@raishin/vanguard-frontier-agentic 3.15.0 → 3.17.0

package/catalog/index.json

@@ -1,12 +1,13 @@
 {
   "name": "vanguard-frontier-agentic",
-  "summary": "Curated cross-harness marketplace for cloud-focused agent skills, agents, rules, MCP references, and delegation workflows.",
+  "summary": "Curated cross-harness marketplace for cloud-focused agent skills, agents, rules, MCP references, delegation workflows, and mods.",
   "last_updated": "2026-05-09",
   "catalogs": {
     "skills": "catalog/skills.json",
     "agents": "catalog/agents.json",
     "rules": "catalog/rules.json",
     "mcp_references": "catalog/mcp-references.json",
-    "workflows": "catalog/workflows.json"
+    "workflows": "catalog/workflows.json",
+    "mods": "catalog/mods.json"
   }
 }

package/catalog/install-roles.json

@@ -66,8 +66,11 @@
     },
     "cloud-ai-platform-engineer": {
       "label": "Cloud AI Platform Engineer",
-      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
+      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines. Includes the vendor-neutral agentic board: agentic system architecture review and agentic security review with the shared agentic-board-protocol handoff and decision contract.",
       "agents": [
+        "agentic-security-review-agent",
+        "agentic-system-architecture-review-agent",
+        "finance-capital-allocation-advisor-agent",
         "gcp-alloydb-ai-developer-agent",
         "gcp-gemini-api-developer-agent",
         "gcp-vertex-ai-mlops-engineer-agent",
@@ -86,6 +89,10 @@
         "nvidia-triton-inference-serving-review-agent"
       ],
       "skills": [
+        "agentic-board-protocol",
+        "agentic-security-review",
+        "agentic-system-architecture-review",
+        "capital-allocation-advisor",
         "gcp-alloydb-ai-developer",
         "gcp-gemini-api-developer",
         "gcp-vertex-ai-mlops-engineer",
@@ -558,6 +565,8 @@
       "label": "Cloud Security Engineer",
       "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
       "agents": [
+        "agentic-security-review-agent",
+        "agentic-system-architecture-review-agent",
         "alibaba-actiontrail-audit-analyst-agent",
         "alibaba-certificate-manager-issuer-review-agent",
         "alibaba-china-compliance-agent",
@@ -588,6 +597,7 @@
         "azure-security-posture-hardening-agent",
         "azure-waf-security-review-agent",
         "contabo-security-hardening-agent",
+        "finance-capital-allocation-advisor-agent",
         "gcp-certificate-manager-issuer-review-agent",
         "gcp-cloud-auth-advisor-agent",
         "gcp-compliance-assured-workloads-agent",
@@ -634,6 +644,9 @@
         "terraform-supply-chain-integrity-agent"
       ],
       "skills": [
+        "agentic-board-protocol",
+        "agentic-security-review",
+        "agentic-system-architecture-review",
         "alibaba-actiontrail-audit-analyst",
         "alibaba-certificate-manager-issuer-review",
         "alibaba-china-compliance",
@@ -663,6 +676,7 @@
         "azure-role-selector",
         "azure-security-posture-hardening",
         "azure-waf-security-review",
+        "capital-allocation-advisor",
         "contabo-security-hardening",
         "gcp-certificate-manager-issuer-review",
         "gcp-cloud-auth-advisor",
@@ -2371,13 +2385,20 @@
         "typescript-maestro-agent",
         "typescript-mcp-tool-contract-agent",
         "typescript-runtime-boundary-contract-agent",
-        "typescript-business-critical-automation-governance-agent"
+        "typescript-business-critical-automation-governance-agent",
+        "agentic-system-architecture-review-agent",
+        "agentic-security-review-agent",
+        "finance-capital-allocation-advisor-agent"
       ],
       "skills": [
         "typescript-maestro",
         "typescript-mcp-tool-contract",
         "typescript-runtime-boundary-contract",
-        "typescript-business-critical-automation-governance"
+        "typescript-business-critical-automation-governance",
+        "agentic-system-architecture-review",
+        "agentic-security-review",
+        "capital-allocation-advisor",
+        "agentic-board-protocol"
       ]
     },
     "snowflake-platform-architect": {

package/catalog/model-assignments.json

@@ -524,6 +524,72 @@
       "model_source": "default",
       "reasoning_source": "default"
     },
+    {
+      "agent_id": "agentic-security-review-agent",
+      "harness": "codex",
+      "model": "gpt-6-sol",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "provider:generic",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "agentic-security-review-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "agentic-security-review-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "agentic-system-architecture-review-agent",
+      "harness": "codex",
+      "model": "gpt-6-sol",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "provider:generic",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "agentic-system-architecture-review-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "agentic-system-architecture-review-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
     {
       "agent_id": "ai-advertising-targeting-fairness-review-agent",
       "harness": "codex",

package/catalog/mods.json

@@ -0,0 +1,131 @@
+[
+  {
+    "id": "audit-trail",
+    "name": "Audit Trail",
+    "version": "1.0.0",
+    "description": "Appends one JSON line per tool call to a per-session log with sha256 hashes of the arguments and result.",
+    "reach_level": 1,
+    "events": [
+      "PostToolUse"
+    ],
+    "harnesses": [
+      "claude-code",
+      "codex",
+      "kiro"
+    ],
+    "path": "mods/audit-trail",
+    "footprint": {
+      "env_reads": [
+        "VANGUARD_AUDIT_TRAIL_LOG_DIR",
+        "VANGUARD_AUDIT_TRAIL_SESSION_ID",
+        "VANGUARD_AUDIT_TRAIL_AGENT_ID"
+      ],
+      "file_writes": [
+        ".audit/**"
+      ],
+      "spawns": [],
+      "egress_hosts": []
+    }
+  },
+  {
+    "id": "blast-radius-guard",
+    "name": "Blast Radius Guard",
+    "version": "1.0.0",
+    "description": "Asks before, or blocks, destructive shell commands and writes to system paths.",
+    "reach_level": 0,
+    "events": [
+      "PreToolUse"
+    ],
+    "harnesses": [
+      "claude-code",
+      "codex",
+      "kiro"
+    ],
+    "path": "mods/blast-radius-guard",
+    "footprint": {
+      "env_reads": [
+        "VANGUARD_BLAST_RADIUS_GUARD_MODE",
+        "VANGUARD_BLAST_RADIUS_GUARD_PATTERNS"
+      ],
+      "file_writes": [],
+      "spawns": [],
+      "egress_hosts": []
+    }
+  },
+  {
+    "id": "context-burn",
+    "name": "Context Burn",
+    "version": "1.0.0",
+    "description": "Tracks context use per session in a status file and warns at 70% and 90% where the harness reports token use.",
+    "reach_level": 1,
+    "events": [
+      "PostToolUse",
+      "SessionStart"
+    ],
+    "harnesses": [
+      "claude-code",
+      "codex",
+      "kiro"
+    ],
+    "path": "mods/context-burn",
+    "footprint": {
+      "env_reads": [
+        "VANGUARD_CONTEXT_BURN_STATUS_PATH"
+      ],
+      "file_writes": [
+        ".claude/context-burn-status/*.json",
+        ".kiro/context-burn-status/*.json",
+        ".codex/context-burn-status/*.json"
+      ],
+      "spawns": [],
+      "egress_hosts": []
+    }
+  },
+  {
+    "id": "live-guard-gate",
+    "name": "Live Guard Gate",
+    "version": "1.0.0",
+    "description": "Asks before live cloud mutations and names the guard agent that should review them.",
+    "reach_level": 0,
+    "events": [
+      "PreToolUse"
+    ],
+    "harnesses": [
+      "claude-code",
+      "codex",
+      "kiro"
+    ],
+    "path": "mods/live-guard-gate",
+    "footprint": {
+      "env_reads": [],
+      "file_writes": [],
+      "spawns": [],
+      "egress_hosts": []
+    }
+  },
+  {
+    "id": "secret-redactor",
+    "name": "Secret Redactor",
+    "version": "1.0.0",
+    "description": "Asks before tool calls whose input carries a credential and redacts credentials from tool output.",
+    "reach_level": 0,
+    "events": [
+      "PreToolUse",
+      "PostToolUse"
+    ],
+    "harnesses": [
+      "claude-code",
+      "codex",
+      "kiro"
+    ],
+    "path": "mods/secret-redactor",
+    "footprint": {
+      "env_reads": [
+        "VANGUARD_SECRET_REDACTOR_PATTERNS"
+      ],
+      "file_writes": [],
+      "spawns": [],
+      "egress_hosts": []
+    }
+  }
+]

package/catalog/skill-manifest.json

@@ -42,6 +42,132 @@
         }
       ]
     },
+    {
+      "id": "agentic-board-protocol",
+      "path": "skills/cross-functional/agentic-board-protocol",
+      "aggregate_sha256": "f0973983f39efbe3e2a3ec932c78c001e8abf6d0ea896c1b12ba9129f85b1de0",
+      "files": [
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/SKILL.md",
+          "sha256": "de434f9d30a028354e55e24935b8811aeda8df820283b8f0e4a6e3a335a98be0",
+          "bytes": 7648
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/metadata.json",
+          "sha256": "34bfdbce92a2c5a594d3ff9cd28a8309f34e74b9435507d1ac21aa37dfdc9a3c",
+          "bytes": 1472
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/references/decision-record.md",
+          "sha256": "cefebd0dc773d86697c20cf055fe07f3ff98fc2d10c3357c9772e9868b9bed52",
+          "bytes": 23891
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/references/handoff-envelope.md",
+          "sha256": "e84c4e02e799c823a0bab0eeabdb9ca18911dc6f6edbc15b64b2e10d91d7b2bb",
+          "bytes": 20279
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/references/risk-tier-crosswalk.md",
+          "sha256": "3b89f44c4c28f160fa2ccb79b05d91f6d8e6555f6fc29a49ab69b1752248f966",
+          "bytes": 11049
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/references/stop-conditions.md",
+          "sha256": "62f3759fe27e22adaa766452c9054b06ea589581ddd5c1c66d89322c02463b3c",
+          "bytes": 14881
+        },
+        {
+          "path": "skills/cross-functional/agentic-board-protocol/references/value-case.md",
+          "sha256": "9272182be78630d9e19f05d6f3e0da5fadda42f933c4930a9fb430d4927116ab",
+          "bytes": 14435
+        }
+      ]
+    },
+    {
+      "id": "agentic-security-review",
+      "path": "skills/cross-functional/agentic-security-review",
+      "aggregate_sha256": "a7181d9a82ea7dab64c35bd4a7ce6667fc7097469aa274b8154044360d0f78d1",
+      "files": [
+        {
+          "path": "skills/cross-functional/agentic-security-review/SKILL.md",
+          "sha256": "0c9ab13965861c557d7daa3ae452202afa7df90d2d058b7b4253705562dbbf62",
+          "bytes": 10595
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/metadata.json",
+          "sha256": "c3d6f3b40b18410e6392b02afd5245b9b33966734558d86f02e9d0c2c636cc2c",
+          "bytes": 1759
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/references/identity-and-delegated-authorization.md",
+          "sha256": "a85ca29c8a9551ea7d11fc5e7b5608e9bcb53096e783572427af47f44d1a7a31",
+          "bytes": 15366
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/references/supply-chain-and-provenance.md",
+          "sha256": "c404e97f5cfb91e3570a772b3e26d01d057bf4dc4dc077701a1d9ae855b5842e",
+          "bytes": 9919
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/references/threat-model-owasp-asi.md",
+          "sha256": "4146403e74e4133651f39f86c887d022514e687c21d7a70517819aa2b8e3040d",
+          "bytes": 13387
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/references/tools-memory-and-data-reach.md",
+          "sha256": "f3e75710f94f6d16ebf952f5a197c888f88dba7fb9c47b8c4b7d4476863feadc",
+          "bytes": 11285
+        },
+        {
+          "path": "skills/cross-functional/agentic-security-review/references/workflow-and-output.md",
+          "sha256": "e2ed441d4d96ebda55c0af9a7f264a48694dc348d3aba5bccfd7774333557320",
+          "bytes": 20034
+        }
+      ]
+    },
+    {
+      "id": "agentic-system-architecture-review",
+      "path": "skills/cross-functional/agentic-system-architecture-review",
+      "aggregate_sha256": "6d812c2808b140ba56558371ee49bbe29a5fe1675394c9874aff619036716d4f",
+      "files": [
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/SKILL.md",
+          "sha256": "13ccad2b765a7a90650dc46b39e00b5172d3fce96327e9b4a558c629aff43954",
+          "bytes": 8534
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/metadata.json",
+          "sha256": "e2228d3353173a40b218bcf3d1cdab63cc50350a337540413eaa2b8cbb39b878",
+          "bytes": 1616
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/references/delegation-and-handoff-review.md",
+          "sha256": "cf728ce264eac811cc2e519d0e1351aea18d7afcead4a1c1bd100b1f87fbd9dd",
+          "bytes": 11023
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/references/pattern-selection.md",
+          "sha256": "226e4cfc3c448f5507739537e70864e2e8dd1a3534c50422c2f7b5877163142d",
+          "bytes": 13691
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/references/reliability-and-containment.md",
+          "sha256": "45bf5f00ad41781a5021276b77b61c94e17499d910dfd1affa8bf0c428f94be6",
+          "bytes": 9136
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/references/state-memory-and-durability.md",
+          "sha256": "dbe17da49ebfabe2e7f06cb29f61e2e2d16432bd91a35e9ca7f50d3fa0746615",
+          "bytes": 10610
+        },
+        {
+          "path": "skills/cross-functional/agentic-system-architecture-review/references/workflow-and-output.md",
+          "sha256": "90aa3c69528e759bae4e0e15965bc02efb7558671dd170d1f85db0ec64e02aff",
+          "bytes": 12363
+        }
+      ]
+    },
     {
       "id": "ai-advertising-targeting-fairness-review",
       "path": "skills/marketing/ai-advertising-targeting-fairness-review",
@@ -24750,12 +24876,12 @@
     {
       "id": "typescript-maestro",
       "path": "skills/typescript/typescript-maestro",
-      "aggregate_sha256": "a1eecd7256182bfaeda97e5c6d9e7298a9cc16c03d1db4cab90745d757fe6d8b",
+      "aggregate_sha256": "48f9577c42cc9ec5b2faaaddf73269b3f7e047235733a158584b202bdf2717f4",
       "files": [
         {
           "path": "skills/typescript/typescript-maestro/SKILL.md",
-          "sha256": "13119a1376a8efac07dbce2b58a5373e032894faab6550d0e96f9dfccbbb4aef",
-          "bytes": 6457
+          "sha256": "51e7b2c5097b02d17e78721549a9e50ec5e2b0229be0fcfe51a975c76f3016df",
+          "bytes": 6566
         },
         {
           "path": "skills/typescript/typescript-maestro/metadata.json",
@@ -24764,20 +24890,20 @@
         },
         {
           "path": "skills/typescript/typescript-maestro/references/routing-taxonomy.md",
-          "sha256": "e8dab22f63feae550a80e09b36d3dfe2073d5622dea8bc4c44427c54464abf9b",
-          "bytes": 5275
+          "sha256": "4a45816ca29cc8e6a44fa718820dd3b6d82228d9e9d763360612dadd7ef6fcb9",
+          "bytes": 5389
         }
       ]
     },
     {
       "id": "typescript-mcp-tool-contract",
       "path": "skills/typescript/typescript-mcp-tool-contract",
-      "aggregate_sha256": "8df5e8e39bfb517aa37c875b12ae05e3da6d1cc9de9a784fabba82c62cb0bb90",
+      "aggregate_sha256": "0866c1e4bf4a931002900b11f0a3055d4847093498cb270d9557072c7dbc0fd2",
       "files": [
         {
           "path": "skills/typescript/typescript-mcp-tool-contract/SKILL.md",
-          "sha256": "ccd128fc70310b10355d683fadc587d31f6ed0817ae071f0f36d3accfdeda821",
-          "bytes": 6807
+          "sha256": "bec2f297845eb5a9e8e80209a31ee6e5a586bf3f0907ac4824ae106d1b6521af",
+          "bytes": 6820
         },
         {
           "path": "skills/typescript/typescript-mcp-tool-contract/metadata.json",

package/catalog/skills.json

@@ -60,6 +60,95 @@
     "execution_tier": "local",
     "lifecycle": "stable"
   },
+  {
+    "id": "agentic-board-protocol",
+    "name": "Agentic Board Protocol",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Shared Layer-3 contract for the agentic board: the versioned handoff envelope (schemas/agentic-handoff.schema.json), computed stop conditions, the adversarial decision process and designated challengers, the R0-R5 risk-tier crosswalk, and the value-case contract — each rule checked deterministically by validate:agentic-board.",
+    "source_type": "original",
+    "official_docs": [
+      "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/",
+      "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
+      "https://www.finops.org/framework/capabilities/unit-economics/",
+      "https://www.finops.org/wg/finops-for-ai-overview/",
+      "https://json-schema.org/draft/2020-12"
+    ],
+    "security_notes": "A data and process contract, not an access-control mechanism: it authorizes nothing, and a valid envelope is not proof that an approval happened. Principals are opaque pseudonymous subjects; envelopes never carry credentials or secrets. Runtime authentication, authorization and append-only storage are the deploying organization's responsibility.",
+    "last_verified": "2026-10-30",
+    "path": "skills/cross-functional/agentic-board-protocol",
+    "version": "0.1.0",
+    "author": "github: VincentChuWaiChow"
+  },
+  {
+    "id": "agentic-security-review",
+    "name": "Agentic Security Review",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Review the composed attack surface of an agentic system against OWASP Top 10 for Agentic Applications (ASI01-ASI10): data reach, tools as privileges, delegated authorization and agent identity, memory and context poisoning, and tool/skill/MCP-server provenance, with a plan-only adversarial test design and HARD-gate challenges that only a principal's decision record with a risk acceptance reference can override.",
+    "source_type": "original",
+    "official_docs": [
+      "https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/",
+      "https://genai.owasp.org/2025/12/09/owasp-top-10-for-agentic-applications-the-benchmark-for-agentic-security-in-the-age-of-autonomous-ai/",
+      "https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization",
+      "https://modelcontextprotocol.io/specification/versioning",
+      "https://a2a-protocol.org/latest/specification/",
+      "https://www.rfc-editor.org/rfc/rfc8707.html",
+      "https://airc.nist.gov/airmf-resources/airmf/5-sec-core/"
+    ],
+    "security_notes": "Static review only; adversarial tests are designed, never run; no credentials, tokens, signing keys, or customer data are requested or echoed. ASI mappings are candidate review aids, not certification. HARD-gate challenges are overridable only by a principal-sourced decision record carrying a risk acceptance reference.",
+    "last_verified": "2026-10-30",
+    "path": "skills/cross-functional/agentic-security-review",
+    "version": "0.1.0",
+    "author": "github: VincentChuWaiChow"
+  },
+  {
+    "id": "agentic-system-architecture-review",
+    "name": "Agentic System Architecture Review",
+    "type": "skill",
+    "provider": "generic",
+    "harnesses": [
+      "codex",
+      "claude-code",
+      "cursor",
+      "gemini",
+      "kiro",
+      "other"
+    ],
+    "summary": "Review an agentic system's pattern choice (deterministic workflow, single agent, multi-agent), delegation and handoff design, state and memory, durable execution, and cascading-failure containment, vendor-neutrally, with progressive-disclosure references and a verdict that must survive a designated challenge.",
+    "source_type": "original",
+    "official_docs": [
+      "https://docs.langchain.com/oss/python/langgraph/persistence",
+      "https://openai.github.io/openai-agents-python/multi_agent/",
+      "https://learn.microsoft.com/agent-framework/workflows/orchestrations/",
+      "https://adk.dev/workflows/",
+      "https://docs.temporal.io/evaluate/understanding-temporal",
+      "https://a2a-protocol.org/latest/specification/",
+      "https://github.com/open-telemetry/semantic-conventions-genai",
+      "https://www.finops.org/wg/finops-for-ai-overview/"
+    ],
+    "security_notes": "Static review only; never executes or deploys, never handles credentials or customer data. Framework behaviour is version-sensitive: verify against Context7 or official docs for the installed version before asserting it. Verdicts are proposals for the agentic-board-protocol decision process, never approvals.",
+    "last_verified": "2026-10-30",
+    "path": "skills/cross-functional/agentic-system-architecture-review",
+    "version": "0.1.0",
+    "author": "github: VincentChuWaiChow"
+  },
   {
     "id": "ai-advertising-targeting-fairness-review",
     "name": "AI Advertising Targeting Fairness Review",