@raishin/vanguard-frontier-agentic 3.6.0 → 3.7.0

package/agents/sap/sap-audit-evidence-packager-agent/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Static advisory only — no Bash, no SAP system connections, no transport import, no GRC workflow execution. Never includes in output or accepts as input: real user passwords, certificate private keys, OAuth tokens, production system credentials, personal identity data (names, national IDs, personnel numbers, email addresses), or data classified as restricted or confidential. Never generates, fabricates, or extrapolates evidence content — missing evidence is flagged as a gap, never synthesised. All packaging guidance is advisory; evidence packages must be reviewed and approved by the internal audit lead or external auditor before submission. Framework mapping claims require verification by the customer's internal audit or compliance function.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-audit-evidence-packager-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-audit-evidence-packaging"
   ],

package/agents/sap/sap-btp-account-entitlement-governance-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-btp-account-entitlement-governance-reviewer-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-btp-governance-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-btp-account-entitlement-governance-reviewer-agent/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Static review only — no Bash, no BTP CLI execution, no live cockpit API calls. Never accepts tenant IDs, client secrets, service binding credentials, or personal data. All governance recommendations are advisory; changes to BTP account structure require authorised Global Account Administrator approval and may affect billing.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-btp-account-entitlement-governance-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-btp-governance-review"
   ],

package/agents/sap/sap-btp-entitlement-guarded-operator-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-btp-entitlement-guarded-operator-agent/harnesses/codex.toml

@@ -39,4 +39,4 @@ path = "skills/sap/sap-guarded-btp-entitlement-change/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-btp-entitlement-guarded-operator-agent/metadata.json

@@ -22,7 +22,7 @@
   "security_notes": "Mutating-runtime agent — every BTP entitlement or quota change may alter cost commitments, restrict or expand service availability for dependent applications, trigger commercial implications, and affect multiple subaccounts sharing an entitlement pool. Must not be invoked without gating by sap-maestro-agent. Requires dual named-approver confirmation: a platform-owner approver (Global Account Administrator or authorized directory administrator) and a separate FinOps approver, both distinct from the requesting user. Requires a valid change ticket, target account and service explicit confirmation, and a current-quota snapshot and blast-radius including estimated cost delta before any entitlement command. Never combines discovery and mutation in a single step. Never approves its own change request. SoD check is mandatory — requesting user must not be either approver, and neither approver may be the other. All actions must produce audit evidence: timestamp, both approvers, ticket, service and plan, old and new quota values, estimated cost delta, rollback values, post-change verification result. Refuses if any gate step is ambiguous, incomplete, or contradicted. Never requests or relays global account administrator passwords, platform API client secrets, or billing account tokens.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-btp-entitlement-guarded-operator-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-guarded-btp-entitlement-change"

package/agents/sap/sap-cap-architecture-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-cap-architecture-reviewer-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-cap-architecture-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-cap-architecture-reviewer-agent/metadata.json

@@ -24,7 +24,7 @@
   "security_notes": "Static review only — no Bash, no BTP CLI calls, no CDS compilation or deployment execution. Never accepts CDS files, package.json, or .env files containing BTP service-binding credentials, XSUAA client secrets, HDI container passwords, or destination service tokens. Findings on @requires and @restrict coverage are advisory; authorization changes must pass through CAP service review, MTX tenant provisioning tests, and operator approval before deployment to production BTP subaccounts.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-cap-architecture-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-cap-architecture-review"
   ],

package/agents/sap/sap-clean-core-debt-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-clean-core-debt-reviewer-agent/harnesses/codex.toml

@@ -28,4 +28,4 @@ path = "skills/sap/sap-clean-core-debt-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-clean-core-debt-reviewer-agent/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Static review only — no Bash, no system connection, no live RFC or API calls. Never accepts raw ABAP source with embedded credentials, user names, or production system IDs. All remediation guidance is advisory; custom-code changes in production systems require transport and change-management approval.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-clean-core-debt-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-clean-core-debt-review"

package/agents/sap/sap-cloud-alm-sre-incident-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-cloud-alm-sre-incident-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-cloud-alm-sre-incident-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-cloud-alm-sre-incident-agent/metadata.json

@@ -24,7 +24,7 @@
   "security_notes": "Static review only — no Bash, no Cloud ALM API calls, no monitoring rule mutations, no incident record modifications, no deployment job execution. Never accepts production Cloud ALM API credentials, SAP BTP service instance keys, incident records with personal data, or transport request content that includes configuration secrets. Any finding representing a complete monitoring blind spot for a production-critical SAP service, an ungated production deployment path, or an absent incident escalation route for P1 incidents MUST be escalated to the SRE lead, Cloud ALM administrator, IT operations manager, and where change-control gaps affect audit compliance, the internal audit function, before any remediation is applied. All guidance is advisory; Cloud ALM monitoring rule changes, SLO definitions, runbook updates, and change management workflow modifications require operations change-management approval and audit-trail documentation.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-cloud-alm-sre-incident-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-cloud-alm-sre-incident-review"
   ],

package/agents/sap/sap-custom-code-remediation-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-custom-code-remediation-reviewer-agent/harnesses/codex.toml

@@ -26,4 +26,4 @@ path = "skills/sap/sap-custom-code-remediation-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-custom-code-remediation-reviewer-agent/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Static advisory review only — no Bash, no system connections, no ATC remote runs, no transport release actions, no mutation of any ABAP object or repository. Never accepts custom code containing embedded RFC credentials, dialog user passwords, client-specific system IDs, or database connection strings. All remediation guidance is advisory; code changes in customer systems require ABAP unit testing, functional sign-off, and transport and change-management approval before activation. Findings are labelled documentation-based or inference; verify deprecated-API replacement status against the specific target S/4HANA release simplification list and the ABAP repository released_objects view.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-custom-code-remediation-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-custom-code-remediation-review"

package/agents/sap/sap-data-migration-cutover-readiness-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-data-migration-cutover-readiness-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-data-migration-cutover-readiness/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-data-migration-cutover-readiness-agent/metadata.json

@@ -25,7 +25,7 @@
   "security_notes": "Static advisory readiness review only — this agent never executes, triggers, schedules, or monitors any live migration task, data transfer, cutover step, RFC call, BAPI invocation, or post-processing run. That execution boundary is absolute and must be stated explicitly in every response. Never accepts migration project documents or mapping files containing database connection strings, schema passwords, SFTP credentials, S-user tokens, cloud storage access keys, or production client IDs. All readiness findings and go/no-go assessments are advisory; the formal go/no-go decision requires sign-off from the customer project manager, SAP basis team, functional leads, and quality gate owner. Cutover execution must be performed only through the guarded live-execution agent or authorised operational tooling under approved change-management controls. Findings are labelled documentation-based or inference; verify reconciliation thresholds and Migration Cockpit version capabilities against the customer's specific system landscape and SAP for Me product availability.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-data-migration-cutover-readiness-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-data-migration-cutover-readiness"

package/agents/sap/sap-datasphere-data-product-architect-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-datasphere-data-product-architect-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-datasphere-data-product-architecture/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-datasphere-data-product-architect-agent/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Static review only — no Bash, no Datasphere API calls, no live space connections, no data preview. Never accepts real BTP tenant IDs, Datasphere space credentials, personal data column samples, or database user passwords. All architecture and access control recommendations are advisory; changes to Datasphere spaces, data products, sharing policies, and DAC rules require authorised Space Administrator or DW Administrator approval and may affect active consumers and scheduled flows.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-datasphere-data-product-architect-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-datasphere-data-product-architecture"
   ],

package/agents/sap/sap-ewm-tm-logistics-execution-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-ewm-tm-logistics-execution-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-ewm-tm-logistics-execution-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-ewm-tm-logistics-execution-agent/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Static review only — no Bash, no RFC/BAPI calls, no SAP GUI transaction execution, no table-level mutations. Never creates, confirms, or posts a warehouse task, warehouse order, freight order, transfer order, goods movement, or any EWM/TM execution document. Never creates or modifies warehouse master data, storage type rules, carrier assignments, dangerous-goods classification records, or any logistics configuration object. Never accepts real SAP system credentials, SAP basis passwords, carrier contract rates or confidential logistics pricing, actual inventory quantities or values from live systems, dangerous-goods transport documents with real shipment data, or legally sensitive freight agreements. Findings indicating goods movements postable without dual authorisation, dangerous-goods classification records missing for active freight order types, inventory adjustments above tolerance threshold postable without a second approver, or carrier selection overrides possible without documented approval MUST be escalated to the Head of Logistics and the Supply Chain Compliance Officer before any remediation is applied. All guidance is advisory; EWM/TM configuration changes require transport management, change-control board approval, regression testing of warehouse task creation and freight settlement workflows in a quality system, and coordination with the Head of Logistics before transport to production.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-ewm-tm-logistics-execution-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-ewm-tm-logistics-execution-review"
   ],

package/agents/sap/sap-finance-fico-controls-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-finance-fico-controls-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-finance-fico-controls-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-finance-fico-controls-agent/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Static review only — no Bash, no RFC/BAPI calls, no SAP GUI transaction execution, no table-level mutations. Never posts or reverses a financial document. Never activates or deactivates posting periods or closing cockpit steps. Never accepts real SAP system credentials, basis passwords, transport IDs tied to production systems, or live financial posting data. Findings indicating bypassed closing-cockpit sequences, unrestricted posting-period access, or unexplained parallel-ledger divergence must be escalated to the Finance Controller and internal audit before any remediation is applied. All guidance is advisory; FI-CO configuration changes require transport management, change-control board approval, and dual-control sign-off in productive systems.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-finance-fico-controls-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-finance-fico-controls-review"
   ],

package/agents/sap/sap-fiori-ui5-ux-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-fiori-ui5-ux-reviewer-agent/harnesses/codex.toml

@@ -26,4 +26,4 @@ path = "skills/sap/sap-fiori-ui5-ux-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-fiori-ui5-ux-reviewer-agent/metadata.json

@@ -23,7 +23,7 @@
   "security_notes": "Static review only — no Bash, no UI5 tooling execution, no Fiori launchpad mutations, no SAP BTP deployment operations. Never accepts real SAP system credentials, OAuth tokens, BTP service keys, or personal user data. All remediation guidance is advisory; UI5 code and Fiori configuration changes require development team review and regression testing. Accessibility findings require sign-off from the accessibility lead before closure. Never modifies source files, Fiori catalog entries, or UI5 library configuration.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-fiori-ui5-ux-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": ["sap-fiori-ui5-ux-review"],
   "execution_tier": "static-review",
   "lifecycle": "experimental",

package/agents/sap/sap-guarded-transport-import-operator-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-guarded-transport-import-operator-agent/harnesses/codex.toml

@@ -38,4 +38,4 @@ path = "skills/sap/sap-guarded-transport-import/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-guarded-transport-import-operator-agent/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Mutating-runtime agent — every import changes production or quality system state and may be irreversible without a counter-transport. Must not be invoked without gating by sap-maestro-agent. Requires named approver confirmation, a valid change ticket number, target-system explicit confirmation, and completed preflight before any tp or CTS import command. Never combines discovery and mutation in a single step. Never approves its own change request. SoD check is mandatory — the requesting user must not be the transport creator and the approver must not be the transport author. All import actions must produce audit evidence (timestamp, approver, ticket, diff summary, rollback transport ID).",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-guarded-transport-import-operator-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-guarded-transport-import"

package/agents/sap/sap-hana-cloud-performance-cost-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-hana-cloud-performance-cost-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-hana-cloud-performance-cost/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-hana-cloud-performance-cost-agent/metadata.json

@@ -25,7 +25,7 @@
   "security_notes": "Static review only — no Bash, no hdbsql execution, no HANA Cloud Central API calls, no live SQL plan capture, no M_ monitoring view queries. Never accepts real HANA Cloud instance connection strings, hdbsql credentials, SAP BTP service binding JSON with passwords, personal data row samples, or encryption key material. All sizing, performance, and cost recommendations are advisory; instance resizing, schema changes, workload class modifications, and NSE tier reassignments require authorised HANA Cloud DBA or BTP account administrator approval and may cause planned downtime or affect running workloads.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-hana-cloud-performance-cost-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-hana-cloud-performance-cost"
   ],

package/agents/sap/sap-hypercare-incident-commander-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-hypercare-incident-commander-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-hypercare-incident-commander-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-hypercare-incident-commander-agent/metadata.json

@@ -24,7 +24,7 @@
   "security_notes": "Static review only — no Bash, no SAP system API calls, no incident record mutations, no hypercare plan modifications, no support ticket updates, no cutover checklist changes. Never accepts production system credentials, SAP support portal credentials, incident records with personal data, user master data migration files, or financial data migration audit trails. Any finding representing an absent incident commander assignment for the go-live period, a missing production fallback decision tree with defined rollback thresholds, a critical monitoring blind spot for a key SAP business process during hypercare, or a production support handover package that is incomplete at go-live MUST be escalated to the project manager, go-live incident commander, operations lead, and SAP engagement manager before the go-live event proceeds. All guidance is advisory; hypercare plan updates, incident command structure changes, cutover checklist modifications, and production handover package corrections require project change-management approval and audit-trail documentation.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-hypercare-incident-commander-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-hypercare-incident-commander-review"
   ],

package/agents/sap/sap-integration-flow-guarded-operator-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-integration-flow-guarded-operator-agent/harnesses/codex.toml

@@ -38,4 +38,4 @@ path = "skills/sap/sap-guarded-integration-flow-change/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-integration-flow-guarded-operator-agent/metadata.json

@@ -22,7 +22,7 @@
   "security_notes": "Mutating-runtime agent — every iFlow deployment changes live message-routing behavior on the target Integration Suite tenant and may silently break dependent business processes, B2B partner channels, or downstream SAP and non-SAP systems. Must not be invoked without gating by sap-maestro-agent. Requires named integration-owner approver confirmation, a valid change ticket, target-tenant URL and artifact ID explicit confirmation, and a completed artifact preflight and configuration diff before any deploy command. Never combines discovery and mutation in a single step. Never approves its own change request. SoD check is mandatory — the requesting developer must not be the sole approver and the approver must not have authored the artifact change. All deployment actions must produce audit evidence: timestamp, approver, ticket, artifact ID and version, target tenant, configuration diff summary, previous version ID for rollback, post-change message-monitoring result. Refuses if any gate step is ambiguous, incomplete, or contradicted. Never requests or relays OAuth client secrets, tenant administrator passwords, or Security Material store credentials.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-integration-flow-guarded-operator-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": [
     "sap-guarded-integration-flow-change"

package/agents/sap/sap-integration-suite-reviewer-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-integration-suite-reviewer-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-integration-suite-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-integration-suite-reviewer-agent/metadata.json

@@ -25,7 +25,7 @@
   "security_notes": "Static review only — no Bash, no tenant API calls, no iFlow deployment or activation. Never accepts real OAuth client secrets, Basic Auth credentials, certificate private keys, or tenant-specific endpoint URLs with embedded tokens. All remediation guidance is advisory; iFlow and API policy changes require transport through Integration Suite CTS+ or Git-based versioning and operator approval.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-integration-suite-reviewer-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-integration-suite-review"
   ],

package/agents/sap/sap-joule-governance-adoption-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-joule-governance-adoption-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-joule-governance-adoption-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-joule-governance-adoption-agent/metadata.json

@@ -24,7 +24,7 @@
   "security_notes": "Static review only — no Bash, no Joule API calls, no BTP entitlement changes, no connected-system mutations. Never accepts production Joule interaction logs with personal data, production BTP credentials, OAuth client secrets, or real employee or customer data. Findings where Joule can access sensitive personal data, execute financial transactions without confirmation, or where custom skill registrations bypass existing approval controls MUST be escalated to the AI governance officer, CISO, data protection officer, and legal counsel before any remediation is applied. All guidance is advisory; Joule entitlement changes, API scope restrictions, and skill registration controls require architecture review, change-management approval, and audit-trail documentation.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-joule-governance-adoption-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-joule-governance-adoption-review"
   ],

package/agents/sap/sap-license-btp-consumption-finops-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-license-btp-consumption-finops-agent/harnesses/codex.toml

@@ -27,4 +27,4 @@ path = "skills/sap/sap-license-btp-consumption-finops-review/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-license-btp-consumption-finops-agent/metadata.json

@@ -24,7 +24,7 @@
   "security_notes": "Static analysis only — no Bash, no BTP CLI execution, no SAP Licence Audit tool API calls, no live commercial system connections. Never accepts real contract pricing, customer-specific discount schedules, SAP Licence Audit correspondence, personal data of licence contacts, or production system credentials. All remediation guidance is advisory; licence metric changes, CPEA reallocations, and commercial model adjustments require authorised SAP contract owner approval and may affect existing billing commitments.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-license-btp-consumption-finops-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": [
     "sap-license-btp-consumption-finops-review"
   ],

package/agents/sap/sap-live-readonly-identity-trust-discovery-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-live-readonly-identity-trust-discovery-agent/harnesses/codex.toml

@@ -28,4 +28,4 @@ path = "skills/sap/sap-live-readonly-identity-trust-discovery/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-live-readonly-identity-trust-discovery-agent/metadata.json

@@ -23,7 +23,7 @@
   "security_notes": "Read-only runtime — all tool calls must be list/get/describe/export only. Forbidden mutations explicitly enumerated: create IAS application registrations; update or delete IAS application registrations; modify BTP trust configurations or corporate IdP federation settings; assign or revoke XSUAA role collections; create or modify XSUAA role templates; rotate IAS client certificates or OAuth secrets; trigger IPS provisioning jobs; create or modify IPS source or target system connectors; enable or disable MFA policies; enable or disable risk-based authentication rules; any write to a system of record. Never stores, logs, relays, or includes in output: IAS client secrets, OAuth tokens, SAML signing certificate private keys, user email addresses, shadow user credentials, or service-key credentials. Must stop and escalate immediately if a requested action would change system state. Sensitive values must be masked in all output.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-live-readonly-identity-trust-discovery-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "companion_skills": ["sap-live-readonly-identity-trust-discovery"],
   "execution_tier": "read-only-runtime",
   "lifecycle": "experimental",

package/agents/sap/sap-live-readonly-landscape-discovery-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-live-readonly-landscape-discovery-agent/harnesses/codex.toml

@@ -28,4 +28,4 @@ path = "skills/sap/sap-live-readonly-landscape-discovery/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-live-readonly-landscape-discovery-agent/metadata.json

@@ -22,7 +22,7 @@
   "security_notes": "Read-only runtime — all tool calls must be list/get/describe/export only. Forbidden mutations: btp create, btp update, btp delete, btp assign, btp unassign, btp enable, any deploy or import command, any role-collection assignment, any secret or credential rotation. Never stores or relays subaccount IDs, service keys, client secrets, or user email addresses beyond what is required to scope the current discovery task. Must stop and escalate if a requested action would change system state.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-live-readonly-landscape-discovery-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": ["sap-live-readonly-landscape-discovery"],
   "execution_tier": "read-only-runtime",

package/agents/sap/sap-maestro-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---

package/agents/sap/sap-maestro-agent/harnesses/codex.toml

@@ -31,4 +31,4 @@ path = "skills/sap/sap-maestro/SKILL.md"
 enabled = true
 
 [metadata]
-author = "github: Raishin"
+author = "github: VincentChuWaiChow"

package/agents/sap/sap-maestro-agent/metadata.json

@@ -22,7 +22,7 @@
   "security_notes": "Classification and coordination only. Never accepts system credentials, transport keys, client/system IDs, or landscape topology details beyond the minimum needed to classify the task. Never auto-dispatches any agent that mutates SAP systems — all live-guard agents require explicit human approval before dispatch. All outputs are advisory; production changes require change-management approval.",
   "last_verified": "2026-06-19",
   "path": "agents/sap/sap-maestro-agent",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "companion_skills": ["sap-maestro"],
   "execution_tier": "read-only-runtime",

package/agents/sap/sap-manufacturing-execution-risk-agent/AGENT.md

@@ -1,6 +1,6 @@
 ---
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   lifecycle: experimental
 ---