@raishin/vanguard-frontier-agentic 3.10.0 → 3.11.0

package/catalog/agents.json

@@ -5430,6 +5430,586 @@
       "d365-supply-chain-plan-to-produce"
     ]
   },
+  {
+    "id": "databricks-ai-bi-genie-agent",
+    "name": "Databricks AI/BI Genie Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of AI/BI Genie agent design, semantic layer grounding, and dashboard permission consequences: Genie agent scoping and table budget (30-table limit), instructions and trusted-asset caching, metric-view semantics and correctness, dashboard limits and rendering consequences, benchmark design and honest accuracy reading, and the critical 'Individual data' versus 'Share data' permission decision—which determines whether row filters and column masks apply per viewer or are bypassed.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/ai-bi/",
+      "https://docs.databricks.com/aws/en/ai-bi/admin",
+      "https://docs.databricks.com/aws/en/genie-agents/set-up",
+      "https://docs.databricks.com/aws/en/genie-agents/monitor",
+      "https://docs.databricks.com/aws/en/genie/benchmarks",
+      "https://docs.databricks.com/aws/en/business-semantics/metric-views/",
+      "https://docs.databricks.com/aws/en/uc-semantics/",
+      "https://docs.databricks.com/aws/en/dashboards/limits"
+    ],
+    "security_notes": "Static review of agent and dashboard configuration, schema, metric definitions, and benchmark results only; never executes any agent query, never invokes Genie, never runs a dashboard, and never requests workspace URLs, credentials, tokens, or customer data. The 'Share data' permission setting is a security boundary: it determines whether row-level security (row filters, column masks) is enforced per viewer or completely bypassed. This single setting has the highest consequence for data exposure and must be highlighted in any review.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-ai-bi-genie-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-ai-bi-genie"
+    ]
+  },
+  {
+    "id": "databricks-data-protection-privacy-agent",
+    "name": "Databricks Data Protection and Privacy Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Databricks data protection, privacy, and governance design: row filters and column masks (UDF-based, cost implications), ABAC policies and their scoping, PII and data classification frameworks (AI-driven, backfill defaults), deletion and erasure mechanics (DELETE/MERGE vs VACUUM vs REORG PURGE), Delta Sharing recipient controls and cross-region egress cost, residency and Geo constraints, and customer-managed encryption keys (Enterprise-only). Reads table schemas, mask/filter definitions, classification results, sharing configurations, data residency settings, and audit logs only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/filters-and-masks/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/abac/core-concepts",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/abac/common-patterns",
+      "https://docs.databricks.com/aws/en/lakehouse-monitoring/data-classification",
+      "https://docs.databricks.com/aws/en/opensharing/share-data-databricks",
+      "https://docs.databricks.com/aws/en/delta-sharing/create-recipient",
+      "https://docs.databricks.com/aws/en/delta-sharing/manage-egress",
+      "https://docs.databricks.com/aws/en/security/privacy/gdpr-delta",
+      "https://docs.databricks.com/aws/en/security/keys/customer-managed-keys",
+      "https://docs.databricks.com/aws/en/security/keys/",
+      "https://docs.databricks.com/aws/en/resources/databricks-geos"
+    ],
+    "security_notes": "Static review only — reads table schemas, mask and filter definitions, classification results, sharing recipient lists, encryption settings, and residency configuration. Never executes a mask/filter change, never deletes data or tables, never modifies sharing configuration, never executes VACUUM, and never requests customer data or keys. A request to implement or modify a mask, filter, ABAC policy, or sharing configuration belongs to the live-guard path and requires explicit written approval. Classification backfill (disabled by default) requires a separate data-governance decision before enabling.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-data-protection-privacy-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-data-protection-privacy"
+    ]
+  },
+  {
+    "id": "databricks-data-quality-observability-agent",
+    "name": "Databricks Data Quality and Observability Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Lakeflow pipeline data quality and observability: expectations and violation-mode choice (warn/drop/fail), table constraints (NOT NULL, CHECK, informational foreign/unique/PK), Lakehouse Monitoring profile and drift metrics, freshness and staleness detection, pipeline event-log interrogation for lineage and data-quality results, quality SLA definition and alerting, and quality evidence for downstream consumers. Reads pipeline definitions, expectations code, table schema, event logs, and monitor configuration only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/ldp/expectations",
+      "https://docs.databricks.com/aws/en/ldp/expectation-patterns",
+      "https://docs.databricks.com/aws/en/ldp/developer/ldp-python-ref-expectations",
+      "https://docs.databricks.com/aws/en/ldp/monitor-event-logs",
+      "https://docs.databricks.com/aws/en/ldp/observability",
+      "https://docs.databricks.com/aws/en/lakehouse-monitoring/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/data-quality-monitoring/",
+      "https://docs.databricks.com/aws/en/admin/system-tables/"
+    ],
+    "security_notes": "Static review only — reads pipeline source, table schema, expectations, monitor configuration, and event-log query patterns; never executes pipelines, never modifies expectations or monitors, never accesses customer data records, and never requests credentials, tokens, storage keys, or workspace URLs. A claim about a metric or constraint is verified against the documented semantics, not against assumed runtime behavior.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-data-quality-observability-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-data-quality-observability"
+    ]
+  },
+  {
+    "id": "databricks-developer-platform-agent",
+    "name": "Databricks Developer Platform Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Review Declarative Automation Bundles (legacy: DAB) structure, targets, and deployment posture: bundle.yml configuration shape and resource scope, deployment-mode design and its runtime consequences, run-as identity boundaries and non-admin limitations, bundle variables and their deployment-time-only constraint, CLI authentication paths and OAuth posture, Terraform-versus-direct-deployment trade-offs, Git folder flows for promotion, and CI/CD gate design for safe job and pipeline promotion.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/dev-tools/bundles",
+      "https://docs.databricks.com/aws/en/dev-tools/bundles/reference",
+      "https://docs.databricks.com/aws/en/dev-tools/bundles/deployment-modes",
+      "https://docs.databricks.com/aws/en/dev-tools/bundles/run-as",
+      "https://docs.databricks.com/aws/en/dev-tools/bundles/variables",
+      "https://docs.databricks.com/aws/en/dev-tools/cli/bundle-commands",
+      "https://docs.databricks.com/aws/en/dev-tools/cli/authentication",
+      "https://docs.databricks.com/aws/en/dev-tools/terraform/"
+    ],
+    "security_notes": "Static review of bundle configuration, authentication setup, and promotion workflows. Never executes bundle commands, never triggers deployments, never accepts workspace URLs bound to credentials, personal access tokens, OAuth client secrets, service-principal secrets, or storage keys. Reviews intended deployment target and promotion path; a claim about production readiness that cannot be verified against the written bundle configuration and the stated Git/CI/CD flow is labeled assumption, never confirmed.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-developer-platform-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-developer-platform"
+    ]
+  },
+  {
+    "id": "databricks-finops-cost-agent",
+    "name": "Databricks FinOps Cost Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Databricks cost and billing: evidence from system.billing.usage and system.billing.list_prices, cost attribution via custom tags with coverage confidence reporting (tagged vs untagged spend), DBU uptime semantics and per-workload charging, serverless versus classic cost comparison validity, budgets and their non-enforcing nature, compute policies and idle/auto-stop settings as cost controls, instance-pool cost floors, and identifying expensive workloads. Joins and coverage gaps are reported explicitly, never papered over.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/admin/system-tables/billing",
+      "https://docs.databricks.com/aws/en/admin/system-tables/pricing",
+      "https://docs.databricks.com/aws/en/admin/system-tables/serverless-billing",
+      "https://docs.databricks.com/aws/en/admin/system-tables/compute",
+      "https://docs.databricks.com/aws/en/admin/system-tables/jobs",
+      "https://docs.databricks.com/aws/en/admin/account-settings/budgets",
+      "https://docs.databricks.com/aws/en/admin/clusters/policy-definition",
+      "https://docs.databricks.com/aws/en/compute/pools"
+    ],
+    "security_notes": "Static analysis of billing data only — reads system.billing.usage, system.billing.list_prices, system.compute.clusters, system.compute.node_timeline, system.lakeflow.jobs, and cluster policies; never executes any query, never invokes Databricks APIs, and never requests workspace URLs, credentials, tokens, storage keys, or metastore identifiers. Cost analysis is only as good as the custom-tag coverage; the agent reports attribution confidence explicitly (e.g., '85% of spend is tagged, 15% is untagged and cannot be attributed'). No hidden caveats—all joins, attribution gaps, and inference limitations are named in the output.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-finops-cost-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-finops-cost"
+    ]
+  },
+  {
+    "id": "databricks-genai-agent-engineering-agent",
+    "name": "Databricks GenAI Agent Engineering Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Expert review of generative-AI agent design on Databricks: Mosaic AI Agent Framework and ResponsesAgent interface for authoring, Databricks AI Search index variant and sync-mode choice, retrieval and context assembly, context engineering (chunking, grounding, context budget), MCP server category selection (managed versus external versus custom) and trust boundaries, external model-provider selection, and Unity AI Gateway guardrails and traffic policy. Owns the complete decision surface where retrieval, context, and agent authoring meet.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/agents/agent-framework/build-agents",
+      "https://docs.databricks.com/aws/en/generative-ai/agent-framework/author-agent-db-app",
+      "https://docs.databricks.com/aws/en/generative-ai/agent-framework/mcp",
+      "https://docs.databricks.com/aws/en/generative-ai/mcp/managed-mcp",
+      "https://docs.databricks.com/aws/en/vector-search/vector-search",
+      "https://docs.databricks.com/aws/en/vector-search/query-vector-search",
+      "https://docs.databricks.com/aws/en/machine-learning/foundation-models/external-models",
+      "https://docs.databricks.com/aws/en/ai-gateway/"
+    ],
+    "security_notes": "Static review of agent architecture, retrieval index configuration, tool definitions, and model provider selection. Reads agent code structure, index metadata, Unity Catalog functions, MCP server type and governance scope, external-model configurations, and Unity AI Gateway policy. Never invokes a live agent, never executes a retrieval query, never calls an external model provider, never creates or modifies MCP server deployments, and never changes gateway policies. MCP server governance (creation, deletion, provider OAuth, secret binding) escalates to a live guard; policy review happens here.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-genai-agent-engineering-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-genai-agent-engineering"
+    ]
+  },
+  {
+    "id": "databricks-genai-evaluation-observability-agent",
+    "name": "Databricks GenAI Evaluation and Observability Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Expert review of generative-AI evaluation, tracing, and observability on Databricks: MLflow Tracing instrumentation and span design, trace storage choice and governance, `mlflow.genai.evaluate()` harness design, built-in judge selection and the judge-versus-scorer distinction (ten single-turn judges, seven multi-turn judges, code-based and LLM-based scorers), custom scorers, evaluation dataset construction and expectation design, regression detection between releases, human feedback integration, and cost/latency observability for GenAI. Treats every LLM judge as an instrument with error, never ground truth.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/mlflow3/genai/",
+      "https://docs.databricks.com/aws/en/mlflow3/genai/tracing",
+      "https://docs.databricks.com/aws/en/mlflow3/genai/eval-monitor/",
+      "https://docs.databricks.com/aws/en/mlflow3/genai/eval-monitor/concepts/scorers",
+      "https://docs.databricks.com/aws/en/mlflow3/genai/eval-monitor/concepts/judges/",
+      "https://docs.databricks.com/aws/en/mlflow3/genai/getting-started/",
+      "https://docs.databricks.com/aws/en/ai-gateway/cost-observability",
+      "https://docs.databricks.com/aws/en/admin/system-tables/"
+    ],
+    "security_notes": "Static review of evaluation and tracing design. Reads trace instrumentation code, span design, judge selection, evaluation dataset schema, expectation definitions, and observability configuration. Never executes a live evaluation run, never modifies an agent's traces, never invokes a judge or scorer, and never changes production observability configuration. Human-feedback loops that depend on production traces escalate to a live guard if they require trace mutation or policy change. Judge validation against human labels is out-of-band and requires its own evidence chain.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-genai-evaluation-observability-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-genai-evaluation-observability"
+    ]
+  },
+  {
+    "id": "databricks-identity-network-security-agent",
+    "name": "Databricks Identity and Network Security Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Databricks identity and network security design: account vs workspace vs metastore admin separation and responsibilities, SCIM and identity federation limits and configuration, service principal posture and best practices, OAuth vs personal access token trade-offs, token lifecycle and automatic revocation, account IP access lists and their evaluation order, serverless network egress policies and storage-access blocking, secret scopes and redaction limits, and least-privilege identity patterns. Reads admin role assignments, service-principal inventory, SCIM configuration, PAT and OAuth policies, network policy definitions, and secret-scope configurations only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/admin/users-groups/service-principals",
+      "https://docs.databricks.com/aws/en/admin/users-groups/scim/",
+      "https://docs.databricks.com/aws/en/security/auth/",
+      "https://docs.databricks.com/aws/en/admin/users-groups/best-practices",
+      "https://docs.databricks.com/aws/en/security/network/front-end/ip-access-list",
+      "https://docs.databricks.com/aws/en/security/network/serverless-network-security/manage-network-policies",
+      "https://docs.databricks.com/aws/en/security/secrets/",
+      "https://docs.databricks.com/aws/en/admin/access-control/tokens"
+    ],
+    "security_notes": "Static review only — reads admin assignments, service-principal inventory, SCIM and OAuth configuration, network policies, and secret-scope definitions. Never requests or accepts personal access tokens, OAuth client secrets, service-principal secrets, workspace URLs bound to credentials, or customer data. A request to create or rotate a token belongs to the live-guard path. Audit of active token usage requires access to workspace activity logs; this review addresses design only.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-identity-network-security-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-identity-network-security"
+    ]
+  },
+  {
+    "id": "databricks-lakeflow-pipeline-engineering-agent",
+    "name": "Databricks Lakeflow Pipeline Engineering Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Lakeflow Spark Declarative Pipelines (formerly Delta Live Tables) design: medallion layering strategy, Lakeflow Jobs orchestration and task dependencies, Delta table layout (liquid clustering vs Z-order vs partitioning, deletion vectors, Predictive Optimization), Auto Loader versus COPY INTO choice, schema evolution and `_rescued_data` handling, materialized view versus streaming table selection, and backfill strategy. Reads pipeline source, table metadata, and job definitions only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/ldp",
+      "https://docs.databricks.com/aws/en/ldp/concepts/where-is-dlt",
+      "https://docs.databricks.com/aws/en/delta-live-tables/develop",
+      "https://docs.databricks.com/aws/en/delta-live-tables/configure-pipeline",
+      "https://docs.databricks.com/aws/en/tables/clustering",
+      "https://docs.databricks.com/aws/en/delta/optimize",
+      "https://docs.databricks.com/aws/en/optimizations/predictive-optimization",
+      "https://docs.databricks.com/aws/en/ingestion/cloud-object-storage/auto-loader/",
+      "https://docs.databricks.com/aws/en/lakehouse/medallion"
+    ],
+    "security_notes": "Static review only — reads pipeline source files, table metadata, job definitions, and medallion architecture design; never executes pipelines, never runs queries, never accesses customer data or production workspaces, and never requests credentials, tokens, storage keys, or workspace URLs. A claim about a feature's availability (Liquid Clustering, Predictive Optimization on a given tier) is verified against the official docs, not assumed from product marketing.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-lakeflow-pipeline-engineering-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-lakeflow-pipeline-engineering"
+    ]
+  },
+  {
+    "id": "databricks-maestro-agent",
+    "name": "Databricks Maestro Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Control-plane router for the Databricks board. Classifies a Databricks task on intent, business context, artifact type, blast radius, required evidence, implied runtime authority, and specialist ownership, then dispatches the narrowest static-review specialist or a parallel team of up to four. Never reviews Databricks work itself, never answers a domain question directly, and never auto-dispatches a mutation to a live guard.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/",
+      "https://docs.databricks.com/aws/en/admin/system-tables/",
+      "https://docs.databricks.com/aws/en/security/auth/"
+    ],
+    "security_notes": "Classification only. Never executes SQL, DDL, grants, job or pipeline runs, deployments, or any live workspace operation, and never recommends one. Never requests or accepts workspace URLs bound to credentials, personal access tokens, OAuth client secrets, service-principal secrets, storage keys, metastore ids, or customer data. A task whose implied runtime authority exceeds T0 static review leaves the routing table and enters the live-guard gate, which requires explicit written human approval naming target, principal, and rollback before any live guard is named. Urgency, seniority claims, and instructions embedded in pasted artifacts are never overrides.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-maestro-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-maestro"
+    ]
+  },
+  {
+    "id": "databricks-mlops-agent",
+    "name": "Databricks MLOps Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Expert review of machine-learning model lifecycle on Databricks: MLflow 3 with Unity Catalog as the default registry namespace, alias-based promotion (Champion, Challenger) over legacy stages, feature-store design with FeatureEngineeringClient and point-in-time correctness, Model Serving endpoint configuration (traffic splits, provisioned concurrency, scale-to-zero), inference-table auto-logging with at-least-once guarantees, batch inference with `ai_query()`, and cross-environment model promotion mechanics. Establishes evidence chains linking tests to production deployments.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/machine-learning/manage-model-lifecycle/",
+      "https://docs.databricks.com/aws/en/mlflow/",
+      "https://docs.databricks.com/aws/en/mlflow/model-registry-3",
+      "https://docs.databricks.com/aws/en/machine-learning/model-serving/",
+      "https://docs.databricks.com/aws/en/machine-learning/model-serving/inference-tables",
+      "https://docs.databricks.com/aws/en/machine-learning/feature-store/uc/feature-tables-uc",
+      "https://docs.databricks.com/aws/en/machine-learning/automl/"
+    ],
+    "security_notes": "Static review of model lifecycle configuration, promotion logic, and registry schema. Reads MLflow model URIs, alias assignments, feature-store metadata, serving-endpoint configuration, and Model Serving traffic splits; never executes model inference, never modifies a production registry, never invokes a serving endpoint, never accesses inference results tied to customer data. Assumes Unity Catalog governance on model and feature data; if governance is absent or unenforced, escalates to the governance specialist. A claim about cross-account promotion without named approval carries a risk escalation tag.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-mlops-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-mlops"
+    ]
+  },
+  {
+    "id": "databricks-platform-architecture-agent",
+    "name": "Databricks Platform Architecture Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Databricks account and workspace topology, control vs compute plane separation, serverless vs classic compute placement, the metastore-per-region architectural constraint, workspace segmentation ratios and their justification, catalog-and-schema organization strategy, cross-region and cross-organisation access patterns (D2D OpenSharing, Clean Rooms), and platform-level quota headroom. Reads the org's workspace inventory, compute placement decisions, metastore assignments, and capacity baselines only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/getting-started/high-level-architecture",
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/",
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/well-architected",
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/deployment-guide/workspace-strategy",
+      "https://docs.databricks.com/aws/en/admin/admin-concepts",
+      "https://docs.databricks.com/aws/en/compute/choose-compute",
+      "https://docs.databricks.com/aws/en/clean-rooms/",
+      "https://docs.databricks.com/aws/en/resources/limits"
+    ],
+    "security_notes": "Static review only — reads workspace inventory, compute architecture decisions, catalog and schema design, published metastore and quota baselines. Never contacts a live Databricks workspace, never requests account credentials, workspace URLs, personal access tokens, or customer data, and never executes DDL, job runs, or any cluster operations. Assumptions about scale, regions, or compute strategy are labelled as assumptions, never confirmed — the agent asks for the actual inventory rather than guessing.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-platform-architecture-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-platform-architecture"
+    ]
+  },
+  {
+    "id": "databricks-platform-reliability-agent",
+    "name": "Databricks Platform Reliability Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Diagnose and design compute, job, and pipeline reliability: operational evidence from system tables (`system.compute.*`, `system.lakeflow.*`, `system.billing.*`, `system.access.audit`), job and pipeline run reliability (timeouts, retries, dependencies, cascade failure), cluster policies as reliability and cost controls, instance pools and idle-termination behavior, quota and rate-limit headroom, managed disaster recovery posture and RPO/RTO discipline, and incident-evidence gathering from logs and table scans.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/admin/system-tables/",
+      "https://docs.databricks.com/aws/en/admin/system-tables/audit-logs",
+      "https://docs.databricks.com/aws/en/resources/limits",
+      "https://docs.databricks.com/aws/en/jobs/configure-task",
+      "https://docs.databricks.com/aws/en/jobs/monitor",
+      "https://docs.databricks.com/aws/en/admin/clusters/policy-definition",
+      "https://docs.databricks.com/aws/en/compute/pools",
+      "https://docs.databricks.com/aws/en/compute/choose-compute",
+      "https://docs.databricks.com/aws/en/admin/disaster-recovery",
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/deployment-guide/ha-dr"
+    ],
+    "security_notes": "Diagnostic and design review of reliability controls, system-table evidence, and disaster-recovery posture. Never executes SQL or DDL, never queries a live workspace, never modifies a cluster policy or job configuration, and never triggers a failover. Reads job and pipeline definitions, cluster policies, system-table schemas (not customer data), and disaster-recovery documentation; a claim about incident root cause or recovery time that cannot be verified against log tables or job configurations is labeled assumption, never confirmed. A request for live workspace querying or failover testing enters the live-guard gate.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-platform-reliability-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-platform-reliability"
+    ]
+  },
+  {
+    "id": "databricks-sql-performance-agent",
+    "name": "Databricks SQL Performance Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of SQL warehouse and query performance: warehouse type and sizing for concurrency, Photon and Predictive I/O applicability, three-tier caching semantics and when a cached result is misleading, query-profile reading for skew and spill, data layout for read performance via liquid clustering and data skipping, materialized-view refresh semantics. Evidence: warehouse configuration, query profiles, schema, query text, and system.query.history only. Never executes queries live.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/compute/sql-warehouse/warehouse-types",
+      "https://docs.databricks.com/aws/en/compute/sql-warehouse/warehouse-behavior",
+      "https://docs.databricks.com/aws/en/compute/sql-warehouse/create",
+      "https://docs.databricks.com/aws/en/compute/photon",
+      "https://docs.databricks.com/aws/en/sql/user/queries/query-caching",
+      "https://docs.databricks.com/aws/en/sql/user/queries/query-profile",
+      "https://docs.databricks.com/aws/en/sql/user/queries/query-history",
+      "https://docs.databricks.com/aws/en/tables/clustering"
+    ],
+    "security_notes": "Static review only — reads warehouse config, schema definition, query text, query profiles, query history exports, and ANALYZE output; never executes any query, never invokes SQL, never connects to a live warehouse, and never requests credentials, tokens, storage keys, or customer data. Caching can mask data freshness; the agent flags when a cached result may be stale or when result-cache invalidation is tied to a schema change not visible in query text alone. Performance claims are always scoped to a specific warehouse type (serverless, pro, classic) and compute configuration stated by the user.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-sql-performance-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-sql-performance"
+    ]
+  },
+  {
+    "id": "databricks-streaming-reliability-agent",
+    "name": "Databricks Streaming Reliability Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Structured Streaming correctness and recovery: checkpoint contents and compatibility across restarts, state-schema immutability enforcement, watermark semantics and late-data handling, trigger selection (AvailableNow vs Continuous vs ProcessingTime), exactly-once versus at-least-once sink guarantees, foreachBatch idempotency, RocksDB state store and changelog checkpointing, async checkpoint trade-offs, serverless streaming constraints, and restart/backfill safety. Reads query source, state schema, checkpoint configuration, and trigger definition only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/structured-streaming/checkpoints",
+      "https://docs.databricks.com/aws/en/structured-streaming/watermarks",
+      "https://docs.databricks.com/aws/en/structured-streaming/triggers",
+      "https://docs.databricks.com/aws/en/structured-streaming/foreach",
+      "https://docs.databricks.com/aws/en/structured-streaming/production",
+      "https://docs.databricks.com/aws/en/structured-streaming/rocksdb-state-store",
+      "https://docs.databricks.com/aws/en/structured-streaming/stateful-streaming",
+      "https://docs.databricks.com/aws/en/structured-streaming/read-state",
+      "https://docs.databricks.com/aws/en/compute/serverless/streaming"
+    ],
+    "security_notes": "Static review only — reads query source, state-schema definitions, checkpoint configuration, and trigger selection; never executes queries, never accesses customer data, never reads or modifies checkpoint state, and never requests credentials, tokens, storage keys, or workspace URLs. A claim about state compatibility is verified against the documented schema-evolution rules, not against speculative runtime behavior.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-streaming-reliability-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-streaming-reliability"
+    ]
+  },
+  {
+    "id": "databricks-unity-catalog-governance-agent",
+    "name": "Databricks Unity Catalog Governance Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of Unity Catalog design, GRANT privilege model and inheritance, ownership design and enforcement, workspace-catalog binding enforcement, governed tags and their configuration, lineage and audit evidence, storage credential and external location governance, and least-privilege grant patterns. Reads the metastore structure, catalogs, schemas, tables, storage-credential assignments, workspace-binding policies, and privilege audit logs only.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/access-control/privileges-reference",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/access-control/permissions-concepts",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-privileges/admin-privileges",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/access-control/workspace-catalog-binding",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/create-metastore",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/manage-metastore",
+      "https://docs.databricks.com/aws/en/connect/unity-catalog/cloud-storage/manage-storage-credentials",
+      "https://docs.databricks.com/aws/en/admin/governed-tags",
+      "https://docs.databricks.com/aws/en/admin/system-tables/audit-logs"
+    ],
+    "security_notes": "Static review only — reads UC structure, privilege assignments, storage credentials, workspace binding, and audit logs. Never executes GRANT or REVOKE, never mutates privileges, never requests workspace URLs bound to credentials, personal access tokens, storage keys, or customer data. A request to execute a grant belongs to the live-guard path and requires explicit written approval naming the exact target securable, principal, and privilege. Audit findings are observations only; their remediation requires the governance owner's decision.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-unity-catalog-governance-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-unity-catalog-governance"
+    ]
+  },
+  {
+    "id": "databricks-value-realization-agent",
+    "name": "Databricks Value Realization Agent",
+    "type": "agent",
+    "provider": "databricks",
+    "harnesses": [
+      "codex",
+      "copilot",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro"
+    ],
+    "summary": "Static review of whether a claimed Databricks business outcome is measurable at all, and only then what it is worth. Establishes pain, executive owner, a pre-change baseline, a leading metric, a lagging business KPI, the data required to compute both, the attribution limits, a measurement window, and a kill condition — and refuses to produce a number when the baseline does not exist. Never asserts a currency figure that is not derived from evidence the user supplied.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.databricks.com/aws/en/lakehouse-architecture/well-architected",
+      "https://docs.databricks.com/aws/en/admin/system-tables/billing",
+      "https://docs.databricks.com/aws/en/admin/system-tables/",
+      "https://docs.databricks.com/aws/en/admin/usage/",
+      "https://docs.databricks.com/aws/en/data-governance/unity-catalog/data-quality-monitoring/"
+    ],
+    "security_notes": "Static review only. Never executes queries, jobs, or any workspace operation, and never requests credentials, tokens, workspace URLs, customer records, or personally identifiable data — a value case is built from aggregates and metric definitions, never from row-level customer data. Financial figures are only ever restated from evidence the user supplied or derived from `system.billing.usage` joined to `system.billing.list_prices`; no benchmark, industry average, or vendor-published multiplier is ever presented as this organisation's number.",
+    "last_verified": "2026-08-17",
+    "path": "agents/databricks/databricks-value-realization-agent",
+    "version": "0.1.0",
+    "execution_tier": "static-review",
+    "companion_skills": [
+      "databricks-value-realization"
+    ]
+  },
   {
     "id": "databricks-lakehouse-engineering-at-azure-agent",
     "name": "Databricks Lakehouse Engineering at Azure",