@raishin/vanguard-frontier-agentic 2.9.0 → 2.11.0

package/catalog/install-roles.json

@@ -1,309 +1,112 @@
 {
   "version": "0.1.0",
-  "description": "Role-based agent and skill selections for vfa-export-agents --role installs. Each role maps to the minimal, high-value agent and skill IDs a practitioner in that function needs across all supported cloud providers. Roles are intentionally overlapping \u2014 a single agent may serve multiple roles.",
+  "description": "Role-based agent and skill selections for vfa-export-agents --role installs. Each role maps to the minimal, high-value agent and skill IDs a practitioner in that function needs across all supported cloud providers. Roles are intentionally overlapping — a single agent may serve multiple roles.",
   "roles": {
-    "cloud-security-engineer": {
-      "label": "Cloud Security Engineer",
-      "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
+    "accounting-finance-advisor": {
+      "label": "Accounting & Finance Advisor",
+      "description": "Multi-jurisdiction accounting and corporate finance advisory for enterprise finance teams — revenue recognition (ASC 606/IFRS 15), financial close cycle (month-end/quarter-end/year-end across 8 jurisdictions), treasury and liquidity management (ASC 815/IFRS 9 hedge accounting, ASC 830/IAS 21 FX translation, Basel III LCR/NSFR, Dodd-Frank/EMIR), and FP&A variance analysis with SEC Regulation S-K Item 303 MD&A guidance. Advisory only — never posts journal entries, executes financial transactions, or writes to any system of record.",
       "agents": [
-        "alibaba-actiontrail-audit-analyst-agent",
-        "alibaba-certificate-manager-issuer-review-agent",
-        "alibaba-china-compliance-agent",
-        "alibaba-kms-secret-lifecycle-steward-agent",
-        "alibaba-live-kms-key-mutation-guard-agent",
-        "alibaba-live-oss-bucket-policy-guard-agent",
-        "alibaba-live-ram-policy-change-guard-agent",
-        "alibaba-oss-data-perimeter-governor-agent",
-        "alibaba-ram-iam-review-agent",
-        "alibaba-security-center-hardening-agent",
-        "alibaba-waf-security-review-agent",
-        "aws-bedrock-agent-security-governor-agent",
-        "aws-compliance-evidence-mapper-agent",
-        "aws-iam-least-privilege-review-agent",
-        "aws-kms-secrets-lifecycle-steward-agent",
-        "aws-s3-data-perimeter-governor-agent",
-        "aws-security-posture-hardening-agent",
-        "aws-waf-security-review-agent",
-        "azure-entra-id-specialist-agent",
-        "azure-governance-policy-guardrails-agent",
-        "azure-identity-governance-review-agent",
-        "azure-key-vault-secret-lifecycle-auditor-agent",
-        "azure-live-entra-role-assignment-guard-agent",
-        "azure-live-keyvault-rotation-purge-guard-agent",
-        "azure-live-pim-jit-activation-guard-agent",
-        "azure-rbac-review-agent",
-        "azure-role-selector-agent",
-        "azure-security-posture-hardening-agent",
-        "azure-waf-security-review-agent",
-        "contabo-security-hardening-agent",
-        "gcp-certificate-manager-issuer-review-agent",
-        "gcp-cloud-auth-advisor-agent",
-        "gcp-compliance-assured-workloads-agent",
-        "gcp-gcs-data-perimeter-governor-agent",
-        "gcp-iam-least-privilege-review-agent",
-        "gcp-live-bigquery-dataset-deletion-guard-agent",
-        "gcp-live-iam-policy-change-guard-agent",
-        "gcp-live-kms-key-destruction-guard-agent",
-        "gcp-secret-kms-lifecycle-steward-agent",
-        "gcp-security-posture-hardening-agent",
-        "gcp-vpc-service-controls-architect-agent",
-        "gcp-waf-security-review-agent",
-        "huawei-certificate-manager-issuer-review-agent",
-        "huawei-compliance-sovereignty-agent",
-        "huawei-dew-kms-lifecycle-steward-agent",
-        "huawei-iam-least-privilege-review-agent",
-        "huawei-live-iam-policy-change-guard-agent",
-        "huawei-live-kms-key-destruction-guard-agent",
-        "huawei-live-obs-bucket-policy-guard-agent",
-        "huawei-obs-data-perimeter-governor-agent",
-        "huawei-secmaster-security-operations-agent",
-        "huawei-waf-security-review-agent",
-        "ionos-security-compliance-reviewer-agent",
-        "kubernetes-live-rbac-mutation-guard-agent",
-        "kubernetes-psa-review-agent",
-        "kubernetes-rbac-review-agent",
-        "kubernetes-workload-identity-review-agent",
-        "kyverno-policy-review-agent",
+        "accounting-business-combinations-advisor-agent",
+        "accounting-close-cycle-advisor-agent",
+        "accounting-consolidation-intercompany-advisor-agent",
+        "accounting-equity-compensation-advisor-agent",
+        "accounting-fixed-assets-advisor-agent",
+        "accounting-fx-translation-advisor-agent",
+        "accounting-hedge-accounting-advisor-agent",
+        "accounting-indirect-tax-einvoicing-advisor-agent",
+        "accounting-lease-accounting-advisor-agent",
+        "accounting-maestro-agent",
+        "accounting-payroll-advisor-agent",
+        "accounting-procure-to-pay-advisor-agent",
+        "accounting-revenue-recognition-advisor-agent",
+        "accounting-tax-provision-advisor-agent",
+        "finance-capital-allocation-advisor-agent",
+        "finance-debt-capital-structure-advisor-agent",
+        "finance-fpa-forecasting-advisor-agent",
+        "finance-maestro-agent",
+        "finance-transfer-pricing-pillar-two-advisor-agent",
+        "finance-treasury-liquidity-advisor-agent",
+        "finance-variance-analysis-advisor-agent",
+        "finance-working-capital-advisor-agent",
+        "netsuite-audit-controls-sox-agent",
+        "netsuite-bi-reporting-agent",
+        "netsuite-data-governance-privacy-agent",
+        "netsuite-financial-foundations-agent",
+        "netsuite-identity-access-role-permission-agent"
+      ],
+      "skills": [
+        "accounting-maestro",
+        "business-combinations-advisor",
+        "capital-allocation-advisor",
+        "close-cycle-advisor",
+        "consolidation-intercompany-advisor",
+        "debt-capital-structure-advisor",
+        "equity-compensation-advisor",
+        "finance-maestro",
+        "fixed-assets-advisor",
+        "fpa-forecasting-advisor",
+        "fx-translation-advisor",
+        "hedge-accounting-advisor",
+        "indirect-tax-einvoicing-advisor",
+        "lease-accounting-advisor",
+        "netsuite-audit-controls-sox-skill",
+        "netsuite-bi-reporting-skill",
+        "netsuite-data-governance-privacy-skill",
+        "netsuite-financial-foundations-skill",
+        "netsuite-identity-access-role-permission-skill",
+        "payroll-advisor",
+        "procure-to-pay-advisor",
+        "revenue-recognition-advisor",
+        "tax-provision-advisor",
+        "transfer-pricing-pillar-two-advisor",
+        "treasury-liquidity-advisor",
+        "variance-analysis-advisor",
+        "working-capital-advisor"
+      ]
+    },
+    "cloud-ai-platform-engineer": {
+      "label": "Cloud AI Platform Engineer",
+      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
+      "agents": [
+        "gcp-alloydb-ai-developer-agent",
+        "gcp-gemini-api-developer-agent",
+        "gcp-vertex-ai-mlops-engineer-agent",
+        "huawei-modelarts-mlops-engineer-agent",
+        "nvidia-agentic-ai-platform-review-agent",
+        "nvidia-ai-infrastructure-operations-agent",
+        "nvidia-ai-networking-fabric-review-agent",
+        "nvidia-ai-operations-day2-agent",
+        "nvidia-cuda-kernel-performance-review-agent",
+        "nvidia-generative-ai-platform-review-agent",
         "nvidia-gpu-operator-kubernetes-hardening-agent",
+        "nvidia-maestro-agent",
         "nvidia-model-promotion-gatekeeper-agent",
         "nvidia-ngc-nim-supply-chain-governor-agent",
-        "oci-cloud-guard-responder-agent",
-        "oci-identity-access-governor-agent",
-        "oci-live-iam-policy-compartment-guard-agent",
-        "oci-live-vault-key-destruction-guard-agent",
-        "oci-security-compliance-reviewer-agent",
-        "oci-waf-security-review-agent",
-        "ovhcloud-iam-policy-review-agent",
-        "ovhcloud-live-kms-key-destruction-guard-agent",
-        "scaleway-iam-policy-review-agent"
+        "nvidia-tensorrt-llm-deployment-review-agent",
+        "nvidia-triton-inference-serving-review-agent"
       ],
       "skills": [
-        "alibaba-actiontrail-audit-analyst",
-        "alibaba-certificate-manager-issuer-review",
-        "alibaba-china-compliance",
-        "alibaba-kms-secret-lifecycle-steward",
-        "alibaba-live-kms-key-mutation-guard",
-        "alibaba-live-oss-bucket-policy-guard",
-        "alibaba-live-ram-policy-change-guard",
-        "alibaba-oss-data-perimeter-governor",
-        "alibaba-ram-iam-review",
-        "alibaba-security-center-hardening",
-        "alibaba-waf-security-review",
-        "aws-bedrock-agent-security-governor",
-        "aws-compliance-evidence-mapper",
-        "aws-iam-least-privilege-review",
-        "aws-kms-secrets-lifecycle-steward",
-        "aws-s3-data-perimeter-governor",
-        "aws-security-posture-hardening",
-        "aws-waf-security-review",
-        "azure-entra-id-specialist",
-        "azure-governance-policy-guardrails",
-        "azure-identity-governance-review",
-        "azure-key-vault-secret-lifecycle-auditor",
-        "azure-live-entra-role-assignment-guard",
-        "azure-live-keyvault-rotation-purge-guard",
-        "azure-live-pim-jit-activation-guard",
-        "azure-rbac-review",
-        "azure-role-selector",
-        "azure-security-posture-hardening",
-        "azure-waf-security-review",
-        "contabo-security-hardening",
-        "gcp-certificate-manager-issuer-review",
-        "gcp-cloud-auth-advisor",
-        "gcp-compliance-assured-workloads",
-        "gcp-gcs-data-perimeter-governor",
-        "gcp-iam-least-privilege-review",
-        "gcp-live-bigquery-dataset-deletion-guard",
-        "gcp-live-iam-policy-change-guard",
-        "gcp-live-kms-key-destruction-guard",
-        "gcp-secret-kms-lifecycle-steward",
-        "gcp-security-posture-hardening",
-        "gcp-vpc-service-controls-architect",
-        "gcp-waf-security-review",
-        "huawei-certificate-manager-issuer-review",
-        "huawei-compliance-sovereignty",
-        "huawei-dew-kms-lifecycle-steward",
-        "huawei-iam-least-privilege-review",
-        "huawei-live-iam-policy-change-guard",
-        "huawei-live-kms-key-destruction-guard",
-        "huawei-live-obs-bucket-policy-guard",
-        "huawei-obs-data-perimeter-governor",
-        "huawei-secmaster-security-operations",
-        "huawei-waf-security-review",
-        "ionos-security-compliance-reviewer",
-        "kubernetes-live-rbac-mutation-guard",
-        "kubernetes-pod-security-admission-review",
-        "kubernetes-rbac-review",
-        "kubernetes-workload-identity-review",
-        "kyverno-policy-review",
+        "gcp-alloydb-ai-developer",
+        "gcp-gemini-api-developer",
+        "gcp-vertex-ai-mlops-engineer",
+        "huawei-modelarts-mlops-engineer",
+        "nvidia-agentic-ai-platform-review",
+        "nvidia-ai-infrastructure-operations",
+        "nvidia-ai-networking-fabric-review",
+        "nvidia-ai-operations-day2",
+        "nvidia-cuda-kernel-performance-review",
+        "nvidia-generative-ai-platform-review",
         "nvidia-gpu-operator-kubernetes-hardening",
+        "nvidia-maestro",
         "nvidia-model-promotion-gatekeeper",
         "nvidia-ngc-nim-supply-chain-governor",
-        "oci-cloud-guard-responder",
-        "oci-identity-access-governor",
-        "oci-live-iam-policy-compartment-guard",
-        "oci-live-vault-key-destruction-guard",
-        "oci-security-compliance-reviewer",
-        "oci-waf-security-review",
-        "ovhcloud-iam-policy-review",
-        "ovhcloud-live-kms-key-destruction-guard",
-        "scaleway-iam-policy-review"
+        "nvidia-tensorrt-llm-deployment-review",
+        "nvidia-triton-inference-serving-review"
       ]
     },
-    "cloud-platform-engineer": {
-      "label": "Cloud Platform Engineer",
-      "description": "Infrastructure operators, IaC safety review, landing zones, networking, container platform operations, live deployment guards across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Terraform.",
-      "agents": [
-        "alibaba-ack-container-platform-operator-agent",
-        "alibaba-ecs-compute-operator-agent",
-        "alibaba-iac-change-safety-review-agent",
-        "alibaba-landing-zone-architect-agent",
-        "alibaba-live-ack-rollout-guard-agent",
-        "alibaba-load-balancer-traffic-engineer-agent",
-        "alibaba-network-architect-agent",
-        "alibaba-oss-storage-steward-agent",
-        "aws-data-protection-backup-steward-agent",
-        "aws-ec2-compute-operations-steward-agent",
-        "aws-ecs-fargate-platform-operator-agent",
-        "aws-eks-platform-operator-agent",
-        "aws-iac-change-safety-review-agent",
-        "aws-iac-patch-executor-agent",
-        "aws-landing-zone-governor-agent",
-        "aws-live-iac-change-guard-agent",
-        "aws-network-architect-agent",
-        "azure-aks-platform-operator-agent",
-        "azure-landing-zone-architect-agent",
-        "azure-live-aks-rollout-guard-agent",
-        "azure-live-arm-deployment-stack-guard-agent",
-        "azure-network-topology-review-agent",
-        "azure-private-endpoint-adoption-planner-agent",
-        "azure-subscription-resource-organization-agent",
-        "contabo-live-instance-lifecycle-guard-agent",
-        "contabo-live-storage-operations-guard-agent",
-        "gcp-compute-engine-operator-agent",
-        "gcp-gke-platform-operator-agent",
-        "gcp-iac-change-safety-review-agent",
-        "gcp-landing-zone-architect-agent",
-        "gcp-live-gke-rollout-guard-agent",
-        "gcp-load-balancer-traffic-engineer-agent",
-        "gcp-network-architect-agent",
-        "hetzner-infrastructure-reviewer-agent",
-        "hetzner-live-firewall-rule-guard-agent",
-        "hetzner-live-server-lifecycle-guard-agent",
-        "huawei-cce-container-platform-operator-agent",
-        "huawei-ecs-compute-operator-agent",
-        "huawei-iac-change-safety-review-agent",
-        "huawei-ief-edge-computing-operator-agent",
-        "huawei-landing-zone-architect-agent",
-        "huawei-live-cce-rollout-guard-agent",
-        "huawei-load-balancer-traffic-engineer-agent",
-        "huawei-network-architect-agent",
-        "huawei-obs-storage-steward-agent",
-        "ionos-datacenter-designer-reviewer-agent",
-        "ionos-kubernetes-platform-operator-agent",
-        "nvidia-ai-infrastructure-operations-agent",
-        "nvidia-ai-networking-fabric-review-agent",
-        "nvidia-ai-operations-day2-agent",
-        "nvidia-gpu-operator-kubernetes-hardening-agent",
-        "oci-compute-instance-agent-operator-agent",
-        "oci-compute-platform-operator-agent",
-        "oci-devops-container-platform-engineer-agent",
-        "oci-fusion-apps-environment-operator-agent",
-        "oci-iot-digital-twin-engineer-agent",
-        "oci-live-network-security-rule-guard-agent",
-        "oci-live-oke-rollout-guard-agent",
-        "oci-live-resource-manager-stack-guard-agent",
-        "oci-load-balancer-traffic-engineer-agent",
-        "oci-network-architect-agent",
-        "oci-storage-backup-steward-agent",
-        "ovhcloud-kubernetes-platform-operator-agent",
-        "ovhcloud-network-architect-agent",
-        "scaleway-kapsule-platform-operator-agent",
-        "scaleway-live-kapsule-rollout-guard-agent",
-        "scaleway-network-architect-agent",
-        "terraform-maestro-agent",
-        "terraform-reviewer"
-      ],
-      "skills": [
-        "alibaba-ack-container-platform-operator",
-        "alibaba-ecs-compute-operator",
-        "alibaba-iac-change-safety-review",
-        "alibaba-landing-zone-architect",
-        "alibaba-live-ack-rollout-guard",
-        "alibaba-load-balancer-traffic-engineer",
-        "alibaba-network-architect",
-        "alibaba-oss-storage-steward",
-        "argocd-gitops-review",
-        "aws-data-protection-backup-steward",
-        "aws-ec2-compute-operations-steward",
-        "aws-ecs-fargate-platform-operator",
-        "aws-eks-platform-operator",
-        "aws-iac-change-safety-review",
-        "aws-iac-patch-executor",
-        "aws-landing-zone-governor",
-        "aws-live-iac-change-guard",
-        "aws-network-architect",
-        "azure-aks-platform-operator",
-        "azure-landing-zone-architect",
-        "azure-live-aks-rollout-guard",
-        "azure-live-arm-deployment-stack-guard",
-        "azure-network-topology-review",
-        "azure-private-endpoint-adoption-planner",
-        "azure-subscription-resource-organization",
-        "cilium-network-policy-review",
-        "contabo-live-instance-lifecycle-guard",
-        "contabo-live-storage-operations-guard",
-        "gcp-compute-engine-operator",
-        "gcp-gke-platform-operator",
-        "gcp-iac-change-safety-review",
-        "gcp-landing-zone-architect",
-        "gcp-live-gke-rollout-guard",
-        "gcp-load-balancer-traffic-engineer",
-        "gcp-network-architect",
-        "hetzner-infrastructure-reviewer",
-        "hetzner-live-firewall-rule-guard",
-        "hetzner-live-server-lifecycle-guard",
-        "huawei-cce-container-platform-operator",
-        "huawei-ecs-compute-operator",
-        "huawei-iac-change-safety-review",
-        "huawei-ief-edge-computing-operator",
-        "huawei-landing-zone-architect",
-        "huawei-live-cce-rollout-guard",
-        "huawei-load-balancer-traffic-engineer",
-        "huawei-network-architect",
-        "huawei-obs-storage-steward",
-        "ionos-datacenter-designer-reviewer",
-        "ionos-kubernetes-platform-operator",
-        "istio-ambient-mesh-review",
-        "kubernetes-pod-security-admission-review",
-        "kubernetes-workload-identity-review",
-        "nvidia-ai-infrastructure-operations",
-        "nvidia-ai-networking-fabric-review",
-        "nvidia-ai-operations-day2",
-        "nvidia-gpu-operator-kubernetes-hardening",
-        "oci-compute-instance-agent-operator",
-        "oci-compute-platform-operator",
-        "oci-devops-container-platform-engineer",
-        "oci-fusion-apps-environment-operator",
-        "oci-iot-digital-twin-engineer",
-        "oci-live-network-security-rule-guard",
-        "oci-live-oke-rollout-guard",
-        "oci-live-resource-manager-stack-guard",
-        "oci-load-balancer-traffic-engineer",
-        "oci-network-architect",
-        "oci-storage-backup-steward",
-        "opentelemetry-collector-config-review",
-        "ovhcloud-kubernetes-platform-operator",
-        "ovhcloud-network-architect",
-        "scaleway-kapsule-platform-operator",
-        "scaleway-live-kapsule-rollout-guard",
-        "scaleway-network-architect",
-        "terraform-maestro"
-      ]
-    },
-    "cloud-dba": {
-      "label": "Cloud Database Administrator",
-      "description": "Database architects, performance investigators, DBA operators, replication, and live database lifecycle guards across AWS RDS/DynamoDB, Azure CosmosDB, OCI Autonomous/Exadata/MySQL, GCP AlloyDB/Spanner, Alibaba PolarDB/RDS, and Huawei GaussDB.",
+    "cloud-dba": {
+      "label": "Cloud Database Administrator",
+      "description": "Database architects, performance investigators, DBA operators, replication, and live database lifecycle guards across AWS RDS/DynamoDB, Azure CosmosDB, OCI Autonomous/Exadata/MySQL, GCP AlloyDB/Spanner, Alibaba PolarDB/RDS, and Huawei GaussDB.",
       "agents": [
         "alibaba-analyticdb-realtime-agent",
         "alibaba-live-rds-polardb-mutation-guard-agent",
@@ -362,6 +165,138 @@
         "oci-recovery-service-operator"
       ]
     },
+    "cloud-devops-engineer": {
+      "label": "Cloud DevOps Engineer",
+      "description": "CI/CD release engineers, deployment and rollout operators, live pipeline approval guards, serverless production readiness, observability responders, and artifact governance across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
+      "agents": [
+        "alibaba-daily-operations-briefing-coordinator-agent",
+        "alibaba-devops-cicd-operator-agent",
+        "alibaba-function-serverless-operator-agent",
+        "alibaba-mse-microservice-engine-agent",
+        "alibaba-observability-incident-responder-agent",
+        "alibaba-registry-artifact-governor-agent",
+        "alibaba-serverless-production-readiness-agent",
+        "alibaba-support-incident-coordinator-agent",
+        "alibaba-ticket-triage-escalation-coordinator-agent",
+        "alibaba-waf-reliability-review-agent",
+        "aws-ci-cd-release-engineer-agent",
+        "aws-daily-operations-briefing-coordinator-agent",
+        "aws-deployment-hotfix-operator-agent",
+        "aws-devops-agent-skill-designer-agent",
+        "aws-ecs-service-remediation-operator-agent",
+        "aws-live-deployment-guarded-operator-agent",
+        "aws-live-ecs-rollout-guard-agent",
+        "aws-live-pipeline-approval-operator-agent",
+        "aws-live-serverless-release-guard-agent",
+        "aws-non-destructive-task-automation-advisor-agent",
+        "aws-observability-incident-responder-agent",
+        "aws-pipeline-fix-operator-agent",
+        "aws-serverless-production-readiness-agent",
+        "aws-serverless-rollout-corrector-agent",
+        "aws-ticket-triage-escalation-coordinator-agent",
+        "aws-waf-reliability-review-agent",
+        "azure-app-service-production-readiness-agent",
+        "azure-live-app-service-slot-swap-guard-agent",
+        "azure-observability-investigator-agent",
+        "azure-platform-automation-devops-agent",
+        "azure-resource-health-incident-triage-agent",
+        "azure-waf-reliability-review-agent",
+        "gcp-apigee-api-platform-operator-agent",
+        "gcp-cloud-run-functions-operator-agent",
+        "gcp-cloudbuild-deploy-cicd-operator-agent",
+        "gcp-daily-operations-briefing-coordinator-agent",
+        "gcp-data-pipeline-engineer-agent",
+        "gcp-firebase-developer-agent",
+        "gcp-live-cloud-run-traffic-migration-guard-agent",
+        "gcp-networking-observability-agent",
+        "gcp-observability-incident-responder-agent",
+        "gcp-registry-artifact-governor-agent",
+        "gcp-serverless-production-readiness-agent",
+        "gcp-support-incident-coordinator-agent",
+        "gcp-ticket-triage-escalation-coordinator-agent",
+        "gcp-waf-reliability-review-agent",
+        "huawei-codearts-devops-operator-agent",
+        "huawei-daily-operations-briefing-coordinator-agent",
+        "huawei-functiongraph-serverless-operator-agent",
+        "huawei-observability-incident-responder-agent",
+        "huawei-registry-artifact-governor-agent",
+        "huawei-serverless-production-readiness-agent",
+        "huawei-support-incident-coordinator-agent",
+        "huawei-ticket-triage-escalation-coordinator-agent",
+        "huawei-waf-reliability-review-agent",
+        "oci-devops-container-platform-engineer-agent",
+        "oci-live-oke-rollout-guard-agent",
+        "oci-observability-incident-responder-agent",
+        "oci-registry-artifact-governor-agent",
+        "oci-support-incident-coordinator-agent",
+        "oci-waf-reliability-review-agent"
+      ],
+      "skills": [
+        "alibaba-daily-operations-briefing-coordinator",
+        "alibaba-devops-cicd-operator",
+        "alibaba-function-serverless-operator",
+        "alibaba-mse-microservice-engine",
+        "alibaba-observability-incident-responder",
+        "alibaba-registry-artifact-governor",
+        "alibaba-serverless-production-readiness",
+        "alibaba-support-incident-coordinator",
+        "alibaba-ticket-triage-escalation-coordinator",
+        "alibaba-waf-reliability-review",
+        "argocd-gitops-review",
+        "aws-ci-cd-release-engineer",
+        "aws-daily-operations-briefing-coordinator",
+        "aws-deployment-hotfix-operator",
+        "aws-devops-agent-skill-designer",
+        "aws-ecs-service-remediation-operator",
+        "aws-live-deployment-guarded-operator",
+        "aws-live-ecs-rollout-guard",
+        "aws-live-pipeline-approval-operator",
+        "aws-live-serverless-release-guard",
+        "aws-non-destructive-task-automation-advisor",
+        "aws-observability-incident-responder",
+        "aws-pipeline-fix-operator",
+        "aws-serverless-production-readiness",
+        "aws-serverless-rollout-corrector",
+        "aws-ticket-triage-escalation-coordinator",
+        "aws-waf-reliability-review",
+        "azure-app-service-production-readiness",
+        "azure-live-app-service-slot-swap-guard",
+        "azure-observability-investigator",
+        "azure-platform-automation-devops",
+        "azure-resource-health-incident-triage",
+        "azure-waf-reliability-review",
+        "gcp-apigee-api-platform-operator",
+        "gcp-cloud-run-functions-operator",
+        "gcp-cloudbuild-deploy-cicd-operator",
+        "gcp-daily-operations-briefing-coordinator",
+        "gcp-data-pipeline-engineer",
+        "gcp-firebase-developer",
+        "gcp-live-cloud-run-traffic-migration-guard",
+        "gcp-networking-observability",
+        "gcp-observability-incident-responder",
+        "gcp-registry-artifact-governor",
+        "gcp-serverless-production-readiness",
+        "gcp-support-incident-coordinator",
+        "gcp-ticket-triage-escalation-coordinator",
+        "gcp-waf-reliability-review",
+        "huawei-codearts-devops-operator",
+        "huawei-daily-operations-briefing-coordinator",
+        "huawei-functiongraph-serverless-operator",
+        "huawei-observability-incident-responder",
+        "huawei-registry-artifact-governor",
+        "huawei-serverless-production-readiness",
+        "huawei-support-incident-coordinator",
+        "huawei-ticket-triage-escalation-coordinator",
+        "huawei-waf-reliability-review",
+        "oci-devops-container-platform-engineer",
+        "oci-live-oke-rollout-guard",
+        "oci-observability-incident-responder",
+        "oci-registry-artifact-governor",
+        "oci-support-incident-coordinator",
+        "oci-waf-reliability-review",
+        "opentelemetry-collector-config-review"
+      ]
+    },
     "cloud-finops-analyst": {
       "label": "Cloud FinOps Analyst",
       "description": "Cost optimization governors, anomaly watchers, budget runaway guards, capacity planning, and cross-provider cost estimation across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and FinOps-neutral tools.",
@@ -443,6 +378,305 @@
         "scaleway-cost-optimizer"
       ]
     },
+    "cloud-platform-engineer": {
+      "label": "Cloud Platform Engineer",
+      "description": "Infrastructure operators, IaC safety review, landing zones, networking, container platform operations, live deployment guards across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Terraform.",
+      "agents": [
+        "alibaba-ack-container-platform-operator-agent",
+        "alibaba-ecs-compute-operator-agent",
+        "alibaba-iac-change-safety-review-agent",
+        "alibaba-landing-zone-architect-agent",
+        "alibaba-live-ack-rollout-guard-agent",
+        "alibaba-load-balancer-traffic-engineer-agent",
+        "alibaba-network-architect-agent",
+        "alibaba-oss-storage-steward-agent",
+        "aws-data-protection-backup-steward-agent",
+        "aws-ec2-compute-operations-steward-agent",
+        "aws-ecs-fargate-platform-operator-agent",
+        "aws-eks-platform-operator-agent",
+        "aws-iac-change-safety-review-agent",
+        "aws-iac-patch-executor-agent",
+        "aws-landing-zone-governor-agent",
+        "aws-live-iac-change-guard-agent",
+        "aws-network-architect-agent",
+        "azure-aks-platform-operator-agent",
+        "azure-landing-zone-architect-agent",
+        "azure-live-aks-rollout-guard-agent",
+        "azure-live-arm-deployment-stack-guard-agent",
+        "azure-network-topology-review-agent",
+        "azure-private-endpoint-adoption-planner-agent",
+        "azure-subscription-resource-organization-agent",
+        "contabo-live-instance-lifecycle-guard-agent",
+        "contabo-live-storage-operations-guard-agent",
+        "gcp-compute-engine-operator-agent",
+        "gcp-gke-platform-operator-agent",
+        "gcp-iac-change-safety-review-agent",
+        "gcp-landing-zone-architect-agent",
+        "gcp-live-gke-rollout-guard-agent",
+        "gcp-load-balancer-traffic-engineer-agent",
+        "gcp-network-architect-agent",
+        "hetzner-infrastructure-reviewer-agent",
+        "hetzner-live-firewall-rule-guard-agent",
+        "hetzner-live-server-lifecycle-guard-agent",
+        "huawei-cce-container-platform-operator-agent",
+        "huawei-ecs-compute-operator-agent",
+        "huawei-iac-change-safety-review-agent",
+        "huawei-ief-edge-computing-operator-agent",
+        "huawei-landing-zone-architect-agent",
+        "huawei-live-cce-rollout-guard-agent",
+        "huawei-load-balancer-traffic-engineer-agent",
+        "huawei-network-architect-agent",
+        "huawei-obs-storage-steward-agent",
+        "ionos-datacenter-designer-reviewer-agent",
+        "ionos-kubernetes-platform-operator-agent",
+        "nvidia-ai-infrastructure-operations-agent",
+        "nvidia-ai-networking-fabric-review-agent",
+        "nvidia-ai-operations-day2-agent",
+        "nvidia-gpu-operator-kubernetes-hardening-agent",
+        "oci-compute-instance-agent-operator-agent",
+        "oci-compute-platform-operator-agent",
+        "oci-devops-container-platform-engineer-agent",
+        "oci-fusion-apps-environment-operator-agent",
+        "oci-iot-digital-twin-engineer-agent",
+        "oci-live-network-security-rule-guard-agent",
+        "oci-live-oke-rollout-guard-agent",
+        "oci-live-resource-manager-stack-guard-agent",
+        "oci-load-balancer-traffic-engineer-agent",
+        "oci-network-architect-agent",
+        "oci-storage-backup-steward-agent",
+        "ovhcloud-kubernetes-platform-operator-agent",
+        "ovhcloud-network-architect-agent",
+        "scaleway-kapsule-platform-operator-agent",
+        "scaleway-live-kapsule-rollout-guard-agent",
+        "scaleway-network-architect-agent",
+        "terraform-maestro-agent",
+        "terraform-reviewer"
+      ],
+      "skills": [
+        "alibaba-ack-container-platform-operator",
+        "alibaba-ecs-compute-operator",
+        "alibaba-iac-change-safety-review",
+        "alibaba-landing-zone-architect",
+        "alibaba-live-ack-rollout-guard",
+        "alibaba-load-balancer-traffic-engineer",
+        "alibaba-network-architect",
+        "alibaba-oss-storage-steward",
+        "argocd-gitops-review",
+        "aws-data-protection-backup-steward",
+        "aws-ec2-compute-operations-steward",
+        "aws-ecs-fargate-platform-operator",
+        "aws-eks-platform-operator",
+        "aws-iac-change-safety-review",
+        "aws-iac-patch-executor",
+        "aws-landing-zone-governor",
+        "aws-live-iac-change-guard",
+        "aws-network-architect",
+        "azure-aks-platform-operator",
+        "azure-landing-zone-architect",
+        "azure-live-aks-rollout-guard",
+        "azure-live-arm-deployment-stack-guard",
+        "azure-network-topology-review",
+        "azure-private-endpoint-adoption-planner",
+        "azure-subscription-resource-organization",
+        "cilium-network-policy-review",
+        "contabo-live-instance-lifecycle-guard",
+        "contabo-live-storage-operations-guard",
+        "gcp-compute-engine-operator",
+        "gcp-gke-platform-operator",
+        "gcp-iac-change-safety-review",
+        "gcp-landing-zone-architect",
+        "gcp-live-gke-rollout-guard",
+        "gcp-load-balancer-traffic-engineer",
+        "gcp-network-architect",
+        "hetzner-infrastructure-reviewer",
+        "hetzner-live-firewall-rule-guard",
+        "hetzner-live-server-lifecycle-guard",
+        "huawei-cce-container-platform-operator",
+        "huawei-ecs-compute-operator",
+        "huawei-iac-change-safety-review",
+        "huawei-ief-edge-computing-operator",
+        "huawei-landing-zone-architect",
+        "huawei-live-cce-rollout-guard",
+        "huawei-load-balancer-traffic-engineer",
+        "huawei-network-architect",
+        "huawei-obs-storage-steward",
+        "ionos-datacenter-designer-reviewer",
+        "ionos-kubernetes-platform-operator",
+        "istio-ambient-mesh-review",
+        "kubernetes-pod-security-admission-review",
+        "kubernetes-workload-identity-review",
+        "nvidia-ai-infrastructure-operations",
+        "nvidia-ai-networking-fabric-review",
+        "nvidia-ai-operations-day2",
+        "nvidia-gpu-operator-kubernetes-hardening",
+        "oci-compute-instance-agent-operator",
+        "oci-compute-platform-operator",
+        "oci-devops-container-platform-engineer",
+        "oci-fusion-apps-environment-operator",
+        "oci-iot-digital-twin-engineer",
+        "oci-live-network-security-rule-guard",
+        "oci-live-oke-rollout-guard",
+        "oci-live-resource-manager-stack-guard",
+        "oci-load-balancer-traffic-engineer",
+        "oci-network-architect",
+        "oci-storage-backup-steward",
+        "opentelemetry-collector-config-review",
+        "ovhcloud-kubernetes-platform-operator",
+        "ovhcloud-network-architect",
+        "scaleway-kapsule-platform-operator",
+        "scaleway-live-kapsule-rollout-guard",
+        "scaleway-network-architect",
+        "terraform-maestro"
+      ]
+    },
+    "cloud-security-engineer": {
+      "label": "Cloud Security Engineer",
+      "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
+      "agents": [
+        "alibaba-actiontrail-audit-analyst-agent",
+        "alibaba-certificate-manager-issuer-review-agent",
+        "alibaba-china-compliance-agent",
+        "alibaba-kms-secret-lifecycle-steward-agent",
+        "alibaba-live-kms-key-mutation-guard-agent",
+        "alibaba-live-oss-bucket-policy-guard-agent",
+        "alibaba-live-ram-policy-change-guard-agent",
+        "alibaba-oss-data-perimeter-governor-agent",
+        "alibaba-ram-iam-review-agent",
+        "alibaba-security-center-hardening-agent",
+        "alibaba-waf-security-review-agent",
+        "aws-bedrock-agent-security-governor-agent",
+        "aws-compliance-evidence-mapper-agent",
+        "aws-iam-least-privilege-review-agent",
+        "aws-kms-secrets-lifecycle-steward-agent",
+        "aws-s3-data-perimeter-governor-agent",
+        "aws-security-posture-hardening-agent",
+        "aws-waf-security-review-agent",
+        "azure-entra-id-specialist-agent",
+        "azure-governance-policy-guardrails-agent",
+        "azure-identity-governance-review-agent",
+        "azure-key-vault-secret-lifecycle-auditor-agent",
+        "azure-live-entra-role-assignment-guard-agent",
+        "azure-live-keyvault-rotation-purge-guard-agent",
+        "azure-live-pim-jit-activation-guard-agent",
+        "azure-rbac-review-agent",
+        "azure-role-selector-agent",
+        "azure-security-posture-hardening-agent",
+        "azure-waf-security-review-agent",
+        "contabo-security-hardening-agent",
+        "gcp-certificate-manager-issuer-review-agent",
+        "gcp-cloud-auth-advisor-agent",
+        "gcp-compliance-assured-workloads-agent",
+        "gcp-gcs-data-perimeter-governor-agent",
+        "gcp-iam-least-privilege-review-agent",
+        "gcp-live-bigquery-dataset-deletion-guard-agent",
+        "gcp-live-iam-policy-change-guard-agent",
+        "gcp-live-kms-key-destruction-guard-agent",
+        "gcp-secret-kms-lifecycle-steward-agent",
+        "gcp-security-posture-hardening-agent",
+        "gcp-vpc-service-controls-architect-agent",
+        "gcp-waf-security-review-agent",
+        "huawei-certificate-manager-issuer-review-agent",
+        "huawei-compliance-sovereignty-agent",
+        "huawei-dew-kms-lifecycle-steward-agent",
+        "huawei-iam-least-privilege-review-agent",
+        "huawei-live-iam-policy-change-guard-agent",
+        "huawei-live-kms-key-destruction-guard-agent",
+        "huawei-live-obs-bucket-policy-guard-agent",
+        "huawei-obs-data-perimeter-governor-agent",
+        "huawei-secmaster-security-operations-agent",
+        "huawei-waf-security-review-agent",
+        "ionos-security-compliance-reviewer-agent",
+        "kubernetes-live-rbac-mutation-guard-agent",
+        "kubernetes-psa-review-agent",
+        "kubernetes-rbac-review-agent",
+        "kubernetes-workload-identity-review-agent",
+        "kyverno-policy-review-agent",
+        "nvidia-gpu-operator-kubernetes-hardening-agent",
+        "nvidia-model-promotion-gatekeeper-agent",
+        "nvidia-ngc-nim-supply-chain-governor-agent",
+        "oci-cloud-guard-responder-agent",
+        "oci-identity-access-governor-agent",
+        "oci-live-iam-policy-compartment-guard-agent",
+        "oci-live-vault-key-destruction-guard-agent",
+        "oci-security-compliance-reviewer-agent",
+        "oci-waf-security-review-agent",
+        "ovhcloud-iam-policy-review-agent",
+        "ovhcloud-live-kms-key-destruction-guard-agent",
+        "scaleway-iam-policy-review-agent"
+      ],
+      "skills": [
+        "alibaba-actiontrail-audit-analyst",
+        "alibaba-certificate-manager-issuer-review",
+        "alibaba-china-compliance",
+        "alibaba-kms-secret-lifecycle-steward",
+        "alibaba-live-kms-key-mutation-guard",
+        "alibaba-live-oss-bucket-policy-guard",
+        "alibaba-live-ram-policy-change-guard",
+        "alibaba-oss-data-perimeter-governor",
+        "alibaba-ram-iam-review",
+        "alibaba-security-center-hardening",
+        "alibaba-waf-security-review",
+        "aws-bedrock-agent-security-governor",
+        "aws-compliance-evidence-mapper",
+        "aws-iam-least-privilege-review",
+        "aws-kms-secrets-lifecycle-steward",
+        "aws-s3-data-perimeter-governor",
+        "aws-security-posture-hardening",
+        "aws-waf-security-review",
+        "azure-entra-id-specialist",
+        "azure-governance-policy-guardrails",
+        "azure-identity-governance-review",
+        "azure-key-vault-secret-lifecycle-auditor",
+        "azure-live-entra-role-assignment-guard",
+        "azure-live-keyvault-rotation-purge-guard",
+        "azure-live-pim-jit-activation-guard",
+        "azure-rbac-review",
+        "azure-role-selector",
+        "azure-security-posture-hardening",
+        "azure-waf-security-review",
+        "contabo-security-hardening",
+        "gcp-certificate-manager-issuer-review",
+        "gcp-cloud-auth-advisor",
+        "gcp-compliance-assured-workloads",
+        "gcp-gcs-data-perimeter-governor",
+        "gcp-iam-least-privilege-review",
+        "gcp-live-bigquery-dataset-deletion-guard",
+        "gcp-live-iam-policy-change-guard",
+        "gcp-live-kms-key-destruction-guard",
+        "gcp-secret-kms-lifecycle-steward",
+        "gcp-security-posture-hardening",
+        "gcp-vpc-service-controls-architect",
+        "gcp-waf-security-review",
+        "huawei-certificate-manager-issuer-review",
+        "huawei-compliance-sovereignty",
+        "huawei-dew-kms-lifecycle-steward",
+        "huawei-iam-least-privilege-review",
+        "huawei-live-iam-policy-change-guard",
+        "huawei-live-kms-key-destruction-guard",
+        "huawei-live-obs-bucket-policy-guard",
+        "huawei-obs-data-perimeter-governor",
+        "huawei-secmaster-security-operations",
+        "huawei-waf-security-review",
+        "ionos-security-compliance-reviewer",
+        "kubernetes-live-rbac-mutation-guard",
+        "kubernetes-pod-security-admission-review",
+        "kubernetes-rbac-review",
+        "kubernetes-workload-identity-review",
+        "kyverno-policy-review",
+        "nvidia-gpu-operator-kubernetes-hardening",
+        "nvidia-model-promotion-gatekeeper",
+        "nvidia-ngc-nim-supply-chain-governor",
+        "oci-cloud-guard-responder",
+        "oci-identity-access-governor",
+        "oci-live-iam-policy-compartment-guard",
+        "oci-live-vault-key-destruction-guard",
+        "oci-security-compliance-reviewer",
+        "oci-waf-security-review",
+        "ovhcloud-iam-policy-review",
+        "ovhcloud-live-kms-key-destruction-guard",
+        "scaleway-iam-policy-review"
+      ]
+    },
     "cloud-solutions-architect": {
       "label": "Cloud Solutions Architect",
       "description": "Solution architects, migration cutover planners, resilience and BCDR reviewers, event-driven architects, AI/generative developers, and multi-cloud designers across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
@@ -543,136 +777,32 @@
         "scaleway-maestro"
       ]
     },
-    "cloud-devops-engineer": {
-      "label": "Cloud DevOps Engineer",
-      "description": "CI/CD release engineers, deployment and rollout operators, live pipeline approval guards, serverless production readiness, observability responders, and artifact governance across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
+    "dotnet-application-review-engineer": {
+      "label": ".NET Application Review Engineer",
+      "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
       "agents": [
-        "alibaba-daily-operations-briefing-coordinator-agent",
-        "alibaba-devops-cicd-operator-agent",
-        "alibaba-function-serverless-operator-agent",
-        "alibaba-mse-microservice-engine-agent",
-        "alibaba-observability-incident-responder-agent",
-        "alibaba-registry-artifact-governor-agent",
-        "alibaba-serverless-production-readiness-agent",
-        "alibaba-support-incident-coordinator-agent",
-        "alibaba-ticket-triage-escalation-coordinator-agent",
-        "alibaba-waf-reliability-review-agent",
-        "aws-ci-cd-release-engineer-agent",
-        "aws-daily-operations-briefing-coordinator-agent",
-        "aws-deployment-hotfix-operator-agent",
-        "aws-devops-agent-skill-designer-agent",
-        "aws-ecs-service-remediation-operator-agent",
-        "aws-live-deployment-guarded-operator-agent",
-        "aws-live-ecs-rollout-guard-agent",
-        "aws-live-pipeline-approval-operator-agent",
-        "aws-live-serverless-release-guard-agent",
-        "aws-non-destructive-task-automation-advisor-agent",
-        "aws-observability-incident-responder-agent",
-        "aws-pipeline-fix-operator-agent",
-        "aws-serverless-production-readiness-agent",
-        "aws-serverless-rollout-corrector-agent",
-        "aws-ticket-triage-escalation-coordinator-agent",
-        "aws-waf-reliability-review-agent",
-        "azure-app-service-production-readiness-agent",
-        "azure-live-app-service-slot-swap-guard-agent",
-        "azure-observability-investigator-agent",
-        "azure-platform-automation-devops-agent",
-        "azure-resource-health-incident-triage-agent",
-        "azure-waf-reliability-review-agent",
-        "gcp-apigee-api-platform-operator-agent",
-        "gcp-cloud-run-functions-operator-agent",
-        "gcp-cloudbuild-deploy-cicd-operator-agent",
-        "gcp-daily-operations-briefing-coordinator-agent",
-        "gcp-data-pipeline-engineer-agent",
-        "gcp-firebase-developer-agent",
-        "gcp-live-cloud-run-traffic-migration-guard-agent",
-        "gcp-networking-observability-agent",
-        "gcp-observability-incident-responder-agent",
-        "gcp-registry-artifact-governor-agent",
-        "gcp-serverless-production-readiness-agent",
-        "gcp-support-incident-coordinator-agent",
-        "gcp-ticket-triage-escalation-coordinator-agent",
-        "gcp-waf-reliability-review-agent",
-        "huawei-codearts-devops-operator-agent",
-        "huawei-daily-operations-briefing-coordinator-agent",
-        "huawei-functiongraph-serverless-operator-agent",
-        "huawei-observability-incident-responder-agent",
-        "huawei-registry-artifact-governor-agent",
-        "huawei-serverless-production-readiness-agent",
-        "huawei-support-incident-coordinator-agent",
-        "huawei-ticket-triage-escalation-coordinator-agent",
-        "huawei-waf-reliability-review-agent",
-        "oci-devops-container-platform-engineer-agent",
-        "oci-live-oke-rollout-guard-agent",
-        "oci-observability-incident-responder-agent",
-        "oci-registry-artifact-governor-agent",
-        "oci-support-incident-coordinator-agent",
-        "oci-waf-reliability-review-agent"
+        "dotnet-maestro-agent",
+        "dotnet-csharp-runtime-review-agent",
+        "dotnet-aspnetcore-api-review-agent",
+        "dotnet-aspnetcore-identity-authz-review-agent",
+        "dotnet-efcore-data-access-review-agent",
+        "dotnet-testing-quality-review-agent",
+        "dotnet-supply-chain-review-agent",
+        "dotnet-performance-aot-review-agent",
+        "dotnet-observability-otel-review-agent",
+        "dotnet-aspire-cloud-native-review-agent"
       ],
       "skills": [
-        "alibaba-daily-operations-briefing-coordinator",
-        "alibaba-devops-cicd-operator",
-        "alibaba-function-serverless-operator",
-        "alibaba-mse-microservice-engine",
-        "alibaba-observability-incident-responder",
-        "alibaba-registry-artifact-governor",
-        "alibaba-serverless-production-readiness",
-        "alibaba-support-incident-coordinator",
-        "alibaba-ticket-triage-escalation-coordinator",
-        "alibaba-waf-reliability-review",
-        "argocd-gitops-review",
-        "aws-ci-cd-release-engineer",
-        "aws-daily-operations-briefing-coordinator",
-        "aws-deployment-hotfix-operator",
-        "aws-devops-agent-skill-designer",
-        "aws-ecs-service-remediation-operator",
-        "aws-live-deployment-guarded-operator",
-        "aws-live-ecs-rollout-guard",
-        "aws-live-pipeline-approval-operator",
-        "aws-live-serverless-release-guard",
-        "aws-non-destructive-task-automation-advisor",
-        "aws-observability-incident-responder",
-        "aws-pipeline-fix-operator",
-        "aws-serverless-production-readiness",
-        "aws-serverless-rollout-corrector",
-        "aws-ticket-triage-escalation-coordinator",
-        "aws-waf-reliability-review",
-        "azure-app-service-production-readiness",
-        "azure-live-app-service-slot-swap-guard",
-        "azure-observability-investigator",
-        "azure-platform-automation-devops",
-        "azure-resource-health-incident-triage",
-        "azure-waf-reliability-review",
-        "gcp-apigee-api-platform-operator",
-        "gcp-cloud-run-functions-operator",
-        "gcp-cloudbuild-deploy-cicd-operator",
-        "gcp-daily-operations-briefing-coordinator",
-        "gcp-data-pipeline-engineer",
-        "gcp-firebase-developer",
-        "gcp-live-cloud-run-traffic-migration-guard",
-        "gcp-networking-observability",
-        "gcp-observability-incident-responder",
-        "gcp-registry-artifact-governor",
-        "gcp-serverless-production-readiness",
-        "gcp-support-incident-coordinator",
-        "gcp-ticket-triage-escalation-coordinator",
-        "gcp-waf-reliability-review",
-        "huawei-codearts-devops-operator",
-        "huawei-daily-operations-briefing-coordinator",
-        "huawei-functiongraph-serverless-operator",
-        "huawei-observability-incident-responder",
-        "huawei-registry-artifact-governor",
-        "huawei-serverless-production-readiness",
-        "huawei-support-incident-coordinator",
-        "huawei-ticket-triage-escalation-coordinator",
-        "huawei-waf-reliability-review",
-        "oci-devops-container-platform-engineer",
-        "oci-live-oke-rollout-guard",
-        "oci-observability-incident-responder",
-        "oci-registry-artifact-governor",
-        "oci-support-incident-coordinator",
-        "oci-waf-reliability-review",
-        "opentelemetry-collector-config-review"
+        "dotnet-maestro",
+        "dotnet-csharp-runtime-review",
+        "dotnet-aspnetcore-api-review",
+        "dotnet-aspnetcore-identity-authz-review",
+        "dotnet-efcore-data-access-review",
+        "dotnet-testing-quality-review",
+        "dotnet-supply-chain-review",
+        "dotnet-performance-aot-review",
+        "dotnet-observability-otel-review",
+        "dotnet-aspire-cloud-native-review"
       ]
     },
     "kubernetes-admission-security-engineer": {
@@ -694,6 +824,51 @@
         "kyverno-policy-review"
       ]
     },
+    "kubernetes-application-platform-engineer": {
+      "label": "Kubernetes Application Platform Engineer",
+      "description": "Golden paths and GitOps delivery: Argo CD Application/AppProject/ApplicationSet review, sync impersonation, RBAC, sync windows, and Argo CD Agent multi-cluster topologies. Owns the path from Git to running workload with bounded blast radius.",
+      "agents": [
+        "argocd-gitops-review-agent",
+        "kubernetes-live-argocd-sync-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "argocd-gitops-review",
+        "kubernetes-maestro",
+        "kubernetes-pod-security-admission-review"
+      ]
+    },
+    "kubernetes-developer-platform-engineer": {
+      "label": "Kubernetes Developer Platform Engineer",
+      "description": "Internal developer platform and GitOps delivery: Backstage Scaffolder template security review, Argo CD and Argo Rollouts progressive delivery, FluxCD Kustomization and HelmRelease GitOps review, and the kubernetes-maestro router for cross-domain dispatch.",
+      "agents": [
+        "argocd-gitops-review-agent",
+        "argo-rollouts-progressive-delivery-review-agent",
+        "backstage-scaffolder-template-review-agent",
+        "fluxcd-kustomization-helmrelease-review-agent",
+        "kubernetes-live-argocd-sync-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "argocd-gitops-review",
+        "argo-rollouts-progressive-delivery-review",
+        "backstage-scaffolder-template-review",
+        "fluxcd-kustomization-helmrelease-review",
+        "kubernetes-maestro"
+      ]
+    },
+    "kubernetes-disaster-recovery-engineer": {
+      "label": "Kubernetes Disaster Recovery Engineer",
+      "description": "Backup, restore, and business continuity: Velero backup schedule review, live-guarded restore operations with pre-restore safety checklist, PV restore posture, existingResourcePolicy risk, and cross-cluster restore scope governance.",
+      "agents": [
+        "kubernetes-live-velero-restore-guard-agent",
+        "kubernetes-maestro-agent"
+      ],
+      "skills": [
+        "kubernetes-maestro",
+        "velero-backup-restore-guard"
+      ]
+    },
     "kubernetes-network-engineer": {
       "label": "Kubernetes Network Engineer",
       "description": "Cluster network architecture and policy: CNI selection and dataplane (kube-proxy mode, IPAM, Pod and Service CIDR sizing, MTU, encapsulation, dual-stack), Service surface (EndpointSlices, internalTrafficPolicy, externalTrafficPolicy, topology-aware routing), Ingress to Gateway API migration, CoreDNS and NodeLocal DNSCache, multi-cluster topology (ClusterMesh, Submariner, MCS-API), egress topology and connectivity troubleshooting, plus Cilium NetworkPolicy and CiliumClusterwideNetworkPolicy review, CiliumEgressGatewayPolicy, Hubble flow observability, and Istio mesh in both sidecar and ambient modes including the L7-AuthorizationPolicy-without-waypoint trap.",
@@ -714,39 +889,20 @@
         "kubernetes-network-architecture-review"
       ]
     },
-    "kubernetes-application-platform-engineer": {
-      "label": "Kubernetes Application Platform Engineer",
-      "description": "Golden paths and GitOps delivery: Argo CD Application/AppProject/ApplicationSet review, sync impersonation, RBAC, sync windows, and Argo CD Agent multi-cluster topologies. Owns the path from Git to running workload with bounded blast radius.",
-      "agents": [
-        "argocd-gitops-review-agent",
-        "kubernetes-live-argocd-sync-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "argocd-gitops-review",
-        "kubernetes-maestro",
-        "kubernetes-pod-security-admission-review"
-      ]
-    },
-    "kubernetes-runtime-security-engineer": {
-      "label": "Kubernetes Runtime Security Engineer",
-      "description": "Runtime defense and workload identity: RBAC privilege-escalation verbs, ServiceAccount token projection, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, and the OIDC trust-policy review that ties pods to cloud IAM without long-lived static credentials.",
+    "kubernetes-observability-engineer": {
+      "label": "Kubernetes Observability Engineer",
+      "description": "Metrics, alerting, cardinality, cost attribution, and telemetry pipeline: Prometheus alerting and recording rules, label cardinality, Alertmanager routing, OpenTelemetry Collector pipeline safety, and Kubecost chargeback and allocation model review.",
       "agents": [
-        "falco-runtime-threat-rules-review-agent",
-        "kubernetes-live-rbac-mutation-guard-agent",
+        "kubecost-chargeback-allocation-review-agent",
         "kubernetes-maestro-agent",
-        "kubernetes-rbac-review-agent",
-        "kubernetes-workload-identity-review-agent",
-        "sigstore-cosign-supply-chain-review-agent"
+        "opentelemetry-collector-config-review-agent",
+        "prometheus-alerting-cardinality-review-agent"
       ],
       "skills": [
-        "falco-runtime-threat-rules-review",
-        "kubernetes-live-rbac-mutation-guard",
+        "kubecost-chargeback-allocation-review",
         "kubernetes-maestro",
-        "kubernetes-pod-security-admission-review",
-        "kubernetes-rbac-review",
-        "kubernetes-workload-identity-review",
-        "sigstore-cosign-supply-chain-review"
+        "opentelemetry-collector-config-review",
+        "prometheus-alerting-cardinality-review"
       ]
     },
     "kubernetes-pki-engineer": {
@@ -769,20 +925,25 @@
         "oci-certificates-issuer-review"
       ]
     },
-    "kubernetes-observability-engineer": {
-      "label": "Kubernetes Observability Engineer",
-      "description": "Metrics, alerting, cardinality, cost attribution, and telemetry pipeline: Prometheus alerting and recording rules, label cardinality, Alertmanager routing, OpenTelemetry Collector pipeline safety, and Kubecost chargeback and allocation model review.",
+    "kubernetes-runtime-security-engineer": {
+      "label": "Kubernetes Runtime Security Engineer",
+      "description": "Runtime defense and workload identity: RBAC privilege-escalation verbs, ServiceAccount token projection, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, and the OIDC trust-policy review that ties pods to cloud IAM without long-lived static credentials.",
       "agents": [
-        "kubecost-chargeback-allocation-review-agent",
+        "falco-runtime-threat-rules-review-agent",
+        "kubernetes-live-rbac-mutation-guard-agent",
         "kubernetes-maestro-agent",
-        "opentelemetry-collector-config-review-agent",
-        "prometheus-alerting-cardinality-review-agent"
+        "kubernetes-rbac-review-agent",
+        "kubernetes-workload-identity-review-agent",
+        "sigstore-cosign-supply-chain-review-agent"
       ],
       "skills": [
-        "kubecost-chargeback-allocation-review",
+        "falco-runtime-threat-rules-review",
+        "kubernetes-live-rbac-mutation-guard",
         "kubernetes-maestro",
-        "opentelemetry-collector-config-review",
-        "prometheus-alerting-cardinality-review"
+        "kubernetes-pod-security-admission-review",
+        "kubernetes-rbac-review",
+        "kubernetes-workload-identity-review",
+        "sigstore-cosign-supply-chain-review"
       ]
     },
     "kubernetes-supply-chain-security-engineer": {
@@ -806,75 +967,45 @@
         "sigstore-cosign-supply-chain-review"
       ]
     },
-    "kubernetes-developer-platform-engineer": {
-      "label": "Kubernetes Developer Platform Engineer",
-      "description": "Internal developer platform and GitOps delivery: Backstage Scaffolder template security review, Argo CD and Argo Rollouts progressive delivery, FluxCD Kustomization and HelmRelease GitOps review, and the kubernetes-maestro router for cross-domain dispatch.",
-      "agents": [
-        "argocd-gitops-review-agent",
-        "argo-rollouts-progressive-delivery-review-agent",
-        "backstage-scaffolder-template-review-agent",
-        "fluxcd-kustomization-helmrelease-review-agent",
-        "kubernetes-live-argocd-sync-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "argocd-gitops-review",
-        "argo-rollouts-progressive-delivery-review",
-        "backstage-scaffolder-template-review",
-        "fluxcd-kustomization-helmrelease-review",
-        "kubernetes-maestro"
-      ]
-    },
-    "kubernetes-disaster-recovery-engineer": {
-      "label": "Kubernetes Disaster Recovery Engineer",
-      "description": "Backup, restore, and business continuity: Velero backup schedule review, live-guarded restore operations with pre-restore safety checklist, PV restore posture, existingResourcePolicy risk, and cross-cluster restore scope governance.",
-      "agents": [
-        "kubernetes-live-velero-restore-guard-agent",
-        "kubernetes-maestro-agent"
-      ],
-      "skills": [
-        "kubernetes-maestro",
-        "velero-backup-restore-guard"
-      ]
-    },
-    "cloud-ai-platform-engineer": {
-      "label": "Cloud AI Platform Engineer",
-      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
+    "legal-hr-risk-reviewer": {
+      "label": "Legal & HR Risk Reviewer",
+      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function — contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
       "agents": [
-        "gcp-alloydb-ai-developer-agent",
-        "gcp-gemini-api-developer-agent",
-        "gcp-vertex-ai-mlops-engineer-agent",
-        "huawei-modelarts-mlops-engineer-agent",
-        "nvidia-agentic-ai-platform-review-agent",
-        "nvidia-ai-infrastructure-operations-agent",
-        "nvidia-ai-networking-fabric-review-agent",
-        "nvidia-ai-operations-day2-agent",
-        "nvidia-cuda-kernel-performance-review-agent",
-        "nvidia-generative-ai-platform-review-agent",
-        "nvidia-gpu-operator-kubernetes-hardening-agent",
-        "nvidia-maestro-agent",
-        "nvidia-model-promotion-gatekeeper-agent",
-        "nvidia-ngc-nim-supply-chain-governor-agent",
-        "nvidia-tensorrt-llm-deployment-review-agent",
-        "nvidia-triton-inference-serving-review-agent"
+        "legal-counsel-review-agent",
+        "hr-risk-triage-review-agent",
+        "legal-maestro-agent",
+        "hr-maestro-agent",
+        "legal-contract-review-agent",
+        "legal-privacy-data-protection-agent",
+        "legal-employment-law-risk-agent",
+        "legal-litigation-discovery-hold-agent",
+        "legal-regulatory-compliance-agent",
+        "legal-ip-open-source-agent",
+        "legal-vendor-procurement-risk-agent",
+        "legal-ethics-investigations-agent",
+        "legal-policy-governance-agent",
+        "legal-public-disclosure-agent",
+        "legal-knowledge-management-agent",
+        "hr-employee-relations-agent",
+        "hr-workplace-investigations-agent",
+        "hr-performance-management-agent",
+        "hr-termination-readiness-agent",
+        "hr-leave-accommodation-agent",
+        "hr-recruiting-selection-agent",
+        "hr-compensation-equity-agent",
+        "hr-benefits-payroll-agent",
+        "hr-workforce-planning-rif-agent",
+        "hr-learning-policy-agent",
+        "hr-analytics-people-data-agent",
+        "hr-culture-dei-agent",
+        "hr-hris-process-controls-agent"
       ],
       "skills": [
-        "gcp-alloydb-ai-developer",
-        "gcp-gemini-api-developer",
-        "gcp-vertex-ai-mlops-engineer",
-        "huawei-modelarts-mlops-engineer",
-        "nvidia-agentic-ai-platform-review",
-        "nvidia-ai-infrastructure-operations",
-        "nvidia-ai-networking-fabric-review",
-        "nvidia-ai-operations-day2",
-        "nvidia-cuda-kernel-performance-review",
-        "nvidia-generative-ai-platform-review",
-        "nvidia-gpu-operator-kubernetes-hardening",
-        "nvidia-maestro",
-        "nvidia-model-promotion-gatekeeper",
-        "nvidia-ngc-nim-supply-chain-governor",
-        "nvidia-tensorrt-llm-deployment-review",
-        "nvidia-triton-inference-serving-review"
+        "legal-counsel-review",
+        "hr-risk-triage-review",
+        "legal-hr-case-capsule",
+        "legal-hr-routing-protocol",
+        "legal-hr-risk-taxonomy"
       ]
     },
     "marketing-governance-reviewer": {
@@ -913,9 +1044,67 @@
         "analytics-data-minimization-review"
       ]
     },
+    "netsuite-platform-advisor": {
+      "label": "Oracle NetSuite Platform Advisor",
+      "description": "Enterprise NetSuite architecture, operations, compliance, and implementation — platform configuration, SuiteScript development, SDF deployment, integrations (REST/SOAP), authentication (OAuth2/TBA), financial controls, audit and SOX compliance, multi-subsidiary management, and least-privilege identity governance. Advisory only — never executes live mutations without separate authorization.",
+      "agents": [
+        "netsuite-administrator-agent",
+        "netsuite-ai-connector-mcp-agent",
+        "netsuite-ai-foundations-agent",
+        "netsuite-application-developer-agent",
+        "netsuite-audit-controls-sox-agent",
+        "netsuite-bi-reporting-agent",
+        "netsuite-data-governance-privacy-agent",
+        "netsuite-enterprise-architecture-agent",
+        "netsuite-erp-consultant-agent",
+        "netsuite-evidence-release-drift-agent",
+        "netsuite-financial-foundations-agent",
+        "netsuite-identity-access-role-permission-agent",
+        "netsuite-integration-migration-agent",
+        "netsuite-live-org-mutation-guard-agent",
+        "netsuite-maestro-agent",
+        "netsuite-oneworld-multisubsidiary-agent",
+        "netsuite-sandbox-nonproduction-governance-agent",
+        "netsuite-saved-searches-workbook-agent",
+        "netsuite-sdf-devops-release-agent",
+        "netsuite-sso-oauth-tba-agent",
+        "netsuite-suitefoundation-agent",
+        "netsuite-suitecloud-developer-agent",
+        "netsuite-suitescript-secure-code-review-agent",
+        "netsuite-suiteflow-automation-agent",
+        "netsuite-web-services-integration-agent"
+      ],
+      "skills": [
+        "netsuite-administrator-skill",
+        "netsuite-ai-connector-mcp-skill",
+        "netsuite-ai-foundations-skill",
+        "netsuite-application-developer-skill",
+        "netsuite-audit-controls-sox-skill",
+        "netsuite-bi-reporting-skill",
+        "netsuite-data-governance-privacy-skill",
+        "netsuite-enterprise-architecture-skill",
+        "netsuite-erp-consultant-skill",
+        "netsuite-evidence-release-drift-skill",
+        "netsuite-financial-foundations-skill",
+        "netsuite-identity-access-role-permission-skill",
+        "netsuite-integration-migration-skill",
+        "netsuite-live-operation-safety-skill",
+        "netsuite-oneworld-multisubsidiary-skill",
+        "netsuite-routing-protocol",
+        "netsuite-sandbox-nonproduction-governance-skill",
+        "netsuite-saved-searches-workbook-skill",
+        "netsuite-sdf-devops-release-skill",
+        "netsuite-sso-oauth-tba-skill",
+        "netsuite-suitecloud-developer-skill",
+        "netsuite-suiteflow-automation-skill",
+        "netsuite-suitefoundation-skill",
+        "netsuite-suitescript-secure-code-review-skill",
+        "netsuite-web-services-integration-skill"
+      ]
+    },
     "qa-test-quality-engineer": {
       "label": "QA / Test Quality Engineer",
-      "description": "Static review of test suites, automation workflows, CI test pipelines, Helm charts, Kubernetes manifests, and AI/LLM evaluation setups for reliability, safety, and meaning \u2014 Playwright E2E flakiness and selector brittleness, framework-agnostic flaky-test triage, coverage-theater detection, CI test gating and sharding, attested Playwright suite execution, IEC 61131-3 PLC control-logic safety review, RPA workflow resilience review, Helm chart security and testability, Kubernetes manifest policy compliance, and LLM/AI pipeline evaluation quality grounded in DeepEval metrics and ISTQB principles.",
+      "description": "Static review of test suites, automation workflows, CI test pipelines, Helm charts, Kubernetes manifests, and AI/LLM evaluation setups for reliability, safety, and meaning — Playwright E2E flakiness and selector brittleness, framework-agnostic flaky-test triage, coverage-theater detection, CI test gating and sharding, attested Playwright suite execution, IEC 61131-3 PLC control-logic safety review, RPA workflow resilience review, Helm chart security and testability, Kubernetes manifest policy compliance, and LLM/AI pipeline evaluation quality grounded in DeepEval metrics and ISTQB principles.",
       "agents": [
         "playwright-e2e-suite-review-agent",
         "test-flakiness-triage-agent",
@@ -941,78 +1130,9 @@
         "llm-ai-pipeline-test-review"
       ]
     },
-    "legal-hr-risk-reviewer": {
-      "label": "Legal & HR Risk Reviewer",
-      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function \u2014 contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
-      "agents": [
-        "legal-counsel-review-agent",
-        "hr-risk-triage-review-agent",
-        "legal-maestro-agent",
-        "hr-maestro-agent",
-        "legal-contract-review-agent",
-        "legal-privacy-data-protection-agent",
-        "legal-employment-law-risk-agent",
-        "legal-litigation-discovery-hold-agent",
-        "legal-regulatory-compliance-agent",
-        "legal-ip-open-source-agent",
-        "legal-vendor-procurement-risk-agent",
-        "legal-ethics-investigations-agent",
-        "legal-policy-governance-agent",
-        "legal-public-disclosure-agent",
-        "legal-knowledge-management-agent",
-        "hr-employee-relations-agent",
-        "hr-workplace-investigations-agent",
-        "hr-performance-management-agent",
-        "hr-termination-readiness-agent",
-        "hr-leave-accommodation-agent",
-        "hr-recruiting-selection-agent",
-        "hr-compensation-equity-agent",
-        "hr-benefits-payroll-agent",
-        "hr-workforce-planning-rif-agent",
-        "hr-learning-policy-agent",
-        "hr-analytics-people-data-agent",
-        "hr-culture-dei-agent",
-        "hr-hris-process-controls-agent"
-      ],
-      "skills": [
-        "legal-counsel-review",
-        "hr-risk-triage-review",
-        "legal-hr-case-capsule",
-        "legal-hr-routing-protocol",
-        "legal-hr-risk-taxonomy"
-      ]
-    },
-    "dotnet-application-review-engineer": {
-      "label": ".NET Application Review Engineer",
-      "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
-      "agents": [
-        "dotnet-maestro-agent",
-        "dotnet-csharp-runtime-review-agent",
-        "dotnet-aspnetcore-api-review-agent",
-        "dotnet-aspnetcore-identity-authz-review-agent",
-        "dotnet-efcore-data-access-review-agent",
-        "dotnet-testing-quality-review-agent",
-        "dotnet-supply-chain-review-agent",
-        "dotnet-performance-aot-review-agent",
-        "dotnet-observability-otel-review-agent",
-        "dotnet-aspire-cloud-native-review-agent"
-      ],
-      "skills": [
-        "dotnet-maestro",
-        "dotnet-csharp-runtime-review",
-        "dotnet-aspnetcore-api-review",
-        "dotnet-aspnetcore-identity-authz-review",
-        "dotnet-efcore-data-access-review",
-        "dotnet-testing-quality-review",
-        "dotnet-supply-chain-review",
-        "dotnet-performance-aot-review",
-        "dotnet-observability-otel-review",
-        "dotnet-aspire-cloud-native-review"
-      ]
-    },
     "salesforce-portfolio-architect": {
       "label": "Salesforce Portfolio Architect",
-      "description": "Salesforce platform architecture, admin governance, security, integration, revenue ops, service ops, marketing ops, Agentforce/AI risk, and compliance review across the Sales/Service/Experience/Marketing/Industry cloud surface. Static review only \u2014 never mutates a Salesforce org. Wave 1 ships canonical AGENT.md + metadata.json only; per-harness adapter files are deferred to Wave 2, so the catalog entries declare harnesses: [\"other\"] until adapters land.",
+      "description": "Salesforce platform architecture, admin governance, security, integration, revenue ops, service ops, marketing ops, Agentforce/AI risk, and compliance review across the Sales/Service/Experience/Marketing/Industry cloud surface. Static review only — never mutates a Salesforce org. Wave 1 ships canonical AGENT.md + metadata.json only; per-harness adapter files are deferred to Wave 2, so the catalog entries declare harnesses: [\"other\"] until adapters land.",
       "agents": [
         "salesforce-maestro-agent",
         "salesforce-platform-admin-review-agent",
@@ -1078,57 +1198,177 @@
         "salesforce-bulk-data-ops-skill"
       ]
     },
-    "accounting-finance-advisor": {
-      "label": "Accounting & Finance Advisor",
-      "description": "Multi-jurisdiction accounting and corporate finance advisory for enterprise finance teams \u2014 revenue recognition (ASC 606/IFRS 15), financial close cycle (month-end/quarter-end/year-end across 8 jurisdictions), treasury and liquidity management (ASC 815/IFRS 9 hedge accounting, ASC 830/IAS 21 FX translation, Basel III LCR/NSFR, Dodd-Frank/EMIR), and FP&A variance analysis with SEC Regulation S-K Item 303 MD&A guidance. Advisory only \u2014 never posts journal entries, executes financial transactions, or writes to any system of record.",
+    "microsoft-365-d365-platform-advisor": {
+      "label": "Microsoft 365 & Dynamics 365 Platform Advisor",
+      "description": "Static-review advisory across the Microsoft cloud business surface: Microsoft 365 governance, identity (Entra/Conditional Access), security and compliance (Purview, Defender XDR), collaboration, Microsoft 365 Copilot readiness, Power Platform governance, and Dynamics 365 ERP/CRM. Routes through the Microsoft maestro layer to M365, D365, Power Platform, and Copilot specialists. Advisory only — never mutates a tenant or production environment; production-impacting actions are live-guard gated and require explicit human approval.",
       "agents": [
-        "accounting-maestro-agent",
-        "accounting-revenue-recognition-advisor-agent",
-        "accounting-close-cycle-advisor-agent",
-        "finance-maestro-agent",
-        "finance-variance-analysis-advisor-agent",
-        "finance-treasury-liquidity-advisor-agent",
-        "accounting-tax-provision-advisor-agent",
-        "accounting-lease-accounting-advisor-agent",
-        "finance-capital-allocation-advisor-agent",
-        "accounting-consolidation-intercompany-advisor-agent",
-        "accounting-fx-translation-advisor-agent",
-        "finance-transfer-pricing-pillar-two-advisor-agent",
-        "accounting-hedge-accounting-advisor-agent",
-        "accounting-indirect-tax-einvoicing-advisor-agent",
-        "accounting-payroll-advisor-agent",
-        "accounting-procure-to-pay-advisor-agent",
-        "accounting-fixed-assets-advisor-agent",
-        "accounting-equity-compensation-advisor-agent",
-        "accounting-business-combinations-advisor-agent",
-        "finance-fpa-forecasting-advisor-agent",
-        "finance-debt-capital-structure-advisor-agent",
-        "finance-working-capital-advisor-agent"
+        "microsoft-maestro-agent",
+        "m365-maestro-agent",
+        "d365-maestro-agent",
+        "power-platform-maestro-agent",
+        "copilot-governance-maestro-agent",
+        "m365-copilot-readiness-governance-agent",
+        "m365-identity-zero-trust-agent",
+        "power-platform-governance-dataverse-security-agent",
+        "d365-success-by-design-governance-agent",
+        "d365-security-sod-governance-agent",
+        "d365-data-migration-cutover-agent",
+        "d365-finance-close-to-report-agent",
+        "d365-supply-chain-plan-to-produce-agent",
+        "d365-sales-revenue-operations-agent",
+        "d365-field-service-to-cash-agent",
+        "d365-customer-service-contact-center-agent",
+        "microsoft-business-impact-value-realization-agent",
+        "power-platform-alm-pipelines-agent",
+        "copilot-studio-agent-governance-alm-agent",
+        "power-automate-automation-risk-review-agent",
+        "fabric-power-bi-business-insights-governance-agent",
+        "m365-purview-data-security-compliance-agent",
+        "m365-defender-xdr-security-operations-agent",
+        "m365-intune-endpoint-management-agent",
+        "m365-teams-collaboration-governance-agent",
+        "m365-exchange-sharepoint-information-governance-agent",
+        "d365-customer-insights-journeys-agent",
+        "d365-fno-developer-extension-agent",
+        "d365-integration-dual-write-agent",
+        "m365-tenant-governance-agent",
+        "m365-backup-bcdr-data-resilience-agent",
+        "m365-licensing-ea-optimization-agent",
+        "d365-project-operations-agent",
+        "d365-commerce-agent",
+        "fabric-data-engineering-agent",
+        "fabric-analytics-engineering-agent",
+        "m365-live-identity-posture-guard-agent",
+        "d365-live-security-role-guard-agent",
+        "d365-live-record-field-update-guard-agent",
+        "m365-live-sensitivity-label-apply-guard-agent"
       ],
       "skills": [
-        "accounting-maestro",
-        "revenue-recognition-advisor",
-        "close-cycle-advisor",
-        "finance-maestro",
-        "variance-analysis-advisor",
-        "treasury-liquidity-advisor",
-        "tax-provision-advisor",
-        "lease-accounting-advisor",
-        "capital-allocation-advisor",
-        "consolidation-intercompany-advisor",
-        "fx-translation-advisor",
-        "transfer-pricing-pillar-two-advisor",
-        "hedge-accounting-advisor",
-        "indirect-tax-einvoicing-advisor",
-        "payroll-advisor",
-        "procure-to-pay-advisor",
-        "fixed-assets-advisor",
-        "equity-compensation-advisor",
-        "business-combinations-advisor",
-        "fpa-forecasting-advisor",
-        "debt-capital-structure-advisor",
-        "working-capital-advisor"
+        "microsoft-maestro",
+        "m365-maestro",
+        "d365-maestro",
+        "power-platform-maestro",
+        "copilot-governance-maestro",
+        "m365-copilot-readiness-governance",
+        "m365-identity-zero-trust",
+        "power-platform-governance-dataverse-security",
+        "d365-success-by-design-governance",
+        "d365-security-sod-governance",
+        "d365-data-migration-cutover",
+        "d365-finance-close-to-report",
+        "d365-supply-chain-plan-to-produce",
+        "d365-sales-revenue-operations",
+        "d365-field-service-to-cash",
+        "d365-customer-service-contact-center",
+        "microsoft-business-impact-value-realization",
+        "power-platform-alm-pipelines",
+        "copilot-studio-agent-governance-alm",
+        "power-automate-automation-risk-review",
+        "fabric-power-bi-business-insights-governance",
+        "m365-purview-data-security-compliance",
+        "m365-defender-xdr-security-operations",
+        "m365-intune-endpoint-management",
+        "m365-teams-collaboration-governance",
+        "m365-exchange-sharepoint-information-governance",
+        "d365-customer-insights-journeys",
+        "d365-fno-developer-extension",
+        "d365-integration-dual-write",
+        "m365-tenant-governance",
+        "m365-backup-bcdr-data-resilience",
+        "m365-licensing-ea-optimization",
+        "d365-project-operations",
+        "d365-commerce",
+        "fabric-data-engineering",
+        "fabric-analytics-engineering",
+        "m365-live-identity-posture-guard",
+        "d365-live-security-role-guard",
+        "d365-live-record-field-update-guard",
+        "m365-live-sensitivity-label-apply-guard"
+      ]
+    },
+    "microsoft-security-compliance-engineer": {
+      "label": "Microsoft Security & Compliance Engineer",
+      "description": "Static-review security and compliance engineering across the Microsoft 365 estate: Microsoft Entra Zero Trust & Conditional Access, Microsoft 365 Copilot data-exposure readiness, Microsoft Purview data security & compliance (DLP, sensitivity labels, retention, Insider Risk, eDiscovery, Audit, DSPM for AI), and Microsoft Defender XDR security operations. Advisory only; production identity, DLP/label/retention, eDiscovery-hold, and containment actions are live-guard gated and require explicit human approval.",
+      "agents": [
+        "m365-identity-zero-trust-agent",
+        "m365-copilot-readiness-governance-agent",
+        "m365-purview-data-security-compliance-agent",
+        "m365-defender-xdr-security-operations-agent",
+        "m365-backup-bcdr-data-resilience-agent",
+        "m365-live-identity-posture-guard-agent",
+        "d365-live-security-role-guard-agent",
+        "d365-live-record-field-update-guard-agent",
+        "m365-live-sensitivity-label-apply-guard-agent"
+      ],
+      "skills": [
+        "m365-identity-zero-trust",
+        "m365-copilot-readiness-governance",
+        "m365-purview-data-security-compliance",
+        "m365-defender-xdr-security-operations",
+        "m365-backup-bcdr-data-resilience",
+        "m365-live-identity-posture-guard",
+        "d365-live-security-role-guard",
+        "d365-live-record-field-update-guard",
+        "m365-live-sensitivity-label-apply-guard"
+      ]
+    },
+    "microsoft-collaboration-endpoint-admin": {
+      "label": "Microsoft Collaboration & Endpoint Administrator",
+      "description": "Static-review administration of the Microsoft 365 collaboration and endpoint estate: Microsoft Intune device/app management and compliance, Microsoft Teams collaboration & communications governance, and Exchange Online / SharePoint Online / OneDrive information governance (including SharePoint Advanced Management oversharing controls). Advisory only; tenant-wide sharing/compliance/Conditional-Access-impacting policy changes and device wipe/retire actions are live-guard gated and require explicit human approval.",
+      "agents": [
+        "m365-intune-endpoint-management-agent",
+        "m365-teams-collaboration-governance-agent",
+        "m365-exchange-sharepoint-information-governance-agent",
+        "m365-tenant-governance-agent"
+      ],
+      "skills": [
+        "m365-intune-endpoint-management",
+        "m365-teams-collaboration-governance",
+        "m365-exchange-sharepoint-information-governance",
+        "m365-tenant-governance"
+      ]
+    },
+    "microsoft-data-analytics-engineer": {
+      "label": "Microsoft Data & Analytics Engineer",
+      "description": "Static-review data and analytics engineering on Microsoft Fabric and Power BI: Fabric data engineering (Lakehouse/OneLake, Spark, pipelines, Dataflows Gen2, medallion, Real-Time Intelligence, Direct Lake), Fabric analytics engineering (data warehouse T-SQL, dimensional/semantic modeling, DAX), and Fabric/Power BI business-insights governance (semantic-model trust, RLS/OLS, workspace governance). Advisory only; production capacity, pipeline-run, warehouse-schema, semantic-model deployment, RLS, and workspace-role changes are live-guard gated and require explicit human approval.",
+      "agents": [
+        "fabric-data-engineering-agent",
+        "fabric-analytics-engineering-agent",
+        "fabric-power-bi-business-insights-governance-agent"
+      ],
+      "skills": [
+        "fabric-data-engineering",
+        "fabric-analytics-engineering",
+        "fabric-power-bi-business-insights-governance"
+      ]
+    },
+    "azure-databricks-platform-engineer": {
+      "label": "Azure Databricks Platform Engineer",
+      "description": "Static-review governance and engineering for Azure Databricks: Unity Catalog least-privilege grants and admin-role separation, plus lakehouse engineering (medallion, ADLS Gen2 external locations via managed identity, cluster policies, secret scopes, network isolation). Advisory only; production grant/role/policy/cluster changes are live-guard gated and require explicit human approval.",
+      "agents": [
+        "databricks-unity-catalog-governance-at-azure-agent",
+        "databricks-lakehouse-engineering-at-azure-agent",
+        "databricks-live-unity-catalog-grant-guard-at-azure-agent"
+      ],
+      "skills": [
+        "databricks-unity-catalog-governance-at-azure",
+        "databricks-lakehouse-engineering-at-azure",
+        "databricks-live-unity-catalog-grant-guard-at-azure"
+      ]
+    },
+    "azure-snowflake-platform-engineer": {
+      "label": "Azure Snowflake Platform Engineer",
+      "description": "Static-review governance and engineering for Snowflake on Azure: RBAC least privilege (ACCOUNTADMIN restriction, SECURITYADMIN/SYSADMIN separation of duties, network policies, Entra OAuth/SSO/SCIM) and data-platform engineering (warehouses, Azure Private Link/storage integration, masking/row-access/tagging governance). Advisory only; production role/grant/policy/warehouse changes are live-guard gated and require explicit human approval.",
+      "agents": [
+        "snowflake-rbac-access-governance-at-azure-agent",
+        "snowflake-data-platform-engineering-at-azure-agent",
+        "snowflake-live-rbac-grant-guard-at-azure-agent"
+      ],
+      "skills": [
+        "snowflake-rbac-access-governance-at-azure",
+        "snowflake-data-platform-engineering-at-azure",
+        "snowflake-live-rbac-grant-guard-at-azure"
       ]
     }
   }
-}
+}