-kms-key-destruction-guard-agent",
-        "gcp-secret-kms-lifecycle-steward-agent",
-        "gcp-security-posture-hardening-agent",
-        "gcp-vpc-service-controls-architect-agent",
-        "gcp-waf-security-review-agent",
-        "huawei-certificate-manager-issuer-review-agent",
-        "huawei-compliance-sovereignty-agent",
-        "huawei-dew-kms-lifecycle-steward-agent",
-        "huawei-iam-least-privilege-review-agent",
-        "huawei-live-iam-policy-change-guard-agent",
-        "huawei-live-kms-key-destruction-guard-agent",
-        "huawei-live-obs-bucket-policy-guard-agent",
-        "huawei-obs-data-perimeter-governor-agent",
-        "huawei-secmaster-security-operations-agent",
-        "huawei-waf-security-review-agent",
-        "ionos-security-compliance-reviewer-agent",
-        "kubernetes-live-rbac-mutation-guard-agent",
-        "kubernetes-psa-review-agent",
-        "kubernetes-rbac-review-agent",
-        "kubernetes-workload-identity-review-agent",
-        "kyverno-policy-review-agent",
+        "accounting-business-combinations-advisor-agent",
+        "accounting-close-cycle-advisor-agent",
+        "accounting-consolidation-intercompany-advisor-agent",
+        "accounting-equity-compensation-advisor-agent",
+        "accounting-fixed-assets-advisor-agent",
+        "accounting-fx-translation-advisor-agent",
+        "accounting-hedge-accounting-advisor-agent",
+        "accounting-indirect-tax-einvoicing-advisor-agent",
+        "accounting-lease-accounting-advisor-agent",
+        "accounting-maestro-agent",
+        "accounting-payroll-advisor-agent",
+        "accounting-procure-to-pay-advisor-agent",
+        "accounting-revenue-recognition-advisor-agent",
+        "accounting-tax-provision-advisor-agent",
+        "finance-capital-allocation-advisor-agent",
+        "finance-debt-capital-structure-advisor-agent",
+        "finance-fpa-forecasting-advisor-agent",
+        "finance-maestro-agent",
+        "finance-transfer-pricing-pillar-two-advisor-agent",
+        "finance-treasury-liquidity-advisor-agent",
+        "finance-variance-analysis-advisor-agent",
+        "finance-working-capital-advisor-agent",
+        "netsuite-audit-controls-sox-agent",
+        "netsuite-bi-reporting-agent",
+        "netsuite-data-governance-privacy-agent",
+        "netsuite-financial-foundations-agent",
+        "netsuite-identity-access-role-permission-agent"
+      ],
+      "skills": [
+        "accounting-maestro",
+        "business-combinations-advisor",
+        "capital-allocation-advisor",
+        "close-cycle-advisor",
+        "consolidation-intercompany-advisor",
+        "debt-capital-structure-advisor",
+        "equity-compensation-advisor",
+        "finance-maestro",
+        "fixed-assets-advisor",
+        "fpa-forecasting-advisor",
+        "fx-translation-advisor",
+        "hedge-accounting-advisor",
+        "indirect-tax-einvoicing-advisor",
+        "lease-accounting-advisor",
+        "netsuite-audit-controls-sox-skill",
+        "netsuite-bi-reporting-skill",
+        "netsuite-data-governance-privacy-skill",
+        "netsuite-financial-foundations-skill",
+        "netsuite-identity-access-role-permission-skill",
+        "payroll-advisor",
+        "procure-to-pay-advisor",
+        "revenue-recognition-advisor",
+        "tax-provision-advisor",
+        "transfer-pricing-pillar-two-advisor",
+        "treasury-liquidity-advisor",
+        "variance-analysis-advisor",
+        "working-capital-advisor"
+      ]
+    },
+    "cloud-ai-platform-engineer": {
+      "label": "Cloud AI Platform Engineer",
+      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
+      "agents": [
+        "gcp-alloydb-ai-developer-agent",
+        "gcp-gemini-api-developer-agent",
+        "gcp-vertex-ai-mlops-engineer-agent",
+        "huawei-modelarts-mlops-engineer-agent",
+        "nvidia-agentic-ai-platform-review-agent",
+        "nvidia-ai-infrastructure-operations-agent",
+        "nvidia-ai-networking-fabric-review-agent",
+        "nvidia-ai-operations-day2-agent",
+        "nvidia-cuda-kernel-performance-review-agent",
+        "nvidia-generative-ai-platform-review-agent",
         "nvidia-gpu-operator-kubernetes-hardening-agent",
+        "nvidia-maestro-agent",
         "nvidia-model-promotion-gatekeeper-agent",
         "nvidia-ngc-nim-supply-chain-governor-agent",
-        "oci-cloud-guard-responder-agent",
-        "oci-identity-access-governor-agent",
-        "oci-live-iam-policy-compartment-guard-agent",
-        "oci-live-vault-key-destruction-guard-agent",
-        "oci-security-compliance-reviewer-agent",
-        "oci-waf-security-review-agent",
-        "ovhcloud-iam-policy-review-agent",
-        "ovhcloud-live-kms-key-destruction-guard-agent",
-        "scaleway-iam-policy-review-agent"
+        "nvidia-tensorrt-llm-deployment-review-agent",
+        "nvidia-triton-inference-serving-review-agent"
       ],
       "skills": [
-        "alibaba-actiontrail-audit-analyst",
-        "alibaba-certificate-manager-issuer-review",
-        "alibaba-china-compliance",
-        "alibaba-kms-secret-lifecycle-steward",
-        "alibaba-live-kms-key-mutation-guard",
-        "alibaba-live-oss-bucket-policy-guard",
-        "alibaba-live-ram-policy-change-guard",
-        "alibaba-oss-data-perimeter-governor",
-        "alibaba-ram-iam-review",
-        "alibaba-security-center-hardening",
-        "alibaba-waf-security-review",
-        "aws-bedrock-agent-security-governor",
-        "aws-compliance-evidence-mapper",
-        "aws-iam-least-privilege-review",
-        "aws-kms-secrets-lifecycle-steward",
-        "aws-s3-data-perimeter-governor",
-        "aws-security-posture-hardening",
-        "aws-waf-security-review",
-        "azure-entra-id-specialist",
-        "azure-governance-policy-guardrails",
-        "azure-identity-governance-review",
-        "azure-key-vault-secret-lifecycle-auditor",
-        "azure-live-entra-role-assignment-guard",
-        "azure-live-keyvault-rotation-purge-guard",
-        "azure-live-pim-jit-activation-guard",
-        "azure-rbac-review",
-        "azure-role-selector",
-        "azure-security-posture-hardening",
-        "azure-waf-security-review",
-        "contabo-security-hardening",
-        "gcp-certificate-manager-issuer-review",
-        "gcp-cloud-auth-advisor",
-        "gcp-compliance-assured-workloads",
-        "gcp-gcs-data-perimeter-governor",
-        "gcp-iam-least-privilege-review",
-        "gcp-live-bigquery-dataset-deletion-guard",
-        "gcp-live-iam-policy-change-guard",
-        "gcp-live-kms-key-destruction-guard",
-        "gcp-secret-kms-lifecycle-steward",
-        "gcp-security-posture-hardening",
-        "gcp-vpc-service-controls-architect",
-        "gcp-waf-security-review",
-        "huawei-certificate-manager-issuer-review",
-        "huawei-compliance-sovereignty",
-        "huawei-dew-kms-lifecycle-steward",
-        "huawei-iam-least-privilege-review",
-        "huawei-live-iam-policy-change-guard",
-        "huawei-live-kms-key-destruction-guard",
-        "huawei-live-obs-bucket-policy-guard",
-        "huawei-obs-data-perimeter-governor",
-        "huawei-secmaster-security-operations",
-        "huawei-waf-security-review",
-        "ionos-security-compliance-reviewer",
-        "kubernetes-live-rbac-mutation-guard",
-        "kubernetes-pod-security-admission-review",
-        "kubernetes-rbac-review",
-        "kubernetes-workload-identity-review",
-        "kyverno-policy-review",
+        "gcp-alloydb-ai-developer",
+        "gcp-gemini-api-developer",
+        "gcp-vertex-ai-mlops-engineer",
+        "huawei-modelarts-mlops-engineer",
+        "nvidia-agentic-ai-platform-review",
+        "nvidia-ai-infrastructure-operations",
+        "nvidia-ai-networking-fabric-review",
+        "nvidia-ai-operations-day2",
+        "nvidia-cuda-kernel-performance-review",
+        "nvidia-generative-ai-platform-review",
         "nvidia-gpu-operator-kubernetes-hardening",
+        "nvidia-maestro",
         "nvidia-model-promotion-gatekeeper",
         "nvidia-ngc-nim-supply-chain-governor",
-        "oci-cloud-guard-responder",
-        "oci-identity-access-governor",
-        "oci-live-iam-policy-compartment-guard",
-        "oci-live-vault-key-destruction-guard",
-        "oci-security-compliance-reviewer",
-        "oci-waf-security-review",
-        "ovhcloud-iam-policy-review",
-        "ovhcloud-live-kms-key-destruction-guard",
-        "scaleway-iam-policy-review"
+        "nvidia-tensorrt-llm-deployment-review",
+        "nvidia-triton-inference-serving-review"
+      ]
+    },
+    "cloud-dba": {
+      "label": "Cloud Database Administrator",
+      "description": "Database architects, performance investigators, DBA operators, replication, and live database lifecycle guards across AWS RDS/DynamoDB, Azure CosmosDB, OCI Autonomous/Exadata/MySQL, GCP AlloyDB/Spanner, Alibaba PolarDB/RDS, and Huawei GaussDB.",
+      "agents": [
+        "alibaba-analyticdb-realtime-agent",
+        "alibaba-live-rds-polardb-mutation-guard-agent",
+        "alibaba-maxcompute-dataworks-analyst-agent",
+        "alibaba-polardb-rds-dba-agent",
+        "aws-dynamodb-data-modeling-performance-review-agent",
+        "aws-rds-aurora-performance-investigator-agent",
+        "azure-cosmosdb-application-developer-agent",
+        "azure-cosmosdb-performance-investigator-agent",
+        "azure-cosmosdb-platform-operator-agent",
+        "gcp-alloydb-cloudsql-dba-agent",
+        "gcp-bigquery-cost-performance-analyst-agent",
+        "gcp-live-bigquery-dataset-deletion-guard-agent",
+        "gcp-spanner-architect-agent",
+        "huawei-drs-data-replication-operator-agent",
+        "huawei-dws-dli-data-analyst-agent",
+        "huawei-gaussdb-rds-dba-agent",
+        "huawei-live-gaussdb-mutation-guard-agent",
+        "ionos-live-database-lifecycle-guard-agent",
+        "oci-autonomous-database-architect-agent",
+        "oci-database-platform-dba-agent",
+        "oci-dbtools-sql-analyst-agent",
+        "oci-exadata-platform-architect-agent",
+        "oci-goldengate-replication-operator-agent",
+        "oci-live-autonomous-db-lifecycle-guard-agent",
+        "oci-mysql-heatwave-ai-specialist-agent",
+        "oci-recovery-service-operator-agent"
+      ],
+      "skills": [
+        "alibaba-analyticdb-realtime",
+        "alibaba-live-rds-polardb-mutation-guard",
+        "alibaba-maxcompute-dataworks-analyst",
+        "alibaba-polardb-rds-dba",
+        "aws-dynamodb-data-modeling-performance-review",
+        "aws-rds-aurora-performance-investigator",
+        "azure-cosmosdb-application-developer",
+        "azure-cosmosdb-performance-investigator",
+        "azure-cosmosdb-platform-operator",
+        "gcp-alloydb-cloudsql-dba",
+        "gcp-bigquery-cost-performance-analyst",
+        "gcp-live-bigquery-dataset-deletion-guard",
+        "gcp-spanner-architect",
+        "huawei-drs-data-replication-operator",
+        "huawei-dws-dli-data-analyst",
+        "huawei-gaussdb-rds-dba",
+        "huawei-live-gaussdb-mutation-guard",
+        "ionos-live-database-lifecycle-guard",
+        "oci-autonomous-database-architect",
+        "oci-database-platform-dba",
+        "oci-dbtools-sql-analyst",
+        "oci-exadata-database-architect",
+        "oci-exadata-platform-architect",
+        "oci-goldengate-replication-operator",
+        "oci-live-autonomous-db-lifecycle-guard",
+        "oci-mysql-heatwave-ai-specialist",
+        "oci-recovery-service-operator"
+      ]
+    },
+    "cloud-devops-engineer": {
+      "label": "Cloud DevOps Engineer",
+      "description": "CI/CD release engineers, deployment and rollout operators, live pipeline approval guards, serverless production readiness, observability responders, and artifact governance across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
+      "agents": [
+        "alibaba-daily-operations-briefing-coordinator-agent",
+        "alibaba-devops-cicd-operator-agent",
+        "alibaba-function-serverless-operator-agent",
+        "alibaba-mse-microservice-engine-agent",
+        "alibaba-observability-incident-responder-agent",
+        "alibaba-registry-artifact-governor-agent",
+        "alibaba-serverless-production-readiness-agent",
+        "alibaba-support-incident-coordinator-agent",
+        "alibaba-ticket-triage-escalation-coordinator-agent",
+        "alibaba-waf-reliability-review-agent",
+        "aws-ci-cd-release-engineer-agent",
+        "aws-daily-operations-briefing-coordinator-agent",
+        "aws-deployment-hotfix-operator-agent",
+        "aws-devops-agent-skill-designer-agent",
+        "aws-ecs-service-remediation-operator-agent",
+        "aws-live-deployment-guarded-operator-agent",
+        "aws-live-ecs-rollout-guard-agent",
+        "aws-live-pipeline-approval-operator-agent",
+        "aws-live-serverless-release-guard-agent",
+        "aws-non-destructive-task-automation-advisor-agent",
+        "aws-observability-incident-responder-agent",
+        "aws-pipeline-fix-operator-agent",
+        "aws-serverless-production-readiness-agent",
+        "aws-serverless-rollout-corrector-agent",
+        "aws-ticket-triage-escalation-coordinator-agent",
+        "aws-waf-reliability-review-agent",
+        "azure-app-service-production-readiness-agent",
+        "azure-live-app-service-slot-swap-guard-agent",
+        "azure-observability-investigator-agent",
+        "azure-platform-automation-devops-agent",
+        "azure-resource-health-incident-triage-agent",
+        "azure-waf-reliability-review-agent",
+        "gcp-apigee-api-platform-operator-agent",
+        "gcp-cloud-run-functions-operator-agent",
+        "gcp-cloudbuild-deploy-cicd-operator-agent",
+        "gcp-daily-operations-briefing-coordinator-agent",
+        "gcp-data-pipeline-engineer-agent",
+        "gcp-firebase-developer-agent",
+        "gcp-live-cloud-run-traffic-migration-guard-agent",
+        "gcp-networking-observability-agent",
+        "gcp-observability-incident-responder-agent",
+        "gcp-registry-artifact-governor-agent",
+        "gcp-serverless-production-readiness-agent",
+        "gcp-support-incident-coordinator-agent",
+        "gcp-ticket-triage-escalation-coordinator-agent",
+        "gcp-waf-reliability-review-agent",
+        "huawei-codearts-devops-operator-agent",
+        "huawei-daily-operations-briefing-coordinator-agent",
+        "huawei-functiongraph-serverless-operator-agent",
+        "huawei-observability-incident-responder-agent",
+        "huawei-registry-artifact-governor-agent",
+        "huawei-serverless-production-readiness-agent",
+        "huawei-support-incident-coordinator-agent",
+        "huawei-ticket-triage-escalation-coordinator-agent",
+        "huawei-waf-reliability-review-agent",
+        "oci-devops-container-platform-engineer-agent",
+        "oci-live-oke-rollout-guard-agent",
+        "oci-observability-incident-responder-agent",
+        "oci-registry-artifact-governor-agent",
+        "oci-support-incident-coordinator-agent",
+        "oci-waf-reliability-review-agent"
+      ],
+      "skills": [
+        "alibaba-daily-operations-briefing-coordinator",
+        "alibaba-devops-cicd-operator",
+        "alibaba-function-serverless-operator",
+        "alibaba-mse-microservice-engine",
+        "alibaba-observability-incident-responder",
+        "alibaba-registry-artifact-governor",
+        "alibaba-serverless-production-readiness",
+        "alibaba-support-incident-coordinator",
+        "alibaba-ticket-triage-escalation-coordinator",
+        "alibaba-waf-reliability-review",
+        "argocd-gitops-review",
+        "aws-ci-cd-release-engineer",
+        "aws-daily-operations-briefing-coordinator",
+        "aws-deployment-hotfix-operator",
+        "aws-devops-agent-skill-designer",
+        "aws-ecs-service-remediation-operator",
+        "aws-live-deployment-guarded-operator",
+        "aws-live-ecs-rollout-guard",
+        "aws-live-pipeline-approval-operator",
+        "aws-live-serverless-release-guard",
+        "aws-non-destructive-task-automation-advisor",
+        "aws-observability-incident-responder",
+        "aws-pipeline-fix-operator",
+        "aws-serverless-production-readiness",
+        "aws-serverless-rollout-corrector",
+        "aws-ticket-triage-escalation-coordinator",
+        "aws-waf-reliability-review",
+        "azure-app-service-production-readiness",
+        "azure-live-app-service-slot-swap-guard",
+        "azure-observability-investigator",
+        "azure-platform-automation-devops",
+        "azure-resource-health-incident-triage",
+        "azure-waf-reliability-review",
+        "gcp-apigee-api-platform-operator",
+        "gcp-cloud-run-functions-operator",
+        "gcp-cloudbuild-deploy-cicd-operator",
+        "gcp-daily-operations-briefing-coordinator",
+        "gcp-data-pipeline-engineer",
+        "gcp-firebase-developer",
+        "gcp-live-cloud-run-traffic-migration-guard",
+        "gcp-networking-observability",
+        "gcp-observability-incident-responder",
+        "gcp-registry-artifact-governor",
+        "gcp-serverless-production-readiness",
+        "gcp-support-incident-coordinator",
+        "gcp-ticket-triage-escalation-coordinator",
+        "gcp-waf-reliability-review",
+        "huawei-codearts-devops-operator",
+        "huawei-daily-operations-briefing-coordinator",
+        "huawei-functiongraph-serverless-operator",
+        "huawei-observability-incident-responder",
+        "huawei-registry-artifact-governor",
+        "huawei-serverless-production-readiness",
+        "huawei-support-incident-coordinator",
+        "huawei-ticket-triage-escalation-coordinator",
+        "huawei-waf-reliability-review",
+        "oci-devops-container-platform-engineer",
+        "oci-live-oke-rollout-guard",
+        "oci-observability-incident-responder",
+        "oci-registry-artifact-governor",
+        "oci-support-incident-coordinator",
+        "oci-waf-reliability-review",
+        "opentelemetry-collector-config-review"
+      ]
+    },
+    "cloud-finops-analyst": {
+      "label": "Cloud FinOps Analyst",
+      "description": "Cost optimization governors, anomaly watchers, budget runaway guards, capacity planning, and cross-provider cost estimation across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and FinOps-neutral tools.",
+      "agents": [
+        "alibaba-cost-anomaly-watch-coordinator-agent",
+        "alibaba-cost-finops-analyst-agent",
+        "alibaba-live-cost-budget-action-guard-agent",
+        "alibaba-waf-cost-optimization-review-agent",
+        "aws-cost-anomaly-watch-coordinator-agent",
+        "aws-cost-optimization-governor-agent",
+        "aws-waf-cost-optimization-review-agent",
+        "azure-cost-estimation-review-agent",
+        "azure-cost-optimization-governor-agent",
+        "azure-live-cost-budget-action-guard-agent",
+        "azure-waf-cost-optimization-review-agent",
+        "contabo-capacity-planner-agent",
+        "contabo-cost-optimization-analyst-agent",
+        "finops-ai-economist-agent",
+        "finops-cloud-price-advisor-agent",
+        "finops-kubernetes-rightsizer-agent",
+        "finops-maestro-agent",
+        "gcp-bigquery-cost-performance-analyst-agent",
+        "gcp-cost-anomaly-watch-coordinator-agent",
+        "gcp-cost-finops-analyst-agent",
+        "gcp-live-cost-budget-action-guard-agent",
+        "gcp-waf-cost-optimization-review-agent",
+        "hetzner-capacity-planner-agent",
+        "hetzner-cost-optimization-analyst-agent",
+        "huawei-cost-anomaly-watch-coordinator-agent",
+        "huawei-cost-finops-analyst-agent",
+        "huawei-live-cost-budget-action-guard-agent",
+        "huawei-waf-cost-optimization-review-agent",
+        "ionos-cost-optimization-analyst-agent",
+        "oci-cost-finops-analyst-agent",
+        "oci-limits-capacity-planner-agent",
+        "oci-live-cost-budget-runaway-guard-agent",
+        "oci-waf-cost-optimization-review-agent",
+        "ovhcloud-cost-finops-analyst-agent",
+        "scaleway-cost-optimizer-agent"
+      ],
+      "skills": [
+        "alibaba-cost-anomaly-watch-coordinator",
+        "alibaba-cost-finops-analyst",
+        "alibaba-live-cost-budget-action-guard",
+        "alibaba-waf-cost-optimization-review",
+        "aws-cost-anomaly-watch-coordinator",
+        "aws-cost-optimization-governor",
+        "aws-waf-cost-optimization-review",
+        "azure-cost-estimation-review",
+        "azure-cost-optimization-governor",
+        "azure-live-cost-budget-action-guard",
+        "azure-waf-cost-optimization-review",
+        "contabo-capacity-planner",
+        "contabo-cost-optimization-analyst",
+        "fetch-foundation-model-pricing",
+        "finops-cloud-price-advisor",
+        "finops-maestro",
+        "focus-spec-normalizer",
+        "carbon-cost-pair",
+        "kubernetes-allocation-report",
+        "rightsize-recommendation",
+        "gcp-bigquery-cost-performance-analyst",
+        "gcp-cost-anomaly-watch-coordinator",
+        "gcp-cost-finops-analyst",
+        "gcp-live-cost-budget-action-guard",
+        "gcp-waf-cost-optimization-review",
+        "hetzner-capacity-planner",
+        "hetzner-cost-optimization-analyst",
+        "huawei-cost-anomaly-watch-coordinator",
+        "huawei-cost-finops-analyst",
+        "huawei-live-cost-budget-action-guard",
+        "huawei-waf-cost-optimization-review",
+        "ionos-cost-optimization-analyst",
+        "oci-cost-finops-analyst",
+        "oci-limits-capacity-planner",
+        "oci-live-cost-budget-runaway-guard",
+        "oci-waf-cost-optimization-review",
+        "ovhcloud-cost-finops-analyst",
+        "scaleway-cost-optimizer"
       ]
     },
     "cloud-platform-engineer": {
@@ -301,146 +529,152 @@
         "terraform-maestro"
       ]
     },
-    "cloud-dba": {
-      "label": "Cloud Database Administrator",
-      "description": "Database architects, performance investigators, DBA operators, replication, and live database lifecycle guards across AWS RDS/DynamoDB, Azure CosmosDB, OCI Autonomous/Exadata/MySQL, GCP AlloyDB/Spanner, Alibaba PolarDB/RDS, and Huawei GaussDB.",
+    "cloud-security-engineer": {
+      "label": "Cloud Security Engineer",
+      "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
       "agents": [
-        "alibaba-analyticdb-realtime-agent",
-        "alibaba-live-rds-polardb-mutation-guard-agent",
-        "alibaba-maxcompute-dataworks-analyst-agent",
-        "alibaba-polardb-rds-dba-agent",
-        "aws-dynamodb-data-modeling-performance-review-agent",
-        "aws-rds-aurora-performance-investigator-agent",
-        "azure-cosmosdb-application-developer-agent",
-        "azure-cosmosdb-performance-investigator-agent",
-        "azure-cosmosdb-platform-operator-agent",
-        "gcp-alloydb-cloudsql-dba-agent",
-        "gcp-bigquery-cost-performance-analyst-agent",
+        "alibaba-actiontrail-audit-analyst-agent",
+        "alibaba-certificate-manager-issuer-review-agent",
+        "alibaba-china-compliance-agent",
+        "alibaba-kms-secret-lifecycle-steward-agent",
+        "alibaba-live-kms-key-mutation-guard-agent",
+        "alibaba-live-oss-bucket-policy-guard-agent",
+        "alibaba-live-ram-policy-change-guard-agent",
+        "alibaba-oss-data-perimeter-governor-agent",
+        "alibaba-ram-iam-review-agent",
+        "alibaba-security-center-hardening-agent",
+        "alibaba-waf-security-review-agent",
+        "aws-bedrock-agent-security-governor-agent",
+        "aws-compliance-evidence-mapper-agent",
+        "aws-iam-least-privilege-review-agent",
+        "aws-kms-secrets-lifecycle-steward-agent",
+        "aws-s3-data-perimeter-governor-agent",
+        "aws-security-posture-hardening-agent",
+        "aws-waf-security-review-agent",
+        "azure-entra-id-specialist-agent",
+        "azure-governance-policy-guardrails-agent",
+        "azure-identity-governance-review-agent",
+        "azure-key-vault-secret-lifecycle-auditor-agent",
+        "azure-live-entra-role-assignment-guard-agent",
+        "azure-live-keyvault-rotation-purge-guard-agent",
+        "azure-live-pim-jit-activation-guard-agent",
+        "azure-rbac-review-agent",
+        "azure-role-selector-agent",
+        "azure-security-posture-hardening-agent",
+        "azure-waf-security-review-agent",
+        "contabo-security-hardening-agent",
+        "gcp-certificate-manager-issuer-review-agent",
+        "gcp-cloud-auth-advisor-agent",
+        "gcp-compliance-assured-workloads-agent",
+        "gcp-gcs-data-perimeter-governor-agent",
+        "gcp-iam-least-privilege-review-agent",
         "gcp-live-bigquery-dataset-deletion-guard-agent",
-        "gcp-spanner-architect-agent",
-        "huawei-drs-data-replication-operator-agent",
-        "huawei-dws-dli-data-analyst-agent",
-        "huawei-gaussdb-rds-dba-agent",
-        "huawei-live-gaussdb-mutation-guard-agent",
-        "ionos-live-database-lifecycle-guard-agent",
-        "oci-autonomous-database-architect-agent",
-        "oci-database-platform-dba-agent",
-        "oci-dbtools-sql-analyst-agent",
-        "oci-exadata-platform-architect-agent",
-        "oci-goldengate-replication-operator-agent",
-        "oci-live-autonomous-db-lifecycle-guard-agent",
-        "oci-mysql-heatwave-ai-specialist-agent",
-        "oci-recovery-service-operator-agent"
+        "gcp-live-iam-policy-change-guard-agent",
+        "gcp-live-kms-key-destruction-guard-agent",
+        "gcp-secret-kms-lifecycle-steward-agent",
+        "gcp-security-posture-hardening-agent",
+        "gcp-vpc-service-controls-architect-agent",
+        "gcp-waf-security-review-agent",
+        "huawei-certificate-manager-issuer-review-agent",
+        "huawei-compliance-sovereignty-agent",
+        "huawei-dew-kms-lifecycle-steward-agent",
+        "huawei-iam-least-privilege-review-agent",
+        "huawei-live-iam-policy-change-guard-agent",
+        "huawei-live-kms-key-destruction-guard-agent",
+        "huawei-live-obs-bucket-policy-guard-agent",
+        "huawei-obs-data-perimeter-governor-agent",
+        "huawei-secmaster-security-operations-agent",
+        "huawei-waf-security-review-agent",
+        "ionos-security-compliance-reviewer-agent",
+        "kubernetes-live-rbac-mutation-guard-agent",
+        "kubernetes-psa-review-agent",
+        "kubernetes-rbac-review-agent",
+        "kubernetes-workload-identity-review-agent",
+        "kyverno-policy-review-agent",
+        "nvidia-gpu-operator-kubernetes-hardening-agent",
+        "nvidia-model-promotion-gatekeeper-agent",
+        "nvidia-ngc-nim-supply-chain-governor-agent",
+        "oci-cloud-guard-responder-agent",
+        "oci-identity-access-governor-agent",
+        "oci-live-iam-policy-compartment-guard-agent",
+        "oci-live-vault-key-destruction-guard-agent",
+        "oci-security-compliance-reviewer-agent",
+        "oci-waf-security-review-agent",
+        "ovhcloud-iam-policy-review-agent",
+        "ovhcloud-live-kms-key-destruction-guard-agent",
+        "scaleway-iam-policy-review-agent"
       ],
       "skills": [
-        "alibaba-analyticdb-realtime",
-        "alibaba-live-rds-polardb-mutation-guard",
-        "alibaba-maxcompute-dataworks-analyst",
-        "alibaba-polardb-rds-dba",
-        "aws-dynamodb-data-modeling-performance-review",
-        "aws-rds-aurora-performance-investigator",
-        "azure-cosmosdb-application-developer",
-        "azure-cosmosdb-performance-investigator",
-        "azure-cosmosdb-platform-operator",
-        "gcp-alloydb-cloudsql-dba",
-        "gcp-bigquery-cost-performance-analyst",
+        "alibaba-actiontrail-audit-analyst",
+        "alibaba-certificate-manager-issuer-review",
+        "alibaba-china-compliance",
+        "alibaba-kms-secret-lifecycle-steward",
+        "alibaba-live-kms-key-mutation-guard",
+        "alibaba-live-oss-bucket-policy-guard",
+        "alibaba-live-ram-policy-change-guard",
+        "alibaba-oss-data-perimeter-governor",
+        "alibaba-ram-iam-review",
+        "alibaba-security-center-hardening",
+        "alibaba-waf-security-review",
+        "aws-bedrock-agent-security-governor",
+        "aws-compliance-evidence-mapper",
+        "aws-iam-least-privilege-review",
+        "aws-kms-secrets-lifecycle-steward",
+        "aws-s3-data-perimeter-governor",
+        "aws-security-posture-hardening",
+        "aws-waf-security-review",
+        "azure-entra-id-specialist",
+        "azure-governance-policy-guardrails",
+        "azure-identity-governance-review",
+        "azure-key-vault-secret-lifecycle-auditor",
+        "azure-live-entra-role-assignment-guard",
+        "azure-live-keyvault-rotation-purge-guard",
+        "azure-live-pim-jit-activation-guard",
+        "azure-rbac-review",
+        "azure-role-selector",
+        "azure-security-posture-hardening",
+        "azure-waf-security-review",
+        "contabo-security-hardening",
+        "gcp-certificate-manager-issuer-review",
+        "gcp-cloud-auth-advisor",
+        "gcp-compliance-assured-workloads",
+        "gcp-gcs-data-perimeter-governor",
+        "gcp-iam-least-privilege-review",
         "gcp-live-bigquery-dataset-deletion-guard",
-        "gcp-spanner-architect",
-        "huawei-drs-data-replication-operator",
-        "huawei-dws-dli-data-analyst",
-        "huawei-gaussdb-rds-dba",
-        "huawei-live-gaussdb-mutation-guard",
-        "ionos-live-database-lifecycle-guard",
-        "oci-autonomous-database-architect",
-        "oci-database-platform-dba",
-        "oci-dbtools-sql-analyst",
-        "oci-exadata-database-architect",
-        "oci-exadata-platform-architect",
-        "oci-goldengate-replication-operator",
-        "oci-live-autonomous-db-lifecycle-guard",
-        "oci-mysql-heatwave-ai-specialist",
-        "oci-recovery-service-operator"
-      ]
-    },
-    "cloud-finops-analyst": {
-      "label": "Cloud FinOps Analyst",
-      "description": "Cost optimization governors, anomaly watchers, budget runaway guards, capacity planning, and cross-provider cost estimation across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and FinOps-neutral tools.",
-      "agents": [
-        "alibaba-cost-anomaly-watch-coordinator-agent",
-        "alibaba-cost-finops-analyst-agent",
-        "alibaba-live-cost-budget-action-guard-agent",
-        "alibaba-waf-cost-optimization-review-agent",
-        "aws-cost-anomaly-watch-coordinator-agent",
-        "aws-cost-optimization-governor-agent",
-        "aws-waf-cost-optimization-review-agent",
-        "azure-cost-estimation-review-agent",
-        "azure-cost-optimization-governor-agent",
-        "azure-live-cost-budget-action-guard-agent",
-        "azure-waf-cost-optimization-review-agent",
-        "contabo-capacity-planner-agent",
-        "contabo-cost-optimization-analyst-agent",
-        "finops-ai-economist-agent",
-        "finops-cloud-price-advisor-agent",
-        "finops-kubernetes-rightsizer-agent",
-        "finops-maestro-agent",
-        "gcp-bigquery-cost-performance-analyst-agent",
-        "gcp-cost-anomaly-watch-coordinator-agent",
-        "gcp-cost-finops-analyst-agent",
-        "gcp-live-cost-budget-action-guard-agent",
-        "gcp-waf-cost-optimization-review-agent",
-        "hetzner-capacity-planner-agent",
-        "hetzner-cost-optimization-analyst-agent",
-        "huawei-cost-anomaly-watch-coordinator-agent",
-        "huawei-cost-finops-analyst-agent",
-        "huawei-live-cost-budget-action-guard-agent",
-        "huawei-waf-cost-optimization-review-agent",
-        "ionos-cost-optimization-analyst-agent",
-        "oci-cost-finops-analyst-agent",
-        "oci-limits-capacity-planner-agent",
-        "oci-live-cost-budget-runaway-guard-agent",
-        "oci-waf-cost-optimization-review-agent",
-        "ovhcloud-cost-finops-analyst-agent",
-        "scaleway-cost-optimizer-agent"
-      ],
-      "skills": [
-        "alibaba-cost-anomaly-watch-coordinator",
-        "alibaba-cost-finops-analyst",
-        "alibaba-live-cost-budget-action-guard",
-        "alibaba-waf-cost-optimization-review",
-        "aws-cost-anomaly-watch-coordinator",
-        "aws-cost-optimization-governor",
-        "aws-waf-cost-optimization-review",
-        "azure-cost-estimation-review",
-        "azure-cost-optimization-governor",
-        "azure-live-cost-budget-action-guard",
-        "azure-waf-cost-optimization-review",
-        "contabo-capacity-planner",
-        "contabo-cost-optimization-analyst",
-        "fetch-foundation-model-pricing",
-        "finops-cloud-price-advisor",
-        "finops-maestro",
-        "focus-spec-normalizer",
-        "carbon-cost-pair",
-        "kubernetes-allocation-report",
-        "rightsize-recommendation",
-        "gcp-bigquery-cost-performance-analyst",
-        "gcp-cost-anomaly-watch-coordinator",
-        "gcp-cost-finops-analyst",
-        "gcp-live-cost-budget-action-guard",
-        "gcp-waf-cost-optimization-review",
-        "hetzner-capacity-planner",
-        "hetzner-cost-optimization-analyst",
-        "huawei-cost-anomaly-watch-coordinator",
-        "huawei-cost-finops-analyst",
-        "huawei-live-cost-budget-action-guard",
-        "huawei-waf-cost-optimization-review",
-        "ionos-cost-optimization-analyst",
-        "oci-cost-finops-analyst",
-        "oci-limits-capacity-planner",
-        "oci-live-cost-budget-runaway-guard",
-        "oci-waf-cost-optimization-review",
-        "ovhcloud-cost-finops-analyst",
-        "scaleway-cost-optimizer"
+        "gcp-live-iam-policy-change-guard",
+        "gcp-live-kms-key-destruction-guard",
+        "gcp-secret-kms-lifecycle-steward",
+        "gcp-security-posture-hardening",
+        "gcp-vpc-service-controls-architect",
+        "gcp-waf-security-review",
+        "huawei-certificate-manager-issuer-review",
+        "huawei-compliance-sovereignty",
+        "huawei-dew-kms-lifecycle-steward",
+        "huawei-iam-least-privilege-review",
+        "huawei-live-iam-policy-change-guard",
+        "huawei-live-kms-key-destruction-guard",
+        "huawei-live-obs-bucket-policy-guard",
+        "huawei-obs-data-perimeter-governor",
+        "huawei-secmaster-security-operations",
+        "huawei-waf-security-review",
+        "ionos-security-compliance-reviewer",
+        "kubernetes-live-rbac-mutation-guard",
+        "kubernetes-pod-security-admission-review",
+        "kubernetes-rbac-review",
+        "kubernetes-workload-identity-review",
+        "kyverno-policy-review",
+        "nvidia-gpu-operator-kubernetes-hardening",
+        "nvidia-model-promotion-gatekeeper",
+        "nvidia-ngc-nim-supply-chain-governor",
+        "oci-cloud-guard-responder",
+        "oci-identity-access-governor",
+        "oci-live-iam-policy-compartment-guard",
+        "oci-live-vault-key-destruction-guard",
+        "oci-security-compliance-reviewer",
+        "oci-waf-security-review",
+        "ovhcloud-iam-policy-review",
+        "ovhcloud-live-kms-key-destruction-guard",
+        "scaleway-iam-policy-review"
       ]
     },
     "cloud-solutions-architect": {
@@ -543,136 +777,32 @@
         "scaleway-maestro"
       ]
     },
-    "cloud-devops-engineer": {
-      "label": "Cloud DevOps Engineer",
-      "description": "CI/CD release engineers, deployment and rollout operators, live pipeline approval guards, serverless production readiness, observability responders, and artifact governance across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
+    "dotnet-application-review-engineer": {
+      "label": ".NET Application Review Engineer",
+      "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
       "agents": [
-        "alibaba-daily-operations-briefing-coordinator-agent",
-        "alibaba-devops-cicd-operator-agent",
-        "alibaba-function-serverless-operator-agent",
-        "alibaba-mse-microservice-engine-agent",
-        "alibaba-observability-incident-responder-agent",
-        "alibaba-registry-artifact-governor-agent",
-        "alibaba-serverless-production-readiness-agent",
-        "alibaba-support-incident-coordinator-agent",
-        "alibaba-ticket-triage-escalation-coordinator-agent",
-        "alibaba-waf-reliability-review-agent",
-        "aws-ci-cd-release-engineer-agent",
-        "aws-daily-operations-briefing-coordinator-agent",
-        "aws-deployment-hotfix-operator-agent",
-        "aws-devops-agent-skill-designer-agent",
-        "aws-ecs-service-remediation-operator-agent",
-        "aws-live-deployment-guarded-operator-agent",
-        "aws-live-ecs-rollout-guard-agent",
-        "aws-live-pipeline-approval-operator-agent",
-        "aws-live-serverless-release-guard-agent",
-        "aws-non-destructive-task-automation-advisor-agent",
-        "aws-observability-incident-responder-agent",
-        "aws-pipeline-fix-operator-agent",
-        "aws-serverless-production-readiness-agent",
-        "aws-serverless-rollout-corrector-agent",
-        "aws-ticket-triage-escalation-coordinator-agent",
-        "aws-waf-reliability-review-agent",
-        "azure-app-service-production-readiness-agent",
-        "azure-live-app-service-slot-swap-guard-agent",
-        "azure-observability-investigator-agent",
-        "azure-platform-automation-devops-agent",
-        "azure-resource-health-incident-triage-agent",
-        "azure-waf-reliability-review-agent",
-        "gcp-apigee-api-platform-operator-agent",
-        "gcp-cloud-run-functions-operator-agent",
-        "gcp-cloudbuild-deploy-cicd-operator-agent",
-        "gcp-daily-operations-briefing-coordinator-agent",
-        "gcp-data-pipeline-engineer-agent",
-        "gcp-firebase-developer-agent",
-        "gcp-live-cloud-run-traffic-migration-guard-agent",
-        "gcp-networking-observability-agent",
-        "gcp-observability-incident-responder-agent",
-        "gcp-registry-artifact-governor-agent",
-        "gcp-serverless-production-readiness-agent",
-        "gcp-support-incident-coordinator-agent",
-        "gcp-ticket-triage-escalation-coordinator-agent",
-        "gcp-waf-reliability-review-agent",
-        "huawei-codearts-devops-operator-agent",
-        "huawei-daily-operations-briefing-coordinator-agent",
-        "huawei-functiongraph-serverless-operator-agent",
-        "huawei-observability-incident-responder-agent",
-        "huawei-registry-artifact-governor-agent",
-        "huawei-serverless-production-readiness-agent",
-        "huawei-support-incident-coordinator-agent",
-        "huawei-ticket-triage-escalation-coordinator-agent",
-        "huawei-waf-reliability-review-agent",
-        "oci-devops-container-platform-engineer-agent",
-        "oci-live-oke-rollout-guard-agent",
-        "oci-observability-incident-responder-agent",
-        "oci-registry-artifact-governor-agent",
-        "oci-support-incident-coordinator-agent",
-        "oci-waf-reliability-review-agent"
+        "dotnet-maestro-agent",
+        "dotnet-csharp-runtime-review-agent",
+        "dotnet-aspnetcore-api-review-agent",
+        "dotnet-aspnetcore-identity-authz-review-agent",
+        "dotnet-efcore-data-access-review-agent",
+        "dotnet-testing-quality-review-agent",
+        "dotnet-supply-chain-review-agent",
+        "dotnet-performance-aot-review-agent",
+        "dotnet-observability-otel-review-agent",
+        "dotnet-aspire-cloud-native-review-agent"
       ],
       "skills": [
-        "alibaba-daily-operations-briefing-coordinator",
-        "alibaba-devops-cicd-operator",
-        "alibaba-function-serverless-operator",
-        "alibaba-mse-microservice-engine",
-        "alibaba-observability-incident-responder",
-        "alibaba-registry-artifact-governor",
-        "alibaba-serverless-production-readiness",
-        "alibaba-support-incident-coordinator",
-        "alibaba-ticket-triage-escalation-coordinator",
-        "alibaba-waf-reliability-review",
-        "argocd-gitops-review",
-        "aws-ci-cd-release-engineer",
-        "aws-daily-operations-briefing-coordinator",
-        "aws-deployment-hotfix-operator",
-        "aws-devops-agent-skill-designer",
-        "aws-ecs-service-remediation-operator",
-        "aws-live-deployment-guarded-operator",
-        "aws-live-ecs-rollout-guard",
-        "aws-live-pipeline-approval-operator",
-        "aws-live-serverless-release-guard",
-        "aws-non-destructive-task-automation-advisor",
-        "aws-observability-incident-responder",
-        "aws-pipeline-fix-operator",
-        "aws-serverless-production-readiness",
-        "aws-serverless-rollout-corrector",
-        "aws-ticket-triage-escalation-coordinator",
-        "aws-waf-reliability-review",
-        "azure-app-service-production-readiness",
-        "azure-live-app-service-slot-swap-guard",
-        "azure-observability-investigator",
-        "azure-platform-automation-devops",
-        "azure-resource-health-incident-triage",
-        "azure-waf-reliability-review",
-        "gcp-apigee-api-platform-operator",
-        "gcp-cloud-run-functions-operator",
-        "gcp-cloudbuild-deploy-cicd-operator",
-        "gcp-daily-operations-briefing-coordinator",
-        "gcp-data-pipeline-engineer",
-        "gcp-firebase-developer",
-        "gcp-live-cloud-run-traffic-migration-guard",
-        "gcp-networking-observability",
-        "gcp-observability-incident-responder",
-        "gcp-registry-artifact-governor",
-        "gcp-serverless-production-readiness",
-        "gcp-support-incident-coordinator",
-        "gcp-ticket-triage-escalation-coordinator",
-        "gcp-waf-reliability-review",
-        "huawei-codearts-devops-operator",
-        "huawei-daily-operations-briefing-coordinator",
-        "huawei-functiongraph-serverless-operator",
-        "huawei-observability-incident-responder",
-        "huawei-registry-artifact-governor",
-        "huawei-serverless-production-readiness",
-        "huawei-support-incident-coordinator",
-        "huawei-ticket-triage-escalation-coordinator",
-        "huawei-waf-reliability-review",
-        "oci-devops-container-platform-engineer",
-        "oci-live-oke-rollout-guard",
-        "oci-observability-incident-responder",
-        "oci-registry-artifact-governor",
-        "oci-support-incident-coordinator",
-        "oci-waf-reliability-review",
-        "opentelemetry-collector-config-review"
+        "dotnet-maestro",
+        "dotnet-csharp-runtime-review",
+        "dotnet-aspnetcore-api-review",
+        "dotnet-aspnetcore-identity-authz-review",
+        "dotnet-efcore-data-access-review",
+        "dotnet-testing-quality-review",
+        "dotnet-supply-chain-review",
+        "dotnet-performance-aot-review",
+        "dotnet-observability-otel-review",
+        "dotnet-aspire-cloud-native-review"
       ]
     },
     "kubernetes-admission-security-engineer": {
@@ -694,6 +824,51 @@
         "kyverno-policy-review"
       ]
     },
+    "kubernetes-application-platform-engineer": {
+      "label": "Kubernetes Application Platform Engineer",
+      "description": "Golden paths and GitOps delivery: Argo CD Application/AppProject/ApplicationSet review, sync impersonation, RBAC, sync windows, and Argo CD Agent multi-cluster topologies. Owns the path from Git to running workload with bounded blast radius.",
+      "agents": [
+        "argocd-gitops-review-agent",
+        "kubernetes-live-argocd-sync-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "argocd-gitops-review",
+        "kubernetes-maestro",
+        "kubernetes-pod-security-admission-review"
+      ]
+    },
+    "kubernetes-developer-platform-engineer": {
+      "label": "Kubernetes Developer Platform Engineer",
+      "description": "Internal developer platform and GitOps delivery: Backstage Scaffolder template security review, Argo CD and Argo Rollouts progressive delivery, FluxCD Kustomization and HelmRelease GitOps review, and the kubernetes-maestro router for cross-domain dispatch.",
+      "agents": [
+        "argocd-gitops-review-agent",
+        "argo-rollouts-progressive-delivery-review-agent",
+        "backstage-scaffolder-template-review-agent",
+        "fluxcd-kustomization-helmrelease-review-agent",
+        "kubernetes-live-argocd-sync-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "argocd-gitops-review",
+        "argo-rollouts-progressive-delivery-review",
+        "backstage-scaffolder-template-review",
+        "fluxcd-kustomization-helmrelease-review",
+        "kubernetes-maestro"
+      ]
+    },
+    "kubernetes-disaster-recovery-engineer": {
+      "label": "Kubernetes Disaster Recovery Engineer",
+      "description": "Backup, restore, and business continuity: Velero backup schedule review, live-guarded restore operations with pre-restore safety checklist, PV restore posture, existingResourcePolicy risk, and cross-cluster restore scope governance.",
+      "agents": [
+        "kubernetes-live-velero-restore-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "kubernetes-maestro",
+        "velero-backup-restore-guard"
+      ]
+    },
     "kubernetes-network-engineer": {
       "label": "Kubernetes Network Engineer",
       "description": "Cluster network architecture and policy: CNI selection and dataplane (kube-proxy mode, IPAM, Pod and Service CIDR sizing, MTU, encapsulation, dual-stack), Service surface (EndpointSlices, internalTrafficPolicy, externalTrafficPolicy, topology-aware routing), Ingress to Gateway API migration, CoreDNS and NodeLocal DNSCache, multi-cluster topology (ClusterMesh, Submariner, MCS-API), egress topology and connectivity troubleshooting, plus Cilium NetworkPolicy and CiliumClusterwideNetworkPolicy review, CiliumEgressGatewayPolicy, Hubble flow observability, and Istio mesh in both sidecar and ambient modes including the L7-AuthorizationPolicy-without-waypoint trap.",
@@ -714,39 +889,20 @@
         "kubernetes-network-architecture-review"
       ]
     },
-    "kubernetes-application-platform-engineer": {
-      "label": "Kubernetes Application Platform Engineer",
-      "description": "Golden paths and GitOps delivery: Argo CD Application/AppProject/ApplicationSet review, sync impersonation, RBAC, sync windows, and Argo CD Agent multi-cluster topologies. Owns the path from Git to running workload with bounded blast radius.",
-      "agents": [
-        "argocd-gitops-review-agent",
-        "kubernetes-live-argocd-sync-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "argocd-gitops-review",
-        "kubernetes-maestro",
-        "kubernetes-pod-security-admission-review"
-      ]
-    },
-    "kubernetes-runtime-security-engineer": {
-      "label": "Kubernetes Runtime Security Engineer",
-      "description": "Runtime defense and workload identity: RBAC privilege-escalation verbs, ServiceAccount token projection, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, and the OIDC trust-policy review that ties pods to cloud IAM without long-lived static credentials.",
+    "kubernetes-observability-engineer": {
+      "label": "Kubernetes Observability Engineer",
+      "description": "Metrics, alerting, cardinality, cost attribution, and telemetry pipeline: Prometheus alerting and recording rules, label cardinality, Alertmanager routing, OpenTelemetry Collector pipeline safety, and Kubecost chargeback and allocation model review.",
       "agents": [
-        "falco-runtime-threat-rules-review-agent",
-        "kubernetes-live-rbac-mutation-guard-agent",
+        "kubecost-chargeback-allocation-review-agent",
         "kubernetes-maestro-agent",
-        "kubernetes-rbac-review-agent",
-        "kubernetes-workload-identity-review-agent",
-        "sigstore-cosign-supply-chain-review-agent"
+        "opentelemetry-collector-config-review-agent",
+        "prometheus-alerting-cardinality-review-agent"
       ],
       "skills": [
-        "falco-runtime-threat-rules-review",
-        "kubernetes-live-rbac-mutation-guard",
+        "kubecost-chargeback-allocation-review",
         "kubernetes-maestro",
-        "kubernetes-pod-security-admission-review",
-        "kubernetes-rbac-review",
-        "kubernetes-workload-identity-review",
-        "sigstore-cosign-supply-chain-review"
+        "opentelemetry-collector-config-review",
+        "prometheus-alerting-cardinality-review"
       ]
     },
     "kubernetes-pki-engineer": {
@@ -769,20 +925,25 @@
         "oci-certificates-issuer-review"
       ]
     },
-    "kubernetes-observability-engineer": {
-      "label": "Kubernetes Observability Engineer",
-      "description": "Metrics, alerting, cardinality, cost attribution, and telemetry pipeline: Prometheus alerting and recording rules, label cardinality, Alertmanager routing, OpenTelemetry Collector pipeline safety, and Kubecost chargeback and allocation model review.",
+    "kubernetes-runtime-security-engineer": {
+      "label": "Kubernetes Runtime Security Engineer",
+      "description": "Runtime defense and workload identity: RBAC privilege-escalation verbs, ServiceAccount token projection, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, and the OIDC trust-policy review that ties pods to cloud IAM without long-lived static credentials.",
       "agents": [
-        "kubecost-chargeback-allocation-review-agent",
+        "falco-runtime-threat-rules-review-agent",
+        "kubernetes-live-rbac-mutation-guard-agent",
         "kubernetes-maestro-agent",
-        "opentelemetry-collector-config-review-agent",
-        "prometheus-alerting-cardinality-review-agent"
+        "kubernetes-rbac-review-agent",
+        "kubernetes-workload-identity-review-agent",
+        "sigstore-cosign-supply-chain-review-agent"
       ],
       "skills": [
-        "kubecost-chargeback-allocation-review",
+        "falco-runtime-threat-rules-review",
+        "kubernetes-live-rbac-mutation-guard",
         "kubernetes-maestro",
-        "opentelemetry-collector-config-review",
-        "prometheus-alerting-cardinality-review"
+        "kubernetes-pod-security-admission-review",
+        "kubernetes-rbac-review",
+        "kubernetes-workload-identity-review",
+        "sigstore-cosign-supply-chain-review"
       ]
     },
     "kubernetes-supply-chain-security-engineer": {
@@ -806,75 +967,45 @@
         "sigstore-cosign-supply-chain-review"
       ]
     },
-    "kubernetes-developer-platform-engineer": {
-      "label": "Kubernetes Developer Platform Engineer",
-      "description": "Internal developer platform and GitOps delivery: Backstage Scaffolder template security review, Argo CD and Argo Rollouts progressive delivery, FluxCD Kustomization and HelmRelease GitOps review, and the kubernetes-maestro router for cross-domain dispatch.",
-      "agents": [
-        "argocd-gitops-review-agent",
-        "argo-rollouts-progressive-delivery-review-agent",
-        "backstage-scaffolder-template-review-agent",
-        "fluxcd-kustomization-helmrelease-review-agent",
-        "kubernetes-live-argocd-sync-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "argocd-gitops-review",
-        "argo-rollouts-progressive-delivery-review",
-        "backstage-scaffolder-template-review",
-        "fluxcd-kustomization-helmrelease-review",
-        "kubernetes-maestro"
-      ]
-    },
-    "kubernetes-disaster-recovery-engineer": {
-      "label": "Kubernetes Disaster Recovery Engineer",
-      "description": "Backup, restore, and business continuity: Velero backup schedule review, live-guarded restore operations with pre-restore safety checklist, PV restore posture, existingResourcePolicy risk, and cross-cluster restore scope governance.",
-      "agents": [
-        "kubernetes-live-velero-restore-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "kubernetes-maestro",
-        "velero-backup-restore-guard"
-      ]
-    },
-    "cloud-ai-platform-engineer": {
-      "label": "Cloud AI Platform Engineer",
-      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
+    "legal-hr-risk-reviewer": {
+      "label": "Legal & HR Risk Reviewer",
+      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function \u2014 contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
       "agents": [
-        "gcp-alloydb-ai-developer-agent",
-        "gcp-gemini-api-developer-agent",
-        "gcp-vertex-ai-mlops-engineer-agent",
-        "huawei-modelarts-mlops-engineer-agent",
-        "nvidia-agentic-ai-platform-review-agent",
-        "nvidia-ai-infrastructure-operations-agent",
-        "nvidia-ai-networking-fabric-review-agent",
-        "nvidia-ai-operations-day2-agent",
-        "nvidia-cuda-kernel-performance-review-agent",
-        "nvidia-generative-ai-platform-review-agent",
-        "nvidia-gpu-operator-kubernetes-hardening-agent",
-        "nvidia-maestro-agent",
-        "nvidia-model-promotion-gatekeeper-agent",
-        "nvidia-ngc-nim-supply-chain-governor-agent",
-        "nvidia-tensorrt-llm-deployment-review-agent",
-        "nvidia-triton-inference-serving-review-agent"
+        "legal-counsel-review-agent",
+        "hr-risk-triage-review-agent",
+        "legal-maestro-agent",
+        "hr-maestro-agent",
+        "legal-contract-review-agent",
+        "legal-privacy-data-protection-agent",
+        "legal-employment-law-risk-agent",
+        "legal-litigation-discovery-hold-agent",
+        "legal-regulatory-compliance-agent",
+        "legal-ip-open-source-agent",
+        "legal-vendor-procurement-risk-agent",
+        "legal-ethics-investigations-agent",
+        "legal-policy-governance-agent",
+        "legal-public-disclosure-agent",
+        "legal-knowledge-management-agent",
+        "hr-employee-relations-agent",
+        "hr-workplace-investigations-agent",
+        "hr-performance-management-agent",
+        "hr-termination-readiness-agent",
+        "hr-leave-accommodation-agent",
+        "hr-recruiting-selection-agent",
+        "hr-compensation-equity-agent",
+        "hr-benefits-payroll-agent",
+        "hr-workforce-planning-rif-agent",
+        "hr-learning-policy-agent",
+        "hr-analytics-people-data-agent",
+        "hr-culture-dei-agent",
+        "hr-hris-process-controls-agent"
       ],
       "skills": [
-        "gcp-alloydb-ai-developer",
-        "gcp-gemini-api-developer",
-        "gcp-vertex-ai-mlops-engineer",
-        "huawei-modelarts-mlops-engineer",
-        "nvidia-agentic-ai-platform-review",
-        "nvidia-ai-infrastructure-operations",
-        "nvidia-ai-networking-fabric-review",
-        "nvidia-ai-operations-day2",
-        "nvidia-cuda-kernel-performance-review",
-        "nvidia-generative-ai-platform-review",
-        "nvidia-gpu-operator-kubernetes-hardening",
-        "nvidia-maestro",
-        "nvidia-model-promotion-gatekeeper",
-        "nvidia-ngc-nim-supply-chain-governor",
-        "nvidia-tensorrt-llm-deployment-review",
-        "nvidia-triton-inference-serving-review"
+        "legal-counsel-review",
+        "hr-risk-triage-review",
+        "legal-hr-case-capsule",
+        "legal-hr-routing-protocol",
+        "legal-hr-risk-taxonomy"
       ]
     },
     "marketing-governance-reviewer": {
@@ -913,6 +1044,64 @@
         "analytics-data-minimization-review"
       ]
     },
+    "netsuite-platform-advisor": {
+      "label": "Oracle NetSuite Platform Advisor",
+      "description": "Enterprise NetSuite architecture, operations, compliance, and implementation \u2014 platform configuration, SuiteScript development, SDF deployment, integrations (REST/SOAP), authentication (OAuth2/TBA), financial controls, audit and SOX compliance, multi-subsidiary management, and least-privilege identity governance. Advisory only \u2014 never executes live mutations without separate authorization.",
+      "agents": [
+        "netsuite-administrator-agent",
+        "netsuite-ai-connector-mcp-agent",
+        "netsuite-ai-foundations-agent",
+        "netsuite-application-developer-agent",
+        "netsuite-audit-controls-sox-agent",
+        "netsuite-bi-reporting-agent",
+        "netsuite-data-governance-privacy-agent",
+        "netsuite-enterprise-architecture-agent",
+        "netsuite-erp-consultant-agent",
+        "netsuite-evidence-release-drift-agent",
+        "netsuite-financial-foundations-agent",
+        "netsuite-identity-access-role-permission-agent",
+        "netsuite-integration-migration-agent",
+        "netsuite-live-org-mutation-guard-agent",
+        "netsuite-maestro-agent",
+        "netsuite-oneworld-multisubsidiary-agent",
+        "netsuite-sandbox-nonproduction-governance-agent",
+        "netsuite-saved-searches-workbook-agent",
+        "netsuite-sdf-devops-release-agent",
+        "netsuite-sso-oauth-tba-agent",
+        "netsuite-suitefoundation-agent",
+        "netsuite-suitecloud-developer-agent",
+        "netsuite-suitescript-secure-code-review-agent",
+        "netsuite-suiteflow-automation-agent",
+        "netsuite-web-services-integration-agent"
+      ],
+      "skills": [
+        "netsuite-administrator-skill",
+        "netsuite-ai-connector-mcp-skill",
+        "netsuite-ai-foundations-skill",
+        "netsuite-application-developer-skill",
+        "netsuite-audit-controls-sox-skill",
+        "netsuite-bi-reporting-skill",
+        "netsuite-data-governance-privacy-skill",
+        "netsuite-enterprise-architecture-skill",
+        "netsuite-erp-consultant-skill",
+        "netsuite-evidence-release-drift-skill",
+        "netsuite-financial-foundations-skill",
+        "netsuite-identity-access-role-permission-skill",
+        "netsuite-integration-migration-skill",
+        "netsuite-live-operation-safety-skill",
+        "netsuite-oneworld-multisubsidiary-skill",
+        "netsuite-routing-protocol",
+        "netsuite-sandbox-nonproduction-governance-skill",
+        "netsuite-saved-searches-workbook-skill",
+        "netsuite-sdf-devops-release-skill",
+        "netsuite-sso-oauth-tba-skill",
+        "netsuite-suitecloud-developer-skill",
+        "netsuite-suiteflow-automation-skill",
+        "netsuite-suitefoundation-skill",
+        "netsuite-suitescript-secure-code-review-skill",
+        "netsuite-web-services-integration-skill"
+      ]
+    },
     "qa-test-quality-engineer": {
       "label": "QA / Test Quality Engineer",
       "description": "Static review of test suites, automation workflows, CI test pipelines, Helm charts, Kubernetes manifests, and AI/LLM evaluation setups for reliability, safety, and meaning \u2014 Playwright E2E flakiness and selector brittleness, framework-agnostic flaky-test triage, coverage-theater detection, CI test gating and sharding, attested Playwright suite execution, IEC 61131-3 PLC control-logic safety review, RPA workflow resilience review, Helm chart security and testability, Kubernetes manifest policy compliance, and LLM/AI pipeline evaluation quality grounded in DeepEval metrics and ISTQB principles.",
@@ -941,75 +1130,6 @@
         "llm-ai-pipeline-test-review"
       ]
     },
-    "legal-hr-risk-reviewer": {
-      "label": "Legal & HR Risk Reviewer",
-      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function \u2014 contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
-      "agents": [
-        "legal-counsel-review-agent",
-        "hr-risk-triage-review-agent",
-        "legal-maestro-agent",
-        "hr-maestro-agent",
-        "legal-contract-review-agent",
-        "legal-privacy-data-protection-agent",
-        "legal-employment-law-risk-agent",
-        "legal-litigation-discovery-hold-agent",
-        "legal-regulatory-compliance-agent",
-        "legal-ip-open-source-agent",
-        "legal-vendor-procurement-risk-agent",
-        "legal-ethics-investigations-agent",
-        "legal-policy-governance-agent",
-        "legal-public-disclosure-agent",
-        "legal-knowledge-management-agent",
-        "hr-employee-relations-agent",
-        "hr-workplace-investigations-agent",
-        "hr-performance-management-agent",
-        "hr-termination-readiness-agent",
-        "hr-leave-accommodation-agent",
-        "hr-recruiting-selection-agent",
-        "hr-compensation-equity-agent",
-        "hr-benefits-payroll-agent",
-        "hr-workforce-planning-rif-agent",
-        "hr-learning-policy-agent",
-        "hr-analytics-people-data-agent",
-        "hr-culture-dei-agent",
-        "hr-hris-process-controls-agent"
-      ],
-      "skills": [
-        "legal-counsel-review",
-        "hr-risk-triage-review",
-        "legal-hr-case-capsule",
-        "legal-hr-routing-protocol",
-        "legal-hr-risk-taxonomy"
-      ]
-    },
-    "dotnet-application-review-engineer": {
-      "label": ".NET Application Review Engineer",
-      "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
-      "agents": [
-        "dotnet-maestro-agent",
-        "dotnet-csharp-runtime-review-agent",
-        "dotnet-aspnetcore-api-review-agent",
-        "dotnet-aspnetcore-identity-authz-review-agent",
-        "dotnet-efcore-data-access-review-agent",
-        "dotnet-testing-quality-review-agent",
-        "dotnet-supply-chain-review-agent",
-        "dotnet-performance-aot-review-agent",
-        "dotnet-observability-otel-review-agent",
-        "dotnet-aspire-cloud-native-review-agent"
-      ],
-      "skills": [
-        "dotnet-maestro",
-        "dotnet-csharp-runtime-review",
-        "dotnet-aspnetcore-api-review",
-        "dotnet-aspnetcore-identity-authz-review",
-        "dotnet-efcore-data-access-review",
-        "dotnet-testing-quality-review",
-        "dotnet-supply-chain-review",
-        "dotnet-performance-aot-review",
-        "dotnet-observability-otel-review",
-        "dotnet-aspire-cloud-native-review"
-      ]
-    },
     "salesforce-portfolio-architect": {
       "label": "Salesforce Portfolio Architect",
       "description": "Salesforce platform architecture, admin governance, security, integration, revenue ops, service ops, marketing ops, Agentforce/AI risk, and compliance review across the Sales/Service/Experience/Marketing/Industry cloud surface. Static review only \u2014 never mutates a Salesforce org. Wave 1 ships canonical AGENT.md + metadata.json only; per-harness adapter files are deferred to Wave 2, so the catalog entries declare harnesses: [\"other\"] until adapters land.",
@@ -1077,58 +1197,6 @@
         "salesforce-flow-debugger-skill",
         "salesforce-bulk-data-ops-skill"
       ]
-    },
-    "accounting-finance-advisor": {
-      "label": "Accounting & Finance Advisor",
-      "description": "Multi-jurisdiction accounting and corporate finance advisory for enterprise finance teams \u2014 revenue recognition (ASC 606/IFRS 15), financial close cycle (month-end/quarter-end/year-end across 8 jurisdictions), treasury and liquidity management (ASC 815/IFRS 9 hedge accounting, ASC 830/IAS 21 FX translation, Basel III LCR/NSFR, Dodd-Frank/EMIR), and FP&A variance analysis with SEC Regulation S-K Item 303 MD&A guidance. Advisory only \u2014 never posts journal entries, executes financial transactions, or writes to any system of record.",
-      "agents": [
-        "accounting-maestro-agent",
-        "accounting-revenue-recognition-advisor-agent",
-        "accounting-close-cycle-advisor-agent",
-        "finance-maestro-agent",
-        "finance-variance-analysis-advisor-agent",
-        "finance-treasury-liquidity-advisor-agent",
-        "accounting-tax-provision-advisor-agent",
-        "accounting-lease-accounting-advisor-agent",
-        "finance-capital-allocation-advisor-agent",
-        "accounting-consolidation-intercompany-advisor-agent",
-        "accounting-fx-translation-advisor-agent",
-        "finance-transfer-pricing-pillar-two-advisor-agent",
-        "accounting-hedge-accounting-advisor-agent",
-        "accounting-indirect-tax-einvoicing-advisor-agent",
-        "accounting-payroll-advisor-agent",
-        "accounting-procure-to-pay-advisor-agent",
-        "accounting-fixed-assets-advisor-agent",
-        "accounting-equity-compensation-advisor-agent",
-        "accounting-business-combinations-advisor-agent",
-        "finance-fpa-forecasting-advisor-agent",
-        "finance-debt-capital-structure-advisor-agent",
-        "finance-working-capital-advisor-agent"
-      ],
-      "skills": [
-        "accounting-maestro",
-        "revenue-recognition-advisor",
-        "close-cycle-advisor",
-        "finance-maestro",
-        "variance-analysis-advisor",
-        "treasury-liquidity-advisor",
-        "tax-provision-advisor",
-        "lease-accounting-advisor",
-        "capital-allocation-advisor",
-        "consolidation-intercompany-advisor",
-        "fx-translation-advisor",
-        "transfer-pricing-pillar-two-advisor",
-        "hedge-accounting-advisor",
-        "indirect-tax-einvoicing-advisor",
-        "payroll-advisor",
-        "procure-to-pay-advisor",
-        "fixed-assets-advisor",
-        "equity-compensation-advisor",
-        "business-combinations-advisor",
-        "fpa-forecasting-advisor",
-        "debt-capital-structure-advisor",
-        "working-capital-advisor"
-      ]
     }
   }
 }