@raishin/vanguard-frontier-agentic 3.4.0 → 3.6.0

package/catalog/install-roles.json

@@ -1625,6 +1625,472 @@
         "php-runtime-eol-opcache-fpm-review",
         "wordpress-rest-block-security-review"
       ]
+    },
+    "kotlin-backend-engineer": {
+      "label": "Kotlin Backend Engineer",
+      "description": "Static review for server-side Kotlin services on Ktor or Spring: language and null-safety correctness, coroutine and Flow reliability (structured concurrency, dispatchers, context propagation), backend production readiness, kotlinx.serialization wire contracts, coroutine-aware test architecture, and Gradle build health. Static review only — never builds, deploys, or contacts a live system.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-language-api-correctness-agent",
+        "kotlin-coroutines-flow-reliability-agent",
+        "kotlin-backend-production-readiness-agent",
+        "kotlin-serialization-wire-contract-agent",
+        "kotlin-test-architecture-agent",
+        "kotlin-gradle-build-engineering-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-language-api-correctness",
+        "kotlin-coroutines-flow-reliability",
+        "kotlin-backend-production-readiness",
+        "kotlin-serialization-wire-contract",
+        "kotlin-test-architecture",
+        "kotlin-gradle-build-engineering"
+      ]
+    },
+    "android-kotlin-engineer": {
+      "label": "Android Kotlin Engineer",
+      "description": "Static review for Android apps in Kotlin: lifecycle-aware architecture and state, Jetpack Compose UI correctness and accessibility, MASVS-aligned security and privacy, measured runtime performance and reliability (startup, jank, ANR, Baseline Profiles), coroutine/Flow reliability, and test architecture. Static review only — never builds, installs, instruments, or ships an app.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-android-architecture-agent",
+        "kotlin-compose-ui-quality-accessibility-agent",
+        "kotlin-android-security-privacy-agent",
+        "kotlin-android-performance-reliability-agent",
+        "kotlin-coroutines-flow-reliability-agent",
+        "kotlin-test-architecture-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-android-architecture",
+        "kotlin-compose-ui-quality-accessibility",
+        "kotlin-android-security-privacy",
+        "kotlin-android-performance-reliability",
+        "kotlin-coroutines-flow-reliability",
+        "kotlin-test-architecture"
+      ]
+    },
+    "kotlin-multiplatform-engineer": {
+      "label": "Kotlin Multiplatform Engineer",
+      "description": "Static review for Kotlin Multiplatform work: the adopt/don't-adopt portfolio decision, source-set and expect/actual boundary and Swift/Objective-C interop (including Kotlin/Native runtime), language correctness, coroutine/Flow reliability, kotlinx.serialization wire contracts, and Gradle build health. Static review only — decides and reviews, never builds or publishes.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-kmp-portfolio-decision-agent",
+        "kotlin-kmp-boundary-interop-agent",
+        "kotlin-language-api-correctness-agent",
+        "kotlin-coroutines-flow-reliability-agent",
+        "kotlin-serialization-wire-contract-agent",
+        "kotlin-gradle-build-engineering-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-kmp-portfolio-decision",
+        "kotlin-kmp-boundary-interop",
+        "kotlin-language-api-correctness",
+        "kotlin-coroutines-flow-reliability",
+        "kotlin-serialization-wire-contract",
+        "kotlin-gradle-build-engineering"
+      ]
+    },
+    "kotlin-platform-build-engineer": {
+      "label": "Kotlin Platform & Build Engineer",
+      "description": "Static review for the Kotlin engineering system: Gradle build-graph quality, configuration and build cache, incremental compilation and convention plugins, CI throughput, dependency verification/locking and release supply-chain integrity, library API/ABI governance, and test architecture. Static review only — never runs a build, signs, or publishes an artifact.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-gradle-build-engineering-agent",
+        "kotlin-supply-chain-release-integrity-agent",
+        "kotlin-library-api-abi-governance-agent",
+        "kotlin-test-architecture-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-gradle-build-engineering",
+        "kotlin-supply-chain-release-integrity",
+        "kotlin-library-api-abi-governance",
+        "kotlin-test-architecture"
+      ]
+    },
+    "kotlin-library-maintainer": {
+      "label": "Kotlin Library Maintainer",
+      "description": "Static review for Kotlin library authors: public API/ABI evolution and binary/source compatibility, language and null-safety correctness, coroutine/Flow reliability for library APIs, kotlinx.serialization wire-contract stability, test architecture, and dependency/publication supply-chain integrity. Static review only — never publishes or signs a release.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-library-api-abi-governance-agent",
+        "kotlin-language-api-correctness-agent",
+        "kotlin-coroutines-flow-reliability-agent",
+        "kotlin-serialization-wire-contract-agent",
+        "kotlin-test-architecture-agent",
+        "kotlin-supply-chain-release-integrity-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-library-api-abi-governance",
+        "kotlin-language-api-correctness",
+        "kotlin-coroutines-flow-reliability",
+        "kotlin-serialization-wire-contract",
+        "kotlin-test-architecture",
+        "kotlin-supply-chain-release-integrity"
+      ]
+    },
+    "kotlin-security-engineer": {
+      "label": "Kotlin Security Engineer",
+      "description": "Static review for Kotlin/Android security posture: MASVS-aligned Android security and privacy, kotlinx.serialization polymorphic-deserialization and wire-contract safety, dependency verification/plugin-trust supply-chain integrity, and coroutine security-context propagation. Static review only — defers generic backend vulnerabilities to the application-security board and never contacts a live system.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-android-security-privacy-agent",
+        "kotlin-serialization-wire-contract-agent",
+        "kotlin-supply-chain-release-integrity-agent",
+        "kotlin-coroutines-flow-reliability-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-android-security-privacy",
+        "kotlin-serialization-wire-contract",
+        "kotlin-supply-chain-release-integrity",
+        "kotlin-coroutines-flow-reliability"
+      ]
+    },
+    "kotlin-engineering-leader": {
+      "label": "Kotlin Engineering Leader",
+      "description": "Static review for Kotlin technology-portfolio and modernization decisions: Java-to-Kotlin estate modernization sequencing and reversibility, the Kotlin Multiplatform adopt-or-not portfolio decision, public library API/ABI governance, and dependency/release supply-chain integrity. Decision and review only — never migrates, publishes, signs, or contacts a live system, and expresses business impact only with evidence, never invented ROI.",
+      "agents": [
+        "kotlin-maestro-agent",
+        "kotlin-estate-modernization-governor-agent",
+        "kotlin-kmp-portfolio-decision-agent",
+        "kotlin-library-api-abi-governance-agent",
+        "kotlin-supply-chain-release-integrity-agent"
+      ],
+      "skills": [
+        "kotlin-maestro",
+        "kotlin-estate-modernization-governor",
+        "kotlin-kmp-portfolio-decision",
+        "kotlin-library-api-abi-governance",
+        "kotlin-supply-chain-release-integrity"
+      ]
+    },
+    "python-application-review-engineer": {
+      "label": "Python Application Review Engineer",
+      "description": "Static review of Python applications routed through the Python maestro across the full 20-agent board — application-security, async/concurrency, packaging supply chain, numerical correctness, type contracts, web-service readiness, data access, distributed tasks, testing, runtime-estate modernization, performance/memory, free-threading, native extensions, container/serverless runtime, data pipelines, ML production, observability, developer tooling, and business-critical automation governance. Static review only.",
+      "agents": [
+        "python-application-security-agent",
+        "python-async-concurrency-reliability-agent",
+        "python-business-critical-automation-governance-agent",
+        "python-container-serverless-runtime-agent",
+        "python-data-access-transaction-agent",
+        "python-data-pipeline-reliability-agent",
+        "python-developer-tooling-build-agent",
+        "python-distributed-task-reliability-agent",
+        "python-estate-modernization-governor-agent",
+        "python-free-threading-parallelism-agent",
+        "python-language-contracts-typing-agent",
+        "python-maestro-agent",
+        "python-ml-ai-production-agent",
+        "python-native-extension-interop-agent",
+        "python-numerical-scientific-correctness-agent",
+        "python-observability-sre-agent",
+        "python-packaging-supply-chain-agent",
+        "python-performance-memory-agent",
+        "python-testing-quality-engineering-agent",
+        "python-web-service-production-readiness-agent"
+      ],
+      "skills": [
+        "python-application-security",
+        "python-async-concurrency-reliability",
+        "python-business-critical-automation-governance",
+        "python-container-serverless-runtime",
+        "python-data-access-transaction",
+        "python-data-pipeline-reliability",
+        "python-developer-tooling-build",
+        "python-distributed-task-reliability",
+        "python-estate-modernization-governor",
+        "python-free-threading-parallelism",
+        "python-language-contracts-typing",
+        "python-maestro",
+        "python-ml-ai-production",
+        "python-native-extension-interop",
+        "python-numerical-scientific-correctness",
+        "python-observability-sre",
+        "python-packaging-supply-chain",
+        "python-performance-memory",
+        "python-testing-quality-engineering",
+        "python-web-service-production-readiness"
+      ]
+    },
+    "python-security-engineer": {
+      "label": "Python Security Engineer",
+      "description": "Static review of the Python attack surface routed through the Python maestro: application-security sinks (unsafe deserialization, subprocess/shell injection, SSRF, secrets, cryptography misuse) and software-supply-chain integrity (dependency locking, hash-checking, index trust, dependency confusion). Static review only — never installs, runs, or exploits code.",
+      "agents": [
+        "python-maestro-agent",
+        "python-application-security-agent",
+        "python-packaging-supply-chain-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-application-security",
+        "python-packaging-supply-chain"
+      ]
+    },
+    "python-reliability-data-engineer": {
+      "label": "Python Reliability and Data Engineer",
+      "description": "Static review of Python runtime reliability and data correctness routed through the Python maestro: asyncio event-loop reliability, numerical/scientific correctness, database access and transactions (session/transaction scope, N+1, pooling, migrations), and distributed task reliability (idempotency, retries, dead-letters). Static review only — never runs the service, the calculation, or a live connection.",
+      "agents": [
+        "python-maestro-agent",
+        "python-async-concurrency-reliability-agent",
+        "python-numerical-scientific-correctness-agent",
+        "python-data-access-transaction-agent",
+        "python-distributed-task-reliability-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-async-concurrency-reliability",
+        "python-numerical-scientific-correctness",
+        "python-data-access-transaction",
+        "python-distributed-task-reliability"
+      ]
+    },
+    "python-application-engineer": {
+      "label": "Python Application Engineer",
+      "description": "Static review for Python application engineers routed through the Python maestro: type contracts and gradual typing, web-service production readiness (FastAPI/Django/Flask), database access and transactions, application-security defects, and test quality. Static review only — never runs, deploys, or contacts a live system.",
+      "agents": [
+        "python-maestro-agent",
+        "python-language-contracts-typing-agent",
+        "python-web-service-production-readiness-agent",
+        "python-data-access-transaction-agent",
+        "python-application-security-agent",
+        "python-testing-quality-engineering-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-language-contracts-typing",
+        "python-web-service-production-readiness",
+        "python-data-access-transaction",
+        "python-application-security",
+        "python-testing-quality-engineering"
+      ]
+    },
+    "python-platform-reliability-engineer": {
+      "label": "Python Platform Reliability Engineer",
+      "description": "Static review of Python runtime and platform reliability routed through the Python maestro: asyncio event-loop reliability, container/serverless runtime (PID 1, signals, shutdown), in-application observability, performance and memory, free-threaded adoption, and runtime-estate modernization. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-async-concurrency-reliability-agent",
+        "python-container-serverless-runtime-agent",
+        "python-observability-sre-agent",
+        "python-performance-memory-agent",
+        "python-free-threading-parallelism-agent",
+        "python-estate-modernization-governor-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-async-concurrency-reliability",
+        "python-container-serverless-runtime",
+        "python-observability-sre",
+        "python-performance-memory",
+        "python-free-threading-parallelism",
+        "python-estate-modernization-governor"
+      ]
+    },
+    "python-data-engineer": {
+      "label": "Python Data Engineer",
+      "description": "Static review for Python data engineers routed through the Python maestro: data-pipeline reliability (idempotency, backfills, schema evolution), numerical/scientific correctness, database access and transactions, and distributed task reliability. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-data-pipeline-reliability-agent",
+        "python-data-access-transaction-agent",
+        "python-numerical-scientific-correctness-agent",
+        "python-distributed-task-reliability-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-data-pipeline-reliability",
+        "python-data-access-transaction",
+        "python-numerical-scientific-correctness",
+        "python-distributed-task-reliability"
+      ]
+    },
+    "python-ml-engineer": {
+      "label": "Python ML Engineer",
+      "description": "Static review for Python ML engineers routed through the Python maestro: ML production correctness (training-serving skew, leakage, artifact safety, reproducibility), numerical correctness, data-pipeline reliability, and test quality. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-ml-ai-production-agent",
+        "python-numerical-scientific-correctness-agent",
+        "python-data-pipeline-reliability-agent",
+        "python-testing-quality-engineering-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-ml-ai-production",
+        "python-numerical-scientific-correctness",
+        "python-data-pipeline-reliability",
+        "python-testing-quality-engineering"
+      ]
+    },
+    "python-library-maintainer": {
+      "label": "Python Library Maintainer",
+      "description": "Static review for Python library maintainers routed through the Python maestro: type contracts and public API stability, packaging and supply-chain integrity, native-extension interop and ABI, developer tooling efficacy, and test quality. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-language-contracts-typing-agent",
+        "python-packaging-supply-chain-agent",
+        "python-native-extension-interop-agent",
+        "python-developer-tooling-build-agent",
+        "python-testing-quality-engineering-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-language-contracts-typing",
+        "python-packaging-supply-chain",
+        "python-native-extension-interop",
+        "python-developer-tooling-build",
+        "python-testing-quality-engineering"
+      ]
+    },
+    "python-automation-governance-lead": {
+      "label": "Python Automation Governance Lead",
+      "description": "Static review for governance of business-critical Python automation routed through the Python maestro: automation ownership and controls, distributed task reliability, data-pipeline reliability, and application security. Maps controls and exposure; makes no accounting/legal/regulatory conclusions. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-business-critical-automation-governance-agent",
+        "python-distributed-task-reliability-agent",
+        "python-data-pipeline-reliability-agent",
+        "python-application-security-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-business-critical-automation-governance",
+        "python-distributed-task-reliability",
+        "python-data-pipeline-reliability",
+        "python-application-security"
+      ]
+    },
+    "python-engineering-leader": {
+      "label": "Python Engineering Leader",
+      "description": "Portfolio-level static review for Python engineering leaders routed through the Python maestro: runtime-estate modernization and upgrade sequencing, business-critical automation governance, developer-tooling and gate efficacy, and performance posture. Static review only.",
+      "agents": [
+        "python-maestro-agent",
+        "python-estate-modernization-governor-agent",
+        "python-business-critical-automation-governance-agent",
+        "python-developer-tooling-build-agent",
+        "python-performance-memory-agent"
+      ],
+      "skills": [
+        "python-maestro",
+        "python-estate-modernization-governor",
+        "python-business-critical-automation-governance",
+        "python-developer-tooling-build",
+        "python-performance-memory"
+      ]
+    },
+    "python-live-platform-operator": {
+      "label": "Python Live Platform Operator",
+      "description": "Live control-plane operations for platform reliability, routed through the live governance maestro: runtime inventory, read-only diagnostics, continuous control testing, bounded release control, and pre-approved rollback. Mutating operators are live-guard gated — never auto-dispatched; every R3+ action requires independent approval, JIT credentials, and audit evidence.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-system-inventory-agent",
+        "python-live-runtime-control-agent",
+        "python-live-continuous-control-testing-agent",
+        "python-live-release-control-agent",
+        "python-live-rollback-and-recovery-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-system-inventory",
+        "python-live-runtime-control",
+        "python-live-continuous-control-testing",
+        "python-live-release-control",
+        "python-live-rollback-and-recovery"
+      ]
+    },
+    "python-live-security-operator": {
+      "label": "Python Live Security Operator",
+      "description": "Live control-plane security operations routed through the live governance maestro: identity and authority verification, bounded dependency remediation (branch/PR), policy-gate evaluation, control-evidence collection, and continuous control testing. Read-only by default; the one mutating operator (code remediation) is live-guard gated and cannot merge or deploy.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-identity-authority-agent",
+        "python-live-code-remediation-agent",
+        "python-live-policy-gate-agent",
+        "python-live-control-evidence-agent",
+        "python-live-continuous-control-testing-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-identity-authority",
+        "python-live-code-remediation",
+        "python-live-policy-gate",
+        "python-live-control-evidence",
+        "python-live-continuous-control-testing"
+      ]
+    },
+    "python-live-data-operator": {
+      "label": "Python Live Data Operator",
+      "description": "Live control-plane data operations routed through the live governance maestro: governed database change, pipeline backfill/reprocessing, distributed job control with technical and business idempotency, and change planning with reconciliation and rollback. Mutating operators are live-guard gated; no unbounded or ad-hoc production data mutation.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-data-change-control-agent",
+        "python-live-job-control-agent",
+        "python-live-change-plan-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-data-change-control",
+        "python-live-job-control",
+        "python-live-change-plan"
+      ]
+    },
+    "python-live-ml-governance-operator": {
+      "label": "Python Live ML Governance Operator",
+      "description": "Live control-plane ML governance routed through the live governance maestro: immutable model-artifact promotion with risk classification and evaluation evidence, control-evidence collection, policy-gate AI-risk checks, and rollback. Makes no EU AI Act conformity or compliance determination — those are owner determinations.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-model-promotion-control-agent",
+        "python-live-control-evidence-agent",
+        "python-live-policy-gate-agent",
+        "python-live-rollback-and-recovery-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-model-promotion-control",
+        "python-live-control-evidence",
+        "python-live-policy-gate",
+        "python-live-rollback-and-recovery"
+      ]
+    },
+    "python-live-automation-control-owner": {
+      "label": "Python Live Automation Control Owner",
+      "description": "Live control-plane governance of business-critical automation routed through the live governance maestro: job control, identity/approval authority, control-evidence, and exception governance. Separates permission from authority and execution from approval; records time-boxed exceptions with owners and expiry.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-job-control-agent",
+        "python-live-identity-authority-agent",
+        "python-live-control-evidence-agent",
+        "python-live-exception-governance-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-job-control",
+        "python-live-identity-authority",
+        "python-live-control-evidence",
+        "python-live-exception-governance"
+      ]
+    },
+    "python-live-audit-and-compliance-reviewer": {
+      "label": "Python Live Audit and Compliance Reviewer",
+      "description": "Read-only live control-plane audit and compliance review routed through the live governance maestro: control-evidence collection, policy-gate control mapping, continuous control testing, and exception review. Contains NO mutating agents — reviews and tests controls, never executes changes, and never declares compliance.",
+      "agents": [
+        "python-live-governance-maestro-agent",
+        "python-live-control-evidence-agent",
+        "python-live-policy-gate-agent",
+        "python-live-continuous-control-testing-agent",
+        "python-live-exception-governance-agent"
+      ],
+      "skills": [
+        "python-live-governance-maestro",
+        "python-live-control-evidence",
+        "python-live-policy-gate",
+        "python-live-continuous-control-testing",
+        "python-live-exception-governance"
+      ]
     }
   }
 }