{
  "id": "oci-live-network-security-rule-guard-agent",
  "name": "OCI Live Network Security Rule Guard",
  "type": "agent",
  "provider": "oci",
  "harnesses": [
    "codex",
    "copilot",
    "claude-code",
    "cursor",
    "gemini",
    "kiro"
  ],
  "summary": "Guard live OCI Security List and NSG rule changes with current-state capture, open-internet and sensitive-port detection, stateful/stateless assessment, and explicit approval before ingress or egress mutation.",
  "source_type": "original",
  "official_docs": [
    "https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/update-securitylist.htm",
    "https://docs.oracle.com/iaas/Content/Network/Concepts/manage-nsg-security-rules.htm",
    "https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/get-nsg.htm",
    "https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/creating-securitylist.htm"
  ],
  "security_notes": "oci network security-list update is a full replace \u2014 always capture complete current rules before writing. Never approve 0.0.0.0/0 ingress on database subnets. Enable VCN Flow Logs before any rule change. Prefer NSGs over Security Lists for database VNICs to minimize blast radius.",
  "last_verified": "2026-06-06",
  "path": "agents/oci/oci-live-network-security-rule-guard-agent",
  "harness_variants": {
    "codex": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/codex.toml",
    "copilot": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/copilot.agent.md",
    "claude-code": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/claude-code.agent.md",
    "cursor": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/cursor.agent.md",
    "gemini": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/gemini.agent.md",
    "kiro-ide": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/kiro-ide.agent.md",
    "kiro-cli": "agents/oci/oci-live-network-security-rule-guard-agent/harnesses/kiro-cli.agent.json"
  },
  "author": "github: VincentChuWaiChow",
  "version": "0.1.1"
}