@raishin/vanguard-frontier-agentic 3.2.0 → 3.3.0

package/catalog/install-roles.json

@@ -1115,7 +1115,8 @@
         "rpa-workflow-resilience-review-agent",
         "helm-chart-quality-review-agent",
         "kubernetes-manifest-quality-review-agent",
-        "llm-ai-pipeline-test-review-agent"
+        "llm-ai-pipeline-test-review-agent",
+        "revenue-critical-journey-integrity-agent"
       ],
       "skills": [
         "playwright-e2e-suite-review",
@@ -1127,7 +1128,8 @@
         "rpa-workflow-resilience-review",
         "helm-chart-quality-review",
         "kubernetes-manifest-quality-review",
-        "llm-ai-pipeline-test-review"
+        "llm-ai-pipeline-test-review",
+        "revenue-critical-journey-integrity-review"
       ]
     },
     "salesforce-portfolio-architect": {
@@ -1502,7 +1504,8 @@
         "visual-regression-agent",
         "vue-specialist-agent",
         "web-performance-core-vitals-agent",
-        "web-platform-foundation-agent"
+        "web-platform-foundation-agent",
+        "revenue-critical-journey-integrity-agent"
       ],
       "skills": [
         "ai-generated-frontend-code-review",
@@ -1563,7 +1566,26 @@
         "vue-router-navigation-security-review",
         "vue-ssr-security-review",
         "vue-state-store-security-review",
-        "wcag-22-accessibility-audit"
+        "wcag-22-accessibility-audit",
+        "revenue-critical-journey-integrity-review"
+      ]
+    },
+    "php-platform-engineer": {
+      "label": "PHP Platform Engineer",
+      "description": "Static-review board for PHP platform engineering — PHP application security (unserialize/session/upload), Composer dependency supply-chain governance, runtime version/EOL readiness with OPcache/PHP-FPM hardening, and WordPress plugin/theme/REST/block security — routed by the PHP maestro to the narrowest specialist. Advisory only: never executes payloads, installs packages, or mutates runtime or production.",
+      "agents": [
+        "php-maestro-agent",
+        "php-application-security-agent",
+        "composer-supply-chain-agent",
+        "php-runtime-upgrade-readiness-agent",
+        "wordpress-security-agent"
+      ],
+      "skills": [
+        "php-maestro",
+        "php-session-upload-deserialization-review",
+        "composer-audit-supply-chain-review",
+        "php-runtime-eol-opcache-fpm-review",
+        "wordpress-rest-block-security-review"
       ]
     }
   }

package/catalog/model-assignments.json

@@ -5111,6 +5111,39 @@
       "model_source": "default",
       "reasoning_source": "default"
     },
+    {
+      "agent_id": "composer-supply-chain-agent",
+      "harness": "codex",
+      "model": "gpt-5.4",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "all",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "composer-supply-chain-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "composer-supply-chain-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
     {
       "agent_id": "contabo-capacity-planner-agent",
       "harness": "codex",
@@ -16089,6 +16122,105 @@
       "model_source": "provider:frontend",
       "reasoning_source": "default"
     },
+    {
+      "agent_id": "php-application-security-agent",
+      "harness": "codex",
+      "model": "gpt-5.4",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "all",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "php-application-security-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "php-application-security-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "php-maestro-agent",
+      "harness": "codex",
+      "model": "gpt-5.4",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "all",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "php-maestro-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "php-maestro-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "php-runtime-upgrade-readiness-agent",
+      "harness": "codex",
+      "model": "gpt-5.4",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "all",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "php-runtime-upgrade-readiness-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "php-runtime-upgrade-readiness-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
     {
       "agent_id": "playwright-e2e-execution-run-agent",
       "harness": "claude-code",
@@ -16474,6 +16606,39 @@
       "model_source": "provider:frontend",
       "reasoning_source": "default"
     },
+    {
+      "agent_id": "revenue-critical-journey-integrity-agent",
+      "harness": "codex",
+      "model": "gpt-5.5",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "provider:generic",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "revenue-critical-journey-integrity-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "revenue-critical-journey-integrity-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
     {
       "agent_id": "routing-navigation-agent",
       "harness": "codex",
@@ -19608,6 +19773,39 @@
       "reasoning_effort": null,
       "model_source": "provider:frontend",
       "reasoning_source": "default"
+    },
+    {
+      "agent_id": "wordpress-security-agent",
+      "harness": "codex",
+      "model": "gpt-5.4",
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": "high",
+      "model_source": "all",
+      "reasoning_source": "all"
+    },
+    {
+      "agent_id": "wordpress-security-agent",
+      "harness": "claude-code",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
+    },
+    {
+      "agent_id": "wordpress-security-agent",
+      "harness": "cursor",
+      "model": null,
+      "model_provider": null,
+      "model_fallback_from": null,
+      "model_warning": null,
+      "reasoning_effort": null,
+      "model_source": "default",
+      "reasoning_source": "default"
     }
   ]
 }

package/catalog/skill-manifest.json

@@ -5202,6 +5202,38 @@
         }
       ]
     },
+    {
+      "id": "composer-audit-supply-chain-review",
+      "path": "skills/php/composer-audit-supply-chain-review",
+      "aggregate_sha256": "c3377c8d185099569bf553fd2322dbbdef16c66adde647e63ba326f6a1308a23",
+      "files": [
+        {
+          "path": "skills/php/composer-audit-supply-chain-review/SKILL.md",
+          "sha256": "62f84bf9a976b1930ed7982191b260b7e9bb1d6b0dcf977fb006ac42dda2c1fe",
+          "bytes": 9850
+        },
+        {
+          "path": "skills/php/composer-audit-supply-chain-review/metadata.json",
+          "sha256": "2ccbf8ee09124cfff6c7baa6ca53fee811a5b548cd1f05547893856d0d4cdd76",
+          "bytes": 1257
+        },
+        {
+          "path": "skills/php/composer-audit-supply-chain-review/references/abandoned-and-advisory-governance.md",
+          "sha256": "496dee36096d54bb84e89e043d1ac37314db99bedb729feaef015f55a268aeb2",
+          "bytes": 4580
+        },
+        {
+          "path": "skills/php/composer-audit-supply-chain-review/references/composer-audit-policy.md",
+          "sha256": "d4c972b8d119c741a4b0bdd39e11789f844cc3a14ac7c9a67d1e7078b74c6e45",
+          "bytes": 4087
+        },
+        {
+          "path": "skills/php/composer-audit-supply-chain-review/references/lockfile-integrity.md",
+          "sha256": "b54f9ae05130466abebe8f60f1ae10985c95e964ee1ec2bf92401bd1e304f045",
+          "bytes": 3899
+        }
+      ]
+    },
     {
       "id": "consolidation-intercompany-advisor",
       "path": "skills/accounting/consolidation-intercompany-advisor",
@@ -15429,6 +15461,97 @@
         }
       ]
     },
+    {
+      "id": "php-maestro",
+      "path": "skills/php/php-maestro",
+      "aggregate_sha256": "17e9b03cb320fc090abe5e52581bf77d5a20a4ceb7cd478a6206a9e02634fa2e",
+      "files": [
+        {
+          "path": "skills/php/php-maestro/SKILL.md",
+          "sha256": "535c601d6081c2a9209e777d415d8760039a7207a0d58171974bdac878374a80",
+          "bytes": 4876
+        },
+        {
+          "path": "skills/php/php-maestro/metadata.json",
+          "sha256": "c89893c0bc106406765a54a4b671cb9124260a28ad4173d5a6e21be2d9725149",
+          "bytes": 1175
+        },
+        {
+          "path": "skills/php/php-maestro/references/hard-gates-and-escalation.md",
+          "sha256": "ba6f3c5cde7a17a81a880b4cce8e9451a4042a17f2ef58128e3e8ac49b8cdfdd",
+          "bytes": 8276
+        },
+        {
+          "path": "skills/php/php-maestro/references/routing-and-dispatch.md",
+          "sha256": "c0acf57da526b9c778ba81edcbc0638e8ac8d39382d363ba3cbe2477448e00b8",
+          "bytes": 6424
+        }
+      ]
+    },
+    {
+      "id": "php-runtime-eol-opcache-fpm-review",
+      "path": "skills/php/php-runtime-eol-opcache-fpm-review",
+      "aggregate_sha256": "2cd92ae849faa02a57746e060eed0d7ad4004c6f18df5dfbac4cd4ece610532d",
+      "files": [
+        {
+          "path": "skills/php/php-runtime-eol-opcache-fpm-review/SKILL.md",
+          "sha256": "c1e2af8494d0deaf98826c5fc8804c3778e03ca88d197b8035330dfdc9b7498f",
+          "bytes": 10212
+        },
+        {
+          "path": "skills/php/php-runtime-eol-opcache-fpm-review/metadata.json",
+          "sha256": "e7fcb85afe025d84a66215136946b502560def68587ae7c2200c21c98a6eddd0",
+          "bytes": 1323
+        },
+        {
+          "path": "skills/php/php-runtime-eol-opcache-fpm-review/references/opcache-production-config.md",
+          "sha256": "b754752212b66f86626081648258626c9d7c4963de19edd19cbb148a5afa638c",
+          "bytes": 5289
+        },
+        {
+          "path": "skills/php/php-runtime-eol-opcache-fpm-review/references/php-fpm-pool-tuning.md",
+          "sha256": "15a3deda73ab94043b9f622b36474786a44dd0bad51474fe13808584f858efed",
+          "bytes": 5221
+        },
+        {
+          "path": "skills/php/php-runtime-eol-opcache-fpm-review/references/php-version-lifecycle.md",
+          "sha256": "bc1321ec5373830826045a1c50e4ef93df3b39411a6211ead1c84c0a716a17a6",
+          "bytes": 5290
+        }
+      ]
+    },
+    {
+      "id": "php-session-upload-deserialization-review",
+      "path": "skills/php/php-session-upload-deserialization-review",
+      "aggregate_sha256": "41bf2ca365eb9ca89e45b4ab6b1448cb1a802ca39d9e546a1ab0c34e81034681",
+      "files": [
+        {
+          "path": "skills/php/php-session-upload-deserialization-review/SKILL.md",
+          "sha256": "99ce28f016c9b6f08cd197050652cb9a1b1f39de0561da9c2a3a5dcaeebbfc3c",
+          "bytes": 11062
+        },
+        {
+          "path": "skills/php/php-session-upload-deserialization-review/metadata.json",
+          "sha256": "e9fc492c9ff291fcd00ffe3d50aa4a568392ade1a701886d33e18b21ec9196df",
+          "bytes": 1399
+        },
+        {
+          "path": "skills/php/php-session-upload-deserialization-review/references/file-upload-security.md",
+          "sha256": "4c9ccc9d573a57659047e18e5e62ed6ca4a1571dae4e1eeb0bcf0f703d26865e",
+          "bytes": 6685
+        },
+        {
+          "path": "skills/php/php-session-upload-deserialization-review/references/session-security.md",
+          "sha256": "f4b87684505736a5e2669f5c4b4b98d1b1508100e76338ebf07b14d93f65eb79",
+          "bytes": 7438
+        },
+        {
+          "path": "skills/php/php-session-upload-deserialization-review/references/unserialize-object-injection.md",
+          "sha256": "f948371da8cd628a514e9442feba66b4ac465b7c3273db086d69adc3180d6917",
+          "bytes": 7828
+        }
+      ]
+    },
     {
       "id": "playwright-e2e-execution-run",
       "path": "skills/qa/playwright-e2e-execution-run",
@@ -15881,6 +16004,53 @@
         }
       ]
     },
+    {
+      "id": "revenue-critical-journey-integrity-review",
+      "path": "skills/cross-functional/revenue-critical-journey-integrity-review",
+      "aggregate_sha256": "b0489cf2102b6d5bcb5b42d9bf9d244d79b9fa4fe1df56b728a634b7a728f709",
+      "files": [
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/SKILL.md",
+          "sha256": "f613ce3dba633095f5b9e5606c56f77544f7576fb0f623efae6ca362ba86069f",
+          "bytes": 8610
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/metadata.json",
+          "sha256": "822c9e6b6a694fa84be9a0cb2c0df2ea8d955fad270465febee47db858fbedcb",
+          "bytes": 1938
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/idempotency-and-safe-retries.md",
+          "sha256": "1cc074f778e8c4e5aba9ec17b7e3b5778e2cfcd27594b073b18ea5bcc998d0a8",
+          "bytes": 8792
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/official-sources.md",
+          "sha256": "ab78b9b45954bc4fd5f9a776745b761ecca3bfb7bf0604123690c21da9780491",
+          "bytes": 9440
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/pci-saq-scope-boundaries.md",
+          "sha256": "be944693687316cbbc02e603e89a686e84dc8248a928aea37d932c47dd617486",
+          "bytes": 7386
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/server-side-revalidation-trust-boundary.md",
+          "sha256": "be5aa9b4be7724f0a0ab9a9344a5b3eb7e7cc125af1d89a8142e707bd3a84257",
+          "bytes": 7285
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/webhook-delivery-dedup-ordering.md",
+          "sha256": "bdfc18424c90c3534efb3dff4b65a93223249e8f3a2913604d7ba813c21141fb",
+          "bytes": 8085
+        },
+        {
+          "path": "skills/cross-functional/revenue-critical-journey-integrity-review/references/workflow-and-output.md",
+          "sha256": "c78c79b98c5536a757e61f7dcdc051e24dbcfebfe631363ac66f71827b1c4c7e",
+          "bytes": 5892
+        }
+      ]
+    },
     {
       "id": "revenue-recognition-advisor",
       "path": "skills/accounting/revenue-recognition-advisor",
@@ -19580,6 +19750,38 @@
         }
       ]
     },
+    {
+      "id": "wordpress-rest-block-security-review",
+      "path": "skills/php/wordpress-rest-block-security-review",
+      "aggregate_sha256": "cf9bd2d1a606930912139e6be2e54f732c05fe933459b38d8c42ee55c3b873bd",
+      "files": [
+        {
+          "path": "skills/php/wordpress-rest-block-security-review/SKILL.md",
+          "sha256": "6e954dea89dae85879253af108a024285249448dbef430b9c02113c5d884c51f",
+          "bytes": 9742
+        },
+        {
+          "path": "skills/php/wordpress-rest-block-security-review/metadata.json",
+          "sha256": "a6957fbc423c31a327882fdead0f9f9515be4089d142e223d915c05c47505a03",
+          "bytes": 1482
+        },
+        {
+          "path": "skills/php/wordpress-rest-block-security-review/references/dynamic-block-output-escaping.md",
+          "sha256": "33ccadd8ea180193d0b4bcdf955e4e21758d93555e9813c4da6c20f141d5c277",
+          "bytes": 4855
+        },
+        {
+          "path": "skills/php/wordpress-rest-block-security-review/references/input-sanitize-output-escape.md",
+          "sha256": "28f793cab2597635984f2df2bb381da452ad7f548b567a84b8ed8de2762efb60",
+          "bytes": 9985
+        },
+        {
+          "path": "skills/php/wordpress-rest-block-security-review/references/rest-api-permission-callback.md",
+          "sha256": "b96e69dfeec5691ce96af5e6d6a57c44128c96c57cab2a64ad16e0ea9801a1a0",
+          "bytes": 6800
+        }
+      ]
+    },
     {
       "id": "working-capital-advisor",
       "path": "skills/finance/working-capital-advisor",