@raishin/vanguard-frontier-agentic 3.11.0 → 3.12.0

package/.agents/tasks/task-rust-tui-implementation/2025-01-15-120000-review.md

@@ -76,7 +76,7 @@ Not tested: the full `App::render()` path with a real ratatui `TestBackend` (onl
 
 | Path | Change |
 |------|--------|
-| `.agents/tasks/task-rust-tui-implementation/` | Task metadata and feature breakdown JSONs |
+| Rust TUI task directory beneath `.agents/tasks/` | Task metadata and feature breakdown JSONs |
 | `.github/workflows/vfa-tui-ci.yml` | New CI: fmt, clippy, test, release matrix (5 targets) |
 | `README.md` | Added TUI section with build/run instructions |
 | `catalog/asset-integrity.json` | Hash regeneration after adding tools/vfa-tui |

package/.agents/tasks/task-rust-tui-implementation/task.json

@@ -1,5 +1,5 @@
 {
-  "task_id": "task-rust-tui-implementation",
+  "task_id": "task\u002drust-tui-implementation",
   "task_description": "Implement the full vfa-tui Rust TUI project at tools/vfa-tui/ including project scaffolding, data models, workspace detection, catalog loading, security module, search engine, subprocess execution, audit logging, UI layer, integration tests, CI workflow, README updates, and asset integrity regeneration.",
   "status": "completed",
   "feature_order": ["FEAT-001", "FEAT-002", "FEAT-003", "FEAT-004", "FEAT-005", "FEAT-006"],

package/.claude-plugin/marketplace.json

@@ -6,13 +6,13 @@
   },
   "metadata": {
     "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
-    "version": "3.11.0"
+    "version": "3.12.0"
   },
   "plugins": [
     {
       "name": "vanguard-frontier-agentic",
       "source": "./",
-      "description": "All 729 cloud, security, compliance, platform, accounting, and finance agents in one install. Includes maestros, advisory reviewers, and live-mutation guards across 45 providers.",
+      "description": "All 735 cloud, security, compliance, platform, accounting, and finance agents in one install. Includes maestros, advisory reviewers, and live-mutation guards across 45 providers.",
       "category": "cloud",
       "tags": [
         "agents",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.11.0",
+  "version": "3.12.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "VincentChuWaiChow",
@@ -380,6 +380,12 @@
     "./agents/ionos/ionos-maestro-agent/harnesses/claude-code.agent.md",
     "./agents/ionos/ionos-security-compliance-reviewer-agent/harnesses/claude-code.agent.md",
     "./agents/istio/istio-ambient-mesh-review-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-authorization-policy-review-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-dataplane-diagnostics-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-gateway-api-review-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-maestro-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-traffic-resilience-review-agent/harnesses/claude-code.agent.md",
+    "./agents/istio/istio-upgrade-readiness-agent/harnesses/claude-code.agent.md",
     "./agents/java/java-application-server-exit-agent/harnesses/claude-code.agent.md",
     "./agents/java/java-concurrency-and-virtual-thread-agent/harnesses/claude-code.agent.md",
     "./agents/java/java-container-and-kubernetes-readiness-agent/harnesses/claude-code.agent.md",

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vanguard-frontier-agentic",
-  "version": "3.11.0",
+  "version": "3.12.0",
   "description": "Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.",
   "author": {
     "name": "VincentChuWaiChow",
@@ -372,7 +372,19 @@
     "./agents/huawei/huawei-waf-cost-optimization-review-agent/harnesses/cursor.agent.md",
     "./agents/huawei/huawei-waf-reliability-review-agent/harnesses/cursor.agent.md",
     "./agents/huawei/huawei-waf-security-review-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-live-database-lifecycle-guard-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-maestro-agent/harnesses/cursor.agent.md",
+    "./agents/ionos/ionos-security-compliance-reviewer-agent/harnesses/cursor.agent.md",
     "./agents/istio/istio-ambient-mesh-review-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-authorization-policy-review-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-dataplane-diagnostics-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-gateway-api-review-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-maestro-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-traffic-resilience-review-agent/harnesses/cursor.agent.md",
+    "./agents/istio/istio-upgrade-readiness-agent/harnesses/cursor.agent.md",
     "./agents/java/java-application-server-exit-agent/harnesses/cursor.agent.md",
     "./agents/java/java-concurrency-and-virtual-thread-agent/harnesses/cursor.agent.md",
     "./agents/java/java-container-and-kubernetes-readiness-agent/harnesses/cursor.agent.md",
@@ -564,6 +576,12 @@
     "./agents/oci/oci-waf-reliability-review-agent/harnesses/cursor.agent.md",
     "./agents/oci/oci-waf-security-review-agent/harnesses/cursor.agent.md",
     "./agents/opentelemetry/opentelemetry-collector-config-review-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-cost-finops-analyst-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-iam-policy-review-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-kubernetes-platform-operator-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-live-kms-key-destruction-guard-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-maestro-agent/harnesses/cursor.agent.md",
+    "./agents/ovhcloud/ovhcloud-network-architect-agent/harnesses/cursor.agent.md",
     "./agents/php/composer-supply-chain-agent/harnesses/cursor.agent.md",
     "./agents/php/php-application-security-agent/harnesses/cursor.agent.md",
     "./agents/php/php-maestro-agent/harnesses/cursor.agent.md",
@@ -685,6 +703,12 @@
     "./agents/sap/sap-testing-quality-gate-agent/harnesses/cursor.agent.md",
     "./agents/sap/sap-transformation-portfolio-triage-agent/harnesses/cursor.agent.md",
     "./agents/sap/sap-treasury-cash-risk-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-cost-optimizer-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-iam-policy-review-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-kapsule-platform-operator-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-live-kapsule-rollout-guard-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-maestro-agent/harnesses/cursor.agent.md",
+    "./agents/scaleway/scaleway-network-architect-agent/harnesses/cursor.agent.md",
     "./agents/sigstore/sigstore-cosign-supply-chain-review-agent/harnesses/cursor.agent.md",
     "./agents/snowflake/snowflake-analytics-semantic-data-product-agent/harnesses/cursor.agent.md",
     "./agents/snowflake/snowflake-bcdr-resilience-agent/harnesses/cursor.agent.md",

package/.github/plugin/marketplace.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/github/copilot-cli/main/schemas/marketplace.schema.json",
   "name": "vanguard-frontier-agentic",
   "description": "Curated marketplace for cloud, zero-trust, and compliance-aware AI workflows — agents, skills, and rules spanning cloud, security, ERP, and platform providers.",
-  "version": "3.11.0",
+  "version": "3.12.0",
   "owner": {
     "name": "VincentChuWaiChow",
     "url": "https://github.com/VincentChuWaiChow"

package/README.md

@@ -59,8 +59,8 @@ operates in. Coordination, governance, and escalation are the product.
 <!-- Generated by scripts/generate-readme-counts.mjs — do not edit by hand. Run: npm run readme-counts:write -->
 | Catalog | Count |
 | --- | --- |
-| Skills | 754 |
-| Agents | 729 |
+| Skills | 761 |
+| Agents | 735 |
 | Providers | 45 |
 | Install roles | 76 |
 | Rules | 1 |
@@ -201,7 +201,7 @@ Or wire it into `~/.claude/settings.json` (or your project's `.claude/settings.j
 
 Pin to a tag for reproducible installs: pick any [released tag](https://github.com/VincentChuWaiChow/vanguard-frontier-agentic/releases) for stable versions, or use `@latest` for the current release.
 
-- **Bundled:** all <!-- count:agents -->729<!-- /count --> cloud, security, compliance, Kubernetes, Terraform agents (incl. provider maestros and live-guard agents)
+- **Bundled:** all <!-- count:agents -->735<!-- /count --> cloud, security, compliance, Kubernetes, Terraform agents (incl. provider maestros and live-guard agents)
 - **Spec:** [`.claude-plugin/marketplace.json`](.claude-plugin/marketplace.json) + [`.claude-plugin/plugin.json`](.claude-plugin/plugin.json) (canonical Claude Code plugin layout)
 - **Not bundled:** skills, rules, MCP references — use the npm path for those
 - **Docs:** [code.claude.com/docs/en/plugin-marketplaces](https://code.claude.com/docs/en/plugin-marketplaces)
@@ -231,7 +231,7 @@ Or in `.github/copilot/settings.json` for repo-wide trust:
 
 - **Marketplace manifest:** [`.github/plugin/marketplace.json`](.github/plugin/marketplace.json) declares this repo as a single-plugin marketplace
 - **Source path:** `./` (the repo root is the plugin root)
-- **Bundled:** <!-- count:agents -->729<!-- /count --> Copilot agent adapters under `agents/<provider>/<agent>/harnesses/copilot.agent.md`
+- **Bundled:** <!-- count:agents -->735<!-- /count --> Copilot agent adapters under `agents/<provider>/<agent>/harnesses/copilot.agent.md`
 - **Docs:** [github.com/github/copilot-cli](https://github.com/github/copilot-cli) (`/plugin marketplace add`)
 
 </details>
@@ -252,7 +252,7 @@ In Cursor: **Settings → Plugins → Add Plugin Directory** → pick the cloned
 vscode.cursor.plugins.registerPath("/absolute/path/to/vanguard-frontier-agentic");
 ```
 
-- **Plugin manifest:** [`.cursor-plugin/plugin.json`](.cursor-plugin/plugin.json) enumerates all **<!-- count:agents -->729<!-- /count --> Cursor agent adapters** explicitly via the `agents` field
+- **Plugin manifest:** [`.cursor-plugin/plugin.json`](.cursor-plugin/plugin.json) enumerates all **<!-- count:agents -->735<!-- /count --> Cursor agent adapters** explicitly via the `agents` field
 - **Bundled:** all agents from `agents/<provider>/<agent>/harnesses/cursor.agent.md`
 - **Rules:** existing `rules/` directory at repo root is auto-discovered by Cursor
 - **Docs:** [cursor.com/docs/plugins](https://cursor.com/docs/plugins) · [cursor.com/docs/reference/plugins](https://cursor.com/docs/reference/plugins)
@@ -343,7 +343,7 @@ enabled = true
 - **Bundled plugins:**
   - `vanguard-frontier-agentic` — the main plugin, manifest at [`plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json`](plugins/vanguard-frontier-agentic/.codex-plugin/plugin.json)
   - `cross-platform-agent-template` — scaffold for new cross-platform agents
-- **For agent adapter files** (`.codex/agents/*.toml`): after enabling the plugin, run `npx vfa-export-agents --platform codex --all --repo .` to write the <!-- count:agents -->729<!-- /count --> agent adapters into your repo
+- **For agent adapter files** (`.codex/agents/*.toml`): after enabling the plugin, run `npx vfa-export-agents --platform codex --all --repo .` to write the <!-- count:agents -->735<!-- /count --> agent adapters into your repo
 - **Other commands:** `codex plugin marketplace upgrade vanguard-frontier-agentic`, `codex plugin marketplace remove vanguard-frontier-agentic`
 - **Docs:** [github.com/openai/codex](https://github.com/openai/codex) · [Codex plugin spec](https://github.com/openai/codex/blob/main/codex-rs/skills/src/assets/samples/plugin-creator/references/plugin-json-spec.md)
 
@@ -425,7 +425,7 @@ vfa-tui                                      # installed via cargo or prebuilt b
 
 ## 🧠 Skills
 
-**<!-- count:skills -->754<!-- /count --> skills** across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, CNCF ecosystem, Terraform, marketing governance, and more.
+**<!-- count:skills -->761<!-- /count --> skills** across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, CNCF ecosystem, Terraform, marketing governance, and more.
 
 | Domain             | Count | What they cover                                                                                   |
 | ------------------ | ----: | ------------------------------------------------------------------------------------------------- |
@@ -438,7 +438,7 @@ vfa-tui                                      # installed via cargo or prebuilt b
 | ☸️ Kubernetes       |    10 | RBAC review, workload identity, PSA, live RBAC/admission/mesh/network/ArgoCD guards, maestro      |
 | 🛡️ Kyverno          |     1 | ClusterPolicy/Policy, PolicyException, failureAction, background scan                             |
 | 🔄 Argo CD          |     2 | AppProject blast-radius, sync impersonation, RollingSync, sync-window                             |
-| 🕸️ Istio            |     1 | Ambient mesh, ztunnel L4 vs waypoint L7, PeerAuthentication, mTLS posture                        |
+| 🕸️ Istio            | <!-- count:skill-directory:istio -->8<!-- /count --> | Ambient mesh, authorization, traffic resilience, Gateway API, upgrades, diagnostics, routing, guarded live policy changes |
 | 🐝 Cilium           |     1 | CiliumNetworkPolicy, ClusterMesh trust, 169.254.169.254 egress, WireGuard encryption              |
 | 📡 OpenTelemetry    |     1 | Collector pipeline, memory_limiter, receiver exposure, exporter cardinality, credential handling  |
 | 🟩 Terraform        |    10 | Engine-shared Terraform/OpenTofu board: maestro routing, plan blast radius, state reliability, estate reconciliation, supply-chain integrity, engine compatibility, policy evidence, execution governance, module contract, verification strategy |
@@ -525,7 +525,7 @@ Rule of thumb: if the asset teaches **how to do a repeatable task**, it is a ski
 
 ## 🤖 Agents
 
-**<!-- count:agents -->729<!-- /count --> agents** matching the skill catalog — agents ship harness adapters and a hardened permission model.
+**<!-- count:agents -->735<!-- /count --> agents** matching the skill catalog — agents ship harness adapters and a hardened permission model.
 
 | Provider           | Count | Specialisations                                                                     |
 | ------------------ | ----: | ----------------------------------------------------------------------------------- |
@@ -543,7 +543,7 @@ Rule of thumb: if the asset teaches **how to do a repeatable task**, it is a ski
 | 💰 Contabo          |     6 | advisory, live instance + storage guards, maestro router                            |
 | 🛡️ Kyverno          |     1 | Admission policy review                                                             |
 | 🔄 Argo CD          |     2 | GitOps review, live sync guard                                                      |
-| 🕸️ Istio            |     1 | Ambient mesh review                                                                 |
+| 🕸️ Istio            | <!-- count:provider:istio -->7<!-- /count --> | Maestro plus ambient, authorization, traffic resilience, Gateway API, upgrade, and dataplane review |
 | 🐝 Cilium           |     1 | Network policy review                                                               |
 | 📡 OpenTelemetry    |     1 | Collector config review                                                             |
 | 💡 Backstage        |     1 | IDP scaffolder review                                                               |
@@ -657,7 +657,7 @@ agents/
 ├── hr/               (15 agents — employee relations, investigations, performance, compensation, benefits, recruiting, workforce planning, learning, culture & DEI, analytics, HRIS, termination readiness, maestro)
 ├── huawei/           (43 agents — advisory, live-guard operators, maestro)
 ├── ionos/            (6 agents — advisory, live DB lifecycle guard, maestro)
-├── istio/            (1 agent — ambient mesh review)
+├── istio/            (7 agents — ambient mesh review)
 ├── java/             (15 agents — JDK lifecycle, concurrency/virtual threads, JVM performance/GC, container sizing, framework readiness, Spring Security, deserialization security, JPA/Hibernate, transactions, migration safety, Kafka, resilience, testing, app-server exit — maestro + 14 specialists)
 ├── kotlin/           (16 agents — language/null-safety, coroutines/Flow reliability, library API/ABI, Ktor + Kotlin-Spring backend, kotlinx.serialization wire contracts, Java-to-Kotlin modernization, Android architecture/Compose/security/performance, KMP portfolio + interop, Gradle build, supply-chain integrity, test architecture — maestro + 15 specialists)
 ├── kubernetes/       (15 agents — RBAC, workload identity, PSA, pod-spec, ESO, Kubecost, live-guards, maestro)
@@ -821,6 +821,7 @@ Use `--provider` with `--role` to narrow the install to one cloud.
 | `dotnet` | 🟣 .NET | 10 |
 | `terraform` | 🟩 Terraform (cross-cloud) | 9 |
 | `finance` | 💹 Finance | 8 |
+| `istio` | 🕸️ Istio (service mesh) | 7 |
 | `contabo` | 💰 Contabo | 6 |
 | `hetzner` | 🇩🇪 Hetzner Cloud | 6 |
 | `ionos` | 🌐 IONOS Cloud | 6 |
@@ -834,7 +835,6 @@ Use `--provider` with `--role` to narrow the install to one cloud.
 | `cilium` | 🐝 Cilium (network policy) | 1 |
 | `falco` | 🦅 Falco (runtime threat detection) | 1 |
 | `fluxcd` | 🔄 FluxCD (GitOps) | 1 |
-| `istio` | 🕸️ Istio (service mesh) | 1 |
 | `kyverno` | 🛡️ Kyverno (admission policy) | 1 |
 | `opentelemetry` | 📡 OpenTelemetry (observability) | 1 |
 | `prometheus` | 📊 Prometheus (alerting + cardinality) | 1 |
@@ -1295,7 +1295,7 @@ In two weeks on npm: ~900 downloads. Socket.dev scores: Vulnerability 100, Quali
 
 Your sponsorship directly funds the compute, API time, and research hours that turn new cloud providers, compliance frameworks, and security patterns into production-ready agents — free for everyone.
 
-Current catalog: **<!-- count:agents -->729<!-- /count --> agents · <!-- count:skills -->754<!-- /count --> skills · <!-- count:providers -->45<!-- /count --> cloud/platform providers**
+Current catalog: **<!-- count:agents -->735<!-- /count --> agents · <!-- count:skills -->761<!-- /count --> skills · <!-- count:providers -->45<!-- /count --> cloud/platform providers**
 
 ---
 

package/agents/AGENTS.md

@@ -1,6 +1,6 @@
 # AGENTS.md — Navigation Compass
 
-141 agents across 18 providers. This file is the index; load provider files on demand.
+<!-- count:global:agents -->735<!-- /count --> agents across <!-- count:global:providers -->45<!-- /count --> providers. This file is the index; load provider files on demand.
 
 ## File structure
 
@@ -9,7 +9,7 @@ agents/<provider>/<agent-id>/AGENT.md          ← harness-neutral role contract
 agents/<provider>/<agent-id>/harnesses/        ← 7 adapters: codex, copilot, claude-code,
                                                   cursor, gemini, kiro-ide, kiro-cli
 agents/<provider>/<agent-id>/metadata.json     ← catalog mirror
-catalog/agents.json                            ← machine-readable index of all 127 agents
+catalog/agents.json                            ← machine-readable index of every agent
 ```
 
 ## Agent tiers
@@ -24,7 +24,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🟧 AWS — 43 agents → [`agents/aws/AGENTS.md`](aws/AGENTS.md)
+## 🟧 AWS — <!-- count:dir:aws:agents -->47<!-- /count --> agents → [`agents/aws/AGENTS.md`](aws/AGENTS.md)
 
 **Entry point:** load `agents/aws/aws-maestro-agent/AGENT.md` for any AWS task; it routes to the right specialist and back.
 
@@ -49,7 +49,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🟦 Azure — 32 agents → [`agents/azure/AGENTS.md`](azure/AGENTS.md)
+## 🟦 Azure — <!-- count:dir:azure:agents -->36<!-- /count --> agents → [`agents/azure/AGENTS.md`](azure/AGENTS.md)
 
 **Entry point:** load `agents/azure/azure-maestro-agent/AGENT.md` for any Azure task.
 
@@ -74,7 +74,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🟥 OCI — 35 agents → [`agents/oci/AGENTS.md`](oci/AGENTS.md)
+## 🟥 OCI — <!-- count:dir:oci:agents -->39<!-- /count --> agents → [`agents/oci/AGENTS.md`](oci/AGENTS.md)
 
 **Entry point:** load `agents/oci/oci-maestro-agent/AGENT.md` for any OCI task.
 
@@ -97,7 +97,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## ☁️ OVHcloud — 6 agents → [`agents/ovhcloud/README.md`](ovhcloud/README.md)
+## ☁️ OVHcloud — <!-- count:dir:ovhcloud:agents -->6<!-- /count --> agents → [`agents/ovhcloud/README.md`](ovhcloud/README.md)
 
 **Entry point:** load `agents/ovhcloud/ovhcloud-maestro-agent/AGENT.md` for any OVHcloud task.
 
@@ -114,7 +114,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🌐 IONOS Cloud — 6 agents → [`agents/ionos/README.md`](ionos/README.md)
+## 🌐 IONOS Cloud — <!-- count:dir:ionos:agents -->6<!-- /count --> agents → [`agents/ionos/README.md`](ionos/README.md)
 
 **Entry point:** load `agents/ionos/ionos-maestro-agent/AGENT.md` for any IONOS Cloud task.
 
@@ -131,7 +131,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🇫🇷 Scaleway — 6 agents → [`agents/scaleway/README.md`](scaleway/README.md)
+## 🇫🇷 Scaleway — <!-- count:dir:scaleway:agents -->6<!-- /count --> agents → [`agents/scaleway/README.md`](scaleway/README.md)
 
 **Entry point:** load `agents/scaleway/scaleway-maestro-agent/AGENT.md` for any Scaleway task.
 
@@ -148,7 +148,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🇩🇪 Hetzner Cloud — 6 agents → [`agents/hetzner/README.md`](hetzner/README.md)
+## 🇩🇪 Hetzner Cloud — <!-- count:dir:hetzner:agents -->6<!-- /count --> agents → [`agents/hetzner/README.md`](hetzner/README.md)
 
 **Entry point:** load `agents/hetzner/hetzner-maestro-agent/AGENT.md` for any Hetzner Cloud task.
 
@@ -164,7 +164,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 💰 Contabo — 6 agents → [`agents/contabo/README.md`](contabo/README.md)
+## 💰 Contabo — <!-- count:dir:contabo:agents -->6<!-- /count --> agents → [`agents/contabo/README.md`](contabo/README.md)
 
 **Entry point:** load `agents/contabo/contabo-maestro-agent/AGENT.md` for any Contabo task.
 
@@ -180,7 +180,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## ☸️ Kubernetes — 13 agents → [`agents/kubernetes/README.md`](kubernetes/README.md)
+## ☸️ Kubernetes — <!-- count:dir:kubernetes:agents -->15<!-- /count --> agents → [`agents/kubernetes/README.md`](kubernetes/README.md)
 
 **Entry point:** load `agents/kubernetes/kubernetes-maestro-agent/AGENT.md` — routes to all K8s specialists (including CNCF domain agents below) and enforces the live-guard gate.
 
@@ -202,7 +202,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 📊 Prometheus — 1 agent → [`agents/prometheus/README.md`](prometheus/README.md)
+## 📊 Prometheus — <!-- count:dir:prometheus:agents -->1<!-- /count --> agents → [`agents/prometheus/README.md`](prometheus/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -210,7 +210,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🦅 Falco — 1 agent → [`agents/falco/README.md`](falco/README.md)
+## 🦅 Falco — <!-- count:dir:falco:agents -->1<!-- /count --> agents → [`agents/falco/README.md`](falco/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -218,7 +218,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🔏 Sigstore — 1 agent → [`agents/sigstore/README.md`](sigstore/README.md)
+## 🔏 Sigstore — <!-- count:dir:sigstore:agents -->1<!-- /count --> agents → [`agents/sigstore/README.md`](sigstore/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -226,7 +226,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🔐 cert-manager — 4 agents → [`agents/cert-manager/README.md`](cert-manager/README.md)
+## 🔐 cert-manager — <!-- count:dir:cert-manager:agents -->1<!-- /count --> agents → [`agents/cert-manager/README.md`](cert-manager/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -237,7 +237,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🔄 FluxCD — 1 agent → [`agents/fluxcd/README.md`](fluxcd/README.md)
+## 🔄 FluxCD — <!-- count:dir:fluxcd:agents -->1<!-- /count --> agents → [`agents/fluxcd/README.md`](fluxcd/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -245,7 +245,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🎭 Backstage — 1 agent → [`agents/backstage/README.md`](backstage/README.md)
+## 🎭 Backstage — <!-- count:dir:backstage:agents -->1<!-- /count --> agents → [`agents/backstage/README.md`](backstage/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -263,7 +263,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🛡️ Kyverno — 1 agent → [`agents/kyverno/README.md`](kyverno/README.md)
+## 🛡️ Kyverno — <!-- count:dir:kyverno:agents -->1<!-- /count --> agents → [`agents/kyverno/README.md`](kyverno/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -273,7 +273,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🔄 Argo CD — 2 agents → [`agents/argocd/README.md`](argocd/README.md)
+## 🔄 Argo CD — <!-- count:dir:argocd:agents -->2<!-- /count --> agents → [`agents/argocd/README.md`](argocd/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -284,7 +284,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🕸️ Istio — 1 agent → [`agents/istio/README.md`](istio/README.md)
+## 🕸️ Istio — <!-- count:dir:istio:agents -->7<!-- /count --> agents → [`agents/istio/README.md`](istio/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -294,7 +294,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🐝 Cilium — 1 agent → [`agents/cilium/README.md`](cilium/README.md)
+## 🐝 Cilium — <!-- count:dir:cilium:agents -->1<!-- /count --> agents → [`agents/cilium/README.md`](cilium/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -304,7 +304,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 📡 OpenTelemetry — 1 agent → [`agents/opentelemetry/README.md`](opentelemetry/README.md)
+## 📡 OpenTelemetry — <!-- count:dir:opentelemetry:agents -->1<!-- /count --> agents → [`agents/opentelemetry/README.md`](opentelemetry/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|
@@ -312,7 +312,7 @@ Live-guard agents refuse to proceed without: target confirmation (cluster/accoun
 
 ---
 
-## 🟩 Terraform / OpenTofu — 9 agents → [`agents/terraform/README.md`](terraform/README.md)
+## 🟩 Terraform / OpenTofu — <!-- count:dir:terraform:agents -->9<!-- /count --> agents → [`agents/terraform/README.md`](terraform/README.md)
 
 Engine-shared board: one provider covers Terraform and OpenTofu, and every specialist
 names the engine behind any version-sensitive claim. See
@@ -334,7 +334,7 @@ agent after a human gate.
 
 ---
 
-## 💰 FinOps / Multi-cloud — 1 agent → [`agents/finops/README.md`](finops/README.md)
+## 💰 FinOps / Multi-cloud — <!-- count:dir:finops:agents -->4<!-- /count --> agents → [`agents/finops/README.md`](finops/README.md)
 
 | Agent | Tier | Load when |
 |---|---|---|

package/agents/README.md

@@ -1,6 +1,6 @@
 # Agents
 
-Role definitions for repeatable review, architecture, operations, and bounded execution work. **386 enterprise-grade, audit-ready agents** organized in a three-layer ecosystem: maestro routers, domain specialists, and cross-functional protocols.
+Role definitions for repeatable review, architecture, operations, and bounded execution work. **<!-- count:global:agents -->735<!-- /count --> enterprise-grade, audit-ready agents** organized in a three-layer ecosystem: maestro routers, domain specialists, and cross-functional protocols.
 
 ## Three-layer agentic architecture
 
@@ -33,7 +33,7 @@ Beyond cloud infrastructure, Vanguard Frontier ships agents for Legal, HR, Marke
 
 The **Legal + HR ecosystem is the proof of concept** for cross-functional agentic coordination. Here's why it matters:
 
-- **28 specialist agents** (13 Legal + 15 HR, each with a maestro router) handle the most legally exposed, audit-heavy, escalation-aware domains in an organization
+- **<!-- count:board:legal+hr:agents -->28<!-- /count --> specialist agents** (<!-- count:board:legal:agents -->13<!-- /count --> Legal + <!-- count:board:hr:agents -->15<!-- /count --> HR, each with a maestro router) handle the most legally exposed, audit-heavy, escalation-aware domains in an organization
 - **3 cross-functional protocol skills** (`legal-hr-routing-protocol`, `legal-hr-case-capsule`, `legal-hr-risk-taxonomy`) define how agents hand off, escalate, and coordinate across organizational boundaries
 - **Real handoff scenarios:** whistleblower reports → both Legal (privilege) and HR (investigation) own it; wrongful-termination exposure → Legal flags risk, HR confirms readiness before execution; data breach → Legal holds, HR freezes personnel actions
 - **Audit-ready design:** every handoff is logged; every escalation has a named decision owner; every irreversible action routes to a human
@@ -51,21 +51,21 @@ Vanguard Frontier's cloud agent portfolios are organized by execution tier: advi
 
 | Provider | Current status | Agents | Notes |
 | --- | --- | ---: | --- |
-| 🟧 AWS | active | 47 | advisory, repo-write execution, and guarded live-AWS operator agents |
-| 🟥 OCI | active | 39 | advisory and guarded live-OCI operator agents |
-| 🟩 GCP | active | 39 | advisory, live-guard operators, maestro router |
-| 🟦 Azure | active | 36 | advisory and guarded live-Azure operator agents |
-| 🟠 Alibaba Cloud | active | 30 | advisory, live-guard operators, maestro router |
-| 🔴 Huawei Cloud | active | 30 | advisory, live-guard operators, maestro router |
-| ☁️ OVHcloud | active | 6 | maestro router, IAM, FinOps, MCK, network architect, KMS live-guard |
-| 🌐 IONOS Cloud | active | 6 | maestro router, DCD review, GDPR/compliance, K8s, FinOps, DBaaS live-guard |
-| 🇫🇷 Scaleway | active | 6 | maestro router, IAM, Kapsule, FinOps, network, Kapsule rollout live-guard |
-| 🇩🇪 Hetzner Cloud | active | 6 | maestro router, FinOps, infra review, capacity, firewall + server live-guards |
-| 💰 Contabo | active | 6 | maestro router, FinOps, capacity, security hardening, instance + storage live-guards |
-| ☸️ Kubernetes | active | 15 | RBAC, workload identity, PSA, live-guards, maestro |
-| 🟩 Terraform | active | 2 | generic IaC review |
-| 💰 Multi-cloud | limited | 1 | FinOps cross-cloud price advisor |
-| CNCF ecosystem | active | 14 | Kyverno, Argo CD, Istio, Cilium, OTEL, Prometheus, Falco, Sigstore, cert-manager, FluxCD, Backstage, Velero |
+| 🟧 AWS | active | <!-- count:board:aws:agents -->47<!-- /count --> | advisory, repo-write execution, and guarded live-AWS operator agents |
+| 🟥 OCI | active | <!-- count:board:oci:agents -->39<!-- /count --> | advisory and guarded live-OCI operator agents |
+| 🟩 GCP | active | <!-- count:board:gcp:agents -->51<!-- /count --> | advisory, live-guard operators, maestro router |
+| 🟦 Azure | active | <!-- count:board:azure:agents -->36<!-- /count --> | advisory and guarded live-Azure operator agents |
+| 🟠 Alibaba Cloud | active | <!-- count:board:alibaba:agents -->43<!-- /count --> | advisory, live-guard operators, maestro router |
+| 🔴 Huawei Cloud | active | <!-- count:board:huawei:agents -->43<!-- /count --> | advisory, live-guard operators, maestro router |
+| ☁️ OVHcloud | active | <!-- count:board:ovhcloud:agents -->6<!-- /count --> | maestro router, IAM, FinOps, MCK, network architect, KMS live-guard |
+| 🌐 IONOS Cloud | active | <!-- count:board:ionos:agents -->6<!-- /count --> | maestro router, DCD review, GDPR/compliance, K8s, FinOps, DBaaS live-guard |
+| 🇫🇷 Scaleway | active | <!-- count:board:scaleway:agents -->6<!-- /count --> | maestro router, IAM, Kapsule, FinOps, network, Kapsule rollout live-guard |
+| 🇩🇪 Hetzner Cloud | active | <!-- count:board:hetzner:agents -->6<!-- /count --> | maestro router, FinOps, infra review, capacity, firewall + server live-guards |
+| 💰 Contabo | active | <!-- count:board:contabo:agents -->6<!-- /count --> | maestro router, FinOps, capacity, security hardening, instance + storage live-guards |
+| ☸️ Kubernetes | active | <!-- count:board:kubernetes:agents -->16<!-- /count --> | RBAC, workload identity, PSA, live-guards, maestro |
+| 🟩 Terraform | active | <!-- count:board:terraform:agents -->9<!-- /count --> | generic IaC review |
+| 💰 Multi-cloud | limited | <!-- count:board:multi-cloud:agents -->3<!-- /count --> | FinOps cross-cloud price advisor |
+| CNCF ecosystem | active | <!-- count:board:kyverno+argocd+istio+cilium+opentelemetry+prometheus+falco+sigstore+cert-manager+fluxcd+backstage:agents -->18<!-- /count --> | Kyverno, Argo CD, Istio, Cilium, OTEL, Prometheus, Falco, Sigstore, cert-manager, FluxCD, Backstage. Velero ships skills only — no agents — so it is not counted here |
 
 ## Agent tiers
 

package/agents/ionos/ionos-cost-optimization-analyst-agent/metadata.json

@@ -3,7 +3,14 @@
   "name": "IONOS Cost Optimization Analyst",
   "type": "agent",
   "provider": "ionos",
-  "harnesses": ["codex", "claude-code"],
+  "harnesses": [
+    "codex",
+    "copilot",
+    "claude-code",
+    "cursor",
+    "gemini",
+    "kiro"
+  ],
   "summary": "Advisory agent for IONOS Cloud cost analysis: resource utilization review, idle server and volume identification, pricing strategy, contract tier evaluation, and rightsizing recommendations across compute, storage, and managed services.",
   "source_type": "original",
   "official_docs": [
@@ -17,9 +24,16 @@
   "path": "agents/ionos/ionos-cost-optimization-analyst-agent",
   "version": "0.1.0",
   "author": "github: VincentChuWaiChow",
-  "companion_skills": ["ionos-cost-optimization-analyst"],
+  "companion_skills": [
+    "ionos-cost-optimization-analyst"
+  ],
   "harness_variants": {
     "codex": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/codex.toml",
-    "claude-code": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/claude-code.agent.md"
+    "copilot": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/copilot.agent.md",
+    "claude-code": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/claude-code.agent.md",
+    "cursor": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/cursor.agent.md",
+    "gemini": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/gemini.agent.md",
+    "kiro-ide": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/kiro-ide.agent.md",
+    "kiro-cli": "agents/ionos/ionos-cost-optimization-analyst-agent/harnesses/kiro-cli.agent.json"
   }
 }

package/agents/ionos/ionos-datacenter-designer-reviewer-agent/metadata.json

@@ -3,7 +3,14 @@
   "name": "IONOS Data Center Designer Reviewer",
   "type": "agent",
   "provider": "ionos",
-  "harnesses": ["codex", "claude-code"],
+  "harnesses": [
+    "codex",
+    "copilot",
+    "claude-code",
+    "cursor",
+    "gemini",
+    "kiro"
+  ],
   "summary": "Advisory agent for IONOS Data Center Designer (DCD) topology review: resource organization, multi-AZ placement, LAN segmentation, volume layout, NIC configuration, and blast-radius assessment before topology changes.",
   "source_type": "original",
   "official_docs": [
@@ -17,9 +24,16 @@
   "path": "agents/ionos/ionos-datacenter-designer-reviewer-agent",
   "version": "0.1.0",
   "author": "github: VincentChuWaiChow",
-  "companion_skills": ["ionos-datacenter-designer-reviewer"],
+  "companion_skills": [
+    "ionos-datacenter-designer-reviewer"
+  ],
   "harness_variants": {
     "codex": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/codex.toml",
-    "claude-code": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/claude-code.agent.md"
+    "copilot": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/copilot.agent.md",
+    "claude-code": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/claude-code.agent.md",
+    "cursor": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/cursor.agent.md",
+    "gemini": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/gemini.agent.md",
+    "kiro-ide": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/kiro-ide.agent.md",
+    "kiro-cli": "agents/ionos/ionos-datacenter-designer-reviewer-agent/harnesses/kiro-cli.agent.json"
   }
 }

package/agents/ionos/ionos-kubernetes-platform-operator-agent/metadata.json

@@ -3,7 +3,14 @@
   "name": "IONOS Kubernetes Platform Operator",
   "type": "agent",
   "provider": "ionos",
-  "harnesses": ["codex", "claude-code"],
+  "harnesses": [
+    "codex",
+    "copilot",
+    "claude-code",
+    "cursor",
+    "gemini",
+    "kiro"
+  ],
   "summary": "Advisory agent for IONOS managed Kubernetes: cluster readiness, node pool configuration, workload placement, autoscaling posture, PodDisruptionBudget coverage, and upgrade safety.",
   "source_type": "original",
   "official_docs": [
@@ -17,9 +24,16 @@
   "path": "agents/ionos/ionos-kubernetes-platform-operator-agent",
   "version": "0.1.0",
   "author": "github: VincentChuWaiChow",
-  "companion_skills": ["ionos-kubernetes-platform-operator"],
+  "companion_skills": [
+    "ionos-kubernetes-platform-operator"
+  ],
   "harness_variants": {
     "codex": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/codex.toml",
-    "claude-code": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/claude-code.agent.md"
+    "copilot": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/copilot.agent.md",
+    "claude-code": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/claude-code.agent.md",
+    "cursor": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/cursor.agent.md",
+    "gemini": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/gemini.agent.md",
+    "kiro-ide": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/kiro-ide.agent.md",
+    "kiro-cli": "agents/ionos/ionos-kubernetes-platform-operator-agent/harnesses/kiro-cli.agent.json"
   }
 }