{
  "version": "0.1.0",
  "description": "Role-based agent and skill selections for vfa-export-agents --role installs. Each role maps to the minimal, high-value agent and skill IDs a practitioner in that function needs across all supported cloud providers. Roles are intentionally overlapping — a single agent may serve multiple roles.",
  "roles": {
    "accounting-finance-advisor": {
      "label": "Accounting & Finance Advisor",
      "description": "Multi-jurisdiction accounting and corporate finance advisory for enterprise finance teams — revenue recognition (ASC 606/IFRS 15), financial close cycle (month-end/quarter-end/year-end across 8 jurisdictions), treasury and liquidity management (ASC 815/IFRS 9 hedge accounting, ASC 830/IAS 21 FX translation, Basel III LCR/NSFR, Dodd-Frank/EMIR), and FP&A variance analysis with SEC Regulation S-K Item 303 MD&A guidance. Advisory only — never posts journal entries, executes financial transactions, or writes to any system of record.",
      "agents": [
        "accounting-business-combinations-advisor-agent",
        "accounting-close-cycle-advisor-agent",
        "accounting-consolidation-intercompany-advisor-agent",
        "accounting-equity-compensation-advisor-agent",
        "accounting-fixed-assets-advisor-agent",
        "accounting-fx-translation-advisor-agent",
        "accounting-hedge-accounting-advisor-agent",
        "accounting-indirect-tax-einvoicing-advisor-agent",
        "accounting-lease-accounting-advisor-agent",
        "accounting-maestro-agent",
        "accounting-payroll-advisor-agent",
        "accounting-procure-to-pay-advisor-agent",
        "accounting-revenue-recognition-advisor-agent",
        "accounting-tax-provision-advisor-agent",
        "finance-capital-allocation-advisor-agent",
        "finance-debt-capital-structure-advisor-agent",
        "finance-fpa-forecasting-advisor-agent",
        "finance-maestro-agent",
        "finance-transfer-pricing-pillar-two-advisor-agent",
        "finance-treasury-liquidity-advisor-agent",
        "finance-variance-analysis-advisor-agent",
        "finance-working-capital-advisor-agent",
        "netsuite-audit-controls-sox-agent",
        "netsuite-bi-reporting-agent",
        "netsuite-data-governance-privacy-agent",
        "netsuite-financial-foundations-agent",
        "netsuite-identity-access-role-permission-agent"
      ],
      "skills": [
        "accounting-maestro",
        "business-combinations-advisor",
        "capital-allocation-advisor",
        "close-cycle-advisor",
        "consolidation-intercompany-advisor",
        "debt-capital-structure-advisor",
        "equity-compensation-advisor",
        "finance-maestro",
        "fixed-assets-advisor",
        "fpa-forecasting-advisor",
        "fx-translation-advisor",
        "hedge-accounting-advisor",
        "indirect-tax-einvoicing-advisor",
        "lease-accounting-advisor",
        "netsuite-audit-controls-sox-skill",
        "netsuite-bi-reporting-skill",
        "netsuite-data-governance-privacy-skill",
        "netsuite-financial-foundations-skill",
        "netsuite-identity-access-role-permission-skill",
        "payroll-advisor",
        "procure-to-pay-advisor",
        "revenue-recognition-advisor",
        "tax-provision-advisor",
        "transfer-pricing-pillar-two-advisor",
        "treasury-liquidity-advisor",
        "variance-analysis-advisor",
        "working-capital-advisor"
      ]
    },
    "cloud-ai-platform-engineer": {
      "label": "Cloud AI Platform Engineer",
      "description": "Build, deploy, harden, and govern AI / GenAI platforms on NVIDIA, GCP Vertex/Gemini, Huawei ModelArts, and adjacent stacks. Covers GenAI guardrails, agentic platform review, model promotion gating, CUDA / TensorRT / Triton review, and MLOps pipelines.",
      "agents": [
        "gcp-alloydb-ai-developer-agent",
        "gcp-gemini-api-developer-agent",
        "gcp-vertex-ai-mlops-engineer-agent",
        "huawei-modelarts-mlops-engineer-agent",
        "nvidia-agentic-ai-platform-review-agent",
        "nvidia-ai-infrastructure-operations-agent",
        "nvidia-ai-networking-fabric-review-agent",
        "nvidia-ai-operations-day2-agent",
        "nvidia-cuda-kernel-performance-review-agent",
        "nvidia-generative-ai-platform-review-agent",
        "nvidia-gpu-operator-kubernetes-hardening-agent",
        "nvidia-maestro-agent",
        "nvidia-model-promotion-gatekeeper-agent",
        "nvidia-ngc-nim-supply-chain-governor-agent",
        "nvidia-tensorrt-llm-deployment-review-agent",
        "nvidia-triton-inference-serving-review-agent"
      ],
      "skills": [
        "gcp-alloydb-ai-developer",
        "gcp-gemini-api-developer",
        "gcp-vertex-ai-mlops-engineer",
        "huawei-modelarts-mlops-engineer",
        "nvidia-agentic-ai-platform-review",
        "nvidia-ai-infrastructure-operations",
        "nvidia-ai-networking-fabric-review",
        "nvidia-ai-operations-day2",
        "nvidia-cuda-kernel-performance-review",
        "nvidia-generative-ai-platform-review",
        "nvidia-gpu-operator-kubernetes-hardening",
        "nvidia-maestro",
        "nvidia-model-promotion-gatekeeper",
        "nvidia-ngc-nim-supply-chain-governor",
        "nvidia-tensorrt-llm-deployment-review",
        "nvidia-triton-inference-serving-review"
      ]
    },
    "cloud-dba": {
      "label": "Cloud Database Administrator",
      "description": "Database architects, performance investigators, DBA operators, replication, and live database lifecycle guards across AWS RDS/DynamoDB, Azure CosmosDB, OCI Autonomous/Exadata/MySQL, GCP AlloyDB/Spanner, Alibaba PolarDB/RDS, and Huawei GaussDB.",
      "agents": [
        "alibaba-analyticdb-realtime-agent",
        "alibaba-live-rds-polardb-mutation-guard-agent",
        "alibaba-maxcompute-dataworks-analyst-agent",
        "alibaba-polardb-rds-dba-agent",
        "aws-dynamodb-data-modeling-performance-review-agent",
        "aws-rds-aurora-performance-investigator-agent",
        "azure-cosmosdb-application-developer-agent",
        "azure-cosmosdb-performance-investigator-agent",
        "azure-cosmosdb-platform-operator-agent",
        "gcp-alloydb-cloudsql-dba-agent",
        "gcp-bigquery-cost-performance-analyst-agent",
        "gcp-live-bigquery-dataset-deletion-guard-agent",
        "gcp-spanner-architect-agent",
        "huawei-drs-data-replication-operator-agent",
        "huawei-dws-dli-data-analyst-agent",
        "huawei-gaussdb-rds-dba-agent",
        "huawei-live-gaussdb-mutation-guard-agent",
        "ionos-live-database-lifecycle-guard-agent",
        "oci-autonomous-database-architect-agent",
        "oci-database-platform-dba-agent",
        "oci-dbtools-sql-analyst-agent",
        "oci-exadata-platform-architect-agent",
        "oci-goldengate-replication-operator-agent",
        "oci-live-autonomous-db-lifecycle-guard-agent",
        "oci-mysql-heatwave-ai-specialist-agent",
        "oci-recovery-service-operator-agent"
      ],
      "skills": [
        "alibaba-analyticdb-realtime",
        "alibaba-live-rds-polardb-mutation-guard",
        "alibaba-maxcompute-dataworks-analyst",
        "alibaba-polardb-rds-dba",
        "aws-dynamodb-data-modeling-performance-review",
        "aws-rds-aurora-performance-investigator",
        "azure-cosmosdb-application-developer",
        "azure-cosmosdb-performance-investigator",
        "azure-cosmosdb-platform-operator",
        "gcp-alloydb-cloudsql-dba",
        "gcp-bigquery-cost-performance-analyst",
        "gcp-live-bigquery-dataset-deletion-guard",
        "gcp-spanner-architect",
        "huawei-drs-data-replication-operator",
        "huawei-dws-dli-data-analyst",
        "huawei-gaussdb-rds-dba",
        "huawei-live-gaussdb-mutation-guard",
        "ionos-live-database-lifecycle-guard",
        "oci-autonomous-database-architect",
        "oci-database-platform-dba",
        "oci-dbtools-sql-analyst",
        "oci-exadata-database-architect",
        "oci-exadata-platform-architect",
        "oci-goldengate-replication-operator",
        "oci-live-autonomous-db-lifecycle-guard",
        "oci-mysql-heatwave-ai-specialist",
        "oci-recovery-service-operator"
      ]
    },
    "cloud-devops-engineer": {
      "label": "Cloud DevOps Engineer",
      "description": "CI/CD release engineers, deployment and rollout operators, live pipeline approval guards, serverless production readiness, observability responders, and artifact governance across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
      "agents": [
        "alibaba-daily-operations-briefing-coordinator-agent",
        "alibaba-devops-cicd-operator-agent",
        "alibaba-function-serverless-operator-agent",
        "alibaba-mse-microservice-engine-agent",
        "alibaba-observability-incident-responder-agent",
        "alibaba-registry-artifact-governor-agent",
        "alibaba-serverless-production-readiness-agent",
        "alibaba-support-incident-coordinator-agent",
        "alibaba-ticket-triage-escalation-coordinator-agent",
        "alibaba-waf-reliability-review-agent",
        "aws-ci-cd-release-engineer-agent",
        "aws-daily-operations-briefing-coordinator-agent",
        "aws-deployment-hotfix-operator-agent",
        "aws-devops-agent-skill-designer-agent",
        "aws-ecs-service-remediation-operator-agent",
        "aws-live-deployment-guarded-operator-agent",
        "aws-live-ecs-rollout-guard-agent",
        "aws-live-pipeline-approval-operator-agent",
        "aws-live-serverless-release-guard-agent",
        "aws-non-destructive-task-automation-advisor-agent",
        "aws-observability-incident-responder-agent",
        "aws-pipeline-fix-operator-agent",
        "aws-serverless-production-readiness-agent",
        "aws-serverless-rollout-corrector-agent",
        "aws-ticket-triage-escalation-coordinator-agent",
        "aws-waf-reliability-review-agent",
        "azure-app-service-production-readiness-agent",
        "azure-live-app-service-slot-swap-guard-agent",
        "azure-observability-investigator-agent",
        "azure-platform-automation-devops-agent",
        "azure-resource-health-incident-triage-agent",
        "azure-waf-reliability-review-agent",
        "gcp-apigee-api-platform-operator-agent",
        "gcp-cloud-run-functions-operator-agent",
        "gcp-cloudbuild-deploy-cicd-operator-agent",
        "gcp-daily-operations-briefing-coordinator-agent",
        "gcp-data-pipeline-engineer-agent",
        "gcp-firebase-developer-agent",
        "gcp-live-cloud-run-traffic-migration-guard-agent",
        "gcp-networking-observability-agent",
        "gcp-observability-incident-responder-agent",
        "gcp-registry-artifact-governor-agent",
        "gcp-serverless-production-readiness-agent",
        "gcp-support-incident-coordinator-agent",
        "gcp-ticket-triage-escalation-coordinator-agent",
        "gcp-waf-reliability-review-agent",
        "huawei-codearts-devops-operator-agent",
        "huawei-daily-operations-briefing-coordinator-agent",
        "huawei-functiongraph-serverless-operator-agent",
        "huawei-observability-incident-responder-agent",
        "huawei-registry-artifact-governor-agent",
        "huawei-serverless-production-readiness-agent",
        "huawei-support-incident-coordinator-agent",
        "huawei-ticket-triage-escalation-coordinator-agent",
        "huawei-waf-reliability-review-agent",
        "oci-devops-container-platform-engineer-agent",
        "oci-live-oke-rollout-guard-agent",
        "oci-observability-incident-responder-agent",
        "oci-registry-artifact-governor-agent",
        "oci-support-incident-coordinator-agent",
        "oci-waf-reliability-review-agent",
        "terraform-engine-compatibility-agent",
        "terraform-estate-reconciliation-agent",
        "terraform-execution-governance-agent",
        "terraform-plan-blast-radius-agent"
      ],
      "skills": [
        "alibaba-daily-operations-briefing-coordinator",
        "alibaba-devops-cicd-operator",
        "alibaba-function-serverless-operator",
        "alibaba-mse-microservice-engine",
        "alibaba-observability-incident-responder",
        "alibaba-registry-artifact-governor",
        "alibaba-serverless-production-readiness",
        "alibaba-support-incident-coordinator",
        "alibaba-ticket-triage-escalation-coordinator",
        "alibaba-waf-reliability-review",
        "argocd-gitops-review",
        "aws-ci-cd-release-engineer",
        "aws-daily-operations-briefing-coordinator",
        "aws-deployment-hotfix-operator",
        "aws-devops-agent-skill-designer",
        "aws-ecs-service-remediation-operator",
        "aws-live-deployment-guarded-operator",
        "aws-live-ecs-rollout-guard",
        "aws-live-pipeline-approval-operator",
        "aws-live-serverless-release-guard",
        "aws-non-destructive-task-automation-advisor",
        "aws-observability-incident-responder",
        "aws-pipeline-fix-operator",
        "aws-serverless-production-readiness",
        "aws-serverless-rollout-corrector",
        "aws-ticket-triage-escalation-coordinator",
        "aws-waf-reliability-review",
        "azure-app-service-production-readiness",
        "azure-live-app-service-slot-swap-guard",
        "azure-observability-investigator",
        "azure-platform-automation-devops",
        "azure-resource-health-incident-triage",
        "azure-waf-reliability-review",
        "gcp-apigee-api-platform-operator",
        "gcp-cloud-run-functions-operator",
        "gcp-cloudbuild-deploy-cicd-operator",
        "gcp-daily-operations-briefing-coordinator",
        "gcp-data-pipeline-engineer",
        "gcp-firebase-developer",
        "gcp-live-cloud-run-traffic-migration-guard",
        "gcp-networking-observability",
        "gcp-observability-incident-responder",
        "gcp-registry-artifact-governor",
        "gcp-serverless-production-readiness",
        "gcp-support-incident-coordinator",
        "gcp-ticket-triage-escalation-coordinator",
        "gcp-waf-reliability-review",
        "huawei-codearts-devops-operator",
        "huawei-daily-operations-briefing-coordinator",
        "huawei-functiongraph-serverless-operator",
        "huawei-observability-incident-responder",
        "huawei-registry-artifact-governor",
        "huawei-serverless-production-readiness",
        "huawei-support-incident-coordinator",
        "huawei-ticket-triage-escalation-coordinator",
        "huawei-waf-reliability-review",
        "oci-devops-container-platform-engineer",
        "oci-live-oke-rollout-guard",
        "oci-observability-incident-responder",
        "oci-registry-artifact-governor",
        "oci-support-incident-coordinator",
        "oci-waf-reliability-review",
        "opentelemetry-collector-config-review",
        "terraform-engine-compatibility",
        "terraform-estate-reconciliation",
        "terraform-execution-governance",
        "terraform-plan-blast-radius",
        "terraform-verification-strategy"
      ]
    },
    "cloud-finops-analyst": {
      "label": "Cloud FinOps Analyst",
      "description": "Cost optimization governors, anomaly watchers, budget runaway guards, capacity planning, and cross-provider cost estimation across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and FinOps-neutral tools.",
      "agents": [
        "alibaba-cost-anomaly-watch-coordinator-agent",
        "alibaba-cost-finops-analyst-agent",
        "alibaba-live-cost-budget-action-guard-agent",
        "alibaba-waf-cost-optimization-review-agent",
        "aws-cost-anomaly-watch-coordinator-agent",
        "aws-cost-optimization-governor-agent",
        "aws-waf-cost-optimization-review-agent",
        "azure-cost-estimation-review-agent",
        "azure-cost-optimization-governor-agent",
        "azure-live-cost-budget-action-guard-agent",
        "azure-waf-cost-optimization-review-agent",
        "contabo-capacity-planner-agent",
        "contabo-cost-optimization-analyst-agent",
        "finops-ai-economist-agent",
        "finops-cloud-price-advisor-agent",
        "finops-kubernetes-rightsizer-agent",
        "finops-maestro-agent",
        "gcp-bigquery-cost-performance-analyst-agent",
        "gcp-cost-anomaly-watch-coordinator-agent",
        "gcp-cost-finops-analyst-agent",
        "gcp-live-cost-budget-action-guard-agent",
        "gcp-waf-cost-optimization-review-agent",
        "hetzner-capacity-planner-agent",
        "hetzner-cost-optimization-analyst-agent",
        "huawei-cost-anomaly-watch-coordinator-agent",
        "huawei-cost-finops-analyst-agent",
        "huawei-live-cost-budget-action-guard-agent",
        "huawei-waf-cost-optimization-review-agent",
        "ionos-cost-optimization-analyst-agent",
        "oci-cost-finops-analyst-agent",
        "oci-limits-capacity-planner-agent",
        "oci-live-cost-budget-runaway-guard-agent",
        "oci-waf-cost-optimization-review-agent",
        "ovhcloud-cost-finops-analyst-agent",
        "scaleway-cost-optimizer-agent"
      ],
      "skills": [
        "alibaba-cost-anomaly-watch-coordinator",
        "alibaba-cost-finops-analyst",
        "alibaba-live-cost-budget-action-guard",
        "alibaba-waf-cost-optimization-review",
        "aws-cost-anomaly-watch-coordinator",
        "aws-cost-optimization-governor",
        "aws-waf-cost-optimization-review",
        "azure-cost-estimation-review",
        "azure-cost-optimization-governor",
        "azure-live-cost-budget-action-guard",
        "azure-waf-cost-optimization-review",
        "contabo-capacity-planner",
        "contabo-cost-optimization-analyst",
        "fetch-foundation-model-pricing",
        "finops-cloud-price-advisor",
        "finops-maestro",
        "focus-spec-normalizer",
        "carbon-cost-pair",
        "kubernetes-allocation-report",
        "rightsize-recommendation",
        "gcp-bigquery-cost-performance-analyst",
        "gcp-cost-anomaly-watch-coordinator",
        "gcp-cost-finops-analyst",
        "gcp-live-cost-budget-action-guard",
        "gcp-waf-cost-optimization-review",
        "hetzner-capacity-planner",
        "hetzner-cost-optimization-analyst",
        "huawei-cost-anomaly-watch-coordinator",
        "huawei-cost-finops-analyst",
        "huawei-live-cost-budget-action-guard",
        "huawei-waf-cost-optimization-review",
        "ionos-cost-optimization-analyst",
        "oci-cost-finops-analyst",
        "oci-limits-capacity-planner",
        "oci-live-cost-budget-runaway-guard",
        "oci-waf-cost-optimization-review",
        "ovhcloud-cost-finops-analyst",
        "scaleway-cost-optimizer"
      ]
    },
    "cloud-platform-engineer": {
      "label": "Cloud Platform Engineer",
      "description": "Infrastructure operators, IaC safety review, landing zones, networking, container platform operations, live deployment guards across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Terraform.",
      "agents": [
        "alibaba-ack-container-platform-operator-agent",
        "alibaba-ecs-compute-operator-agent",
        "alibaba-iac-change-safety-review-agent",
        "alibaba-landing-zone-architect-agent",
        "alibaba-live-ack-rollout-guard-agent",
        "alibaba-load-balancer-traffic-engineer-agent",
        "alibaba-network-architect-agent",
        "alibaba-oss-storage-steward-agent",
        "aws-data-protection-backup-steward-agent",
        "aws-ec2-compute-operations-steward-agent",
        "aws-ecs-fargate-platform-operator-agent",
        "aws-eks-platform-operator-agent",
        "aws-iac-change-safety-review-agent",
        "aws-iac-patch-executor-agent",
        "aws-landing-zone-governor-agent",
        "aws-live-iac-change-guard-agent",
        "aws-network-architect-agent",
        "azure-aks-platform-operator-agent",
        "azure-landing-zone-architect-agent",
        "azure-live-aks-rollout-guard-agent",
        "azure-live-arm-deployment-stack-guard-agent",
        "azure-network-topology-review-agent",
        "azure-private-endpoint-adoption-planner-agent",
        "azure-subscription-resource-organization-agent",
        "contabo-live-instance-lifecycle-guard-agent",
        "contabo-live-storage-operations-guard-agent",
        "gcp-compute-engine-operator-agent",
        "gcp-gke-platform-operator-agent",
        "gcp-iac-change-safety-review-agent",
        "gcp-landing-zone-architect-agent",
        "gcp-live-gke-rollout-guard-agent",
        "gcp-load-balancer-traffic-engineer-agent",
        "gcp-network-architect-agent",
        "hetzner-infrastructure-reviewer-agent",
        "hetzner-live-firewall-rule-guard-agent",
        "hetzner-live-server-lifecycle-guard-agent",
        "huawei-cce-container-platform-operator-agent",
        "huawei-ecs-compute-operator-agent",
        "huawei-iac-change-safety-review-agent",
        "huawei-ief-edge-computing-operator-agent",
        "huawei-landing-zone-architect-agent",
        "huawei-live-cce-rollout-guard-agent",
        "huawei-load-balancer-traffic-engineer-agent",
        "huawei-network-architect-agent",
        "huawei-obs-storage-steward-agent",
        "ionos-datacenter-designer-reviewer-agent",
        "ionos-kubernetes-platform-operator-agent",
        "nvidia-ai-infrastructure-operations-agent",
        "nvidia-ai-networking-fabric-review-agent",
        "nvidia-ai-operations-day2-agent",
        "nvidia-gpu-operator-kubernetes-hardening-agent",
        "oci-compute-instance-agent-operator-agent",
        "oci-compute-platform-operator-agent",
        "oci-devops-container-platform-engineer-agent",
        "oci-fusion-apps-environment-operator-agent",
        "oci-iot-digital-twin-engineer-agent",
        "oci-live-network-security-rule-guard-agent",
        "oci-live-oke-rollout-guard-agent",
        "oci-live-resource-manager-stack-guard-agent",
        "oci-load-balancer-traffic-engineer-agent",
        "oci-network-architect-agent",
        "oci-storage-backup-steward-agent",
        "ovhcloud-kubernetes-platform-operator-agent",
        "ovhcloud-network-architect-agent",
        "scaleway-kapsule-platform-operator-agent",
        "scaleway-live-kapsule-rollout-guard-agent",
        "scaleway-network-architect-agent",
        "terraform-engine-compatibility-agent",
        "terraform-estate-reconciliation-agent",
        "terraform-execution-governance-agent",
        "terraform-maestro-agent",
        "terraform-plan-blast-radius-agent",
        "terraform-policy-evidence-agent",
        "terraform-reviewer",
        "terraform-state-reliability-agent",
        "terraform-supply-chain-integrity-agent"
      ],
      "skills": [
        "alibaba-ack-container-platform-operator",
        "alibaba-ecs-compute-operator",
        "alibaba-iac-change-safety-review",
        "alibaba-landing-zone-architect",
        "alibaba-live-ack-rollout-guard",
        "alibaba-load-balancer-traffic-engineer",
        "alibaba-network-architect",
        "alibaba-oss-storage-steward",
        "argocd-gitops-review",
        "aws-data-protection-backup-steward",
        "aws-ec2-compute-operations-steward",
        "aws-ecs-fargate-platform-operator",
        "aws-eks-platform-operator",
        "aws-iac-change-safety-review",
        "aws-iac-patch-executor",
        "aws-landing-zone-governor",
        "aws-live-iac-change-guard",
        "aws-network-architect",
        "azure-aks-platform-operator",
        "azure-landing-zone-architect",
        "azure-live-aks-rollout-guard",
        "azure-live-arm-deployment-stack-guard",
        "azure-network-topology-review",
        "azure-private-endpoint-adoption-planner",
        "azure-subscription-resource-organization",
        "cilium-network-policy-review",
        "contabo-live-instance-lifecycle-guard",
        "contabo-live-storage-operations-guard",
        "gcp-compute-engine-operator",
        "gcp-gke-platform-operator",
        "gcp-iac-change-safety-review",
        "gcp-landing-zone-architect",
        "gcp-live-gke-rollout-guard",
        "gcp-load-balancer-traffic-engineer",
        "gcp-network-architect",
        "hetzner-infrastructure-reviewer",
        "hetzner-live-firewall-rule-guard",
        "hetzner-live-server-lifecycle-guard",
        "huawei-cce-container-platform-operator",
        "huawei-ecs-compute-operator",
        "huawei-iac-change-safety-review",
        "huawei-ief-edge-computing-operator",
        "huawei-landing-zone-architect",
        "huawei-live-cce-rollout-guard",
        "huawei-load-balancer-traffic-engineer",
        "huawei-network-architect",
        "huawei-obs-storage-steward",
        "ionos-datacenter-designer-reviewer",
        "ionos-kubernetes-platform-operator",
        "istio-ambient-mesh-review",
        "kubernetes-pod-security-admission-review",
        "kubernetes-workload-identity-review",
        "nvidia-ai-infrastructure-operations",
        "nvidia-ai-networking-fabric-review",
        "nvidia-ai-operations-day2",
        "nvidia-gpu-operator-kubernetes-hardening",
        "oci-compute-instance-agent-operator",
        "oci-compute-platform-operator",
        "oci-devops-container-platform-engineer",
        "oci-fusion-apps-environment-operator",
        "oci-iot-digital-twin-engineer",
        "oci-live-network-security-rule-guard",
        "oci-live-oke-rollout-guard",
        "oci-live-resource-manager-stack-guard",
        "oci-load-balancer-traffic-engineer",
        "oci-network-architect",
        "oci-storage-backup-steward",
        "opentelemetry-collector-config-review",
        "ovhcloud-kubernetes-platform-operator",
        "ovhcloud-network-architect",
        "scaleway-kapsule-platform-operator",
        "scaleway-live-kapsule-rollout-guard",
        "scaleway-network-architect",
        "terraform-engine-compatibility",
        "terraform-estate-reconciliation",
        "terraform-execution-governance",
        "terraform-maestro",
        "terraform-module-contract",
        "terraform-plan-blast-radius",
        "terraform-policy-evidence",
        "terraform-state-reliability",
        "terraform-supply-chain-integrity",
        "terraform-verification-strategy"
      ]
    },
    "cloud-security-engineer": {
      "label": "Cloud Security Engineer",
      "description": "IAM/RBAC review, secrets lifecycle, security posture hardening, identity governance, live guards for access and key mutations across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, and Kubernetes.",
      "agents": [
        "alibaba-actiontrail-audit-analyst-agent",
        "alibaba-certificate-manager-issuer-review-agent",
        "alibaba-china-compliance-agent",
        "alibaba-kms-secret-lifecycle-steward-agent",
        "alibaba-live-kms-key-mutation-guard-agent",
        "alibaba-live-oss-bucket-policy-guard-agent",
        "alibaba-live-ram-policy-change-guard-agent",
        "alibaba-oss-data-perimeter-governor-agent",
        "alibaba-ram-iam-review-agent",
        "alibaba-security-center-hardening-agent",
        "alibaba-waf-security-review-agent",
        "aws-bedrock-agent-security-governor-agent",
        "aws-compliance-evidence-mapper-agent",
        "aws-iam-least-privilege-review-agent",
        "aws-kms-secrets-lifecycle-steward-agent",
        "aws-s3-data-perimeter-governor-agent",
        "aws-security-posture-hardening-agent",
        "aws-waf-security-review-agent",
        "azure-entra-id-specialist-agent",
        "azure-governance-policy-guardrails-agent",
        "azure-identity-governance-review-agent",
        "azure-key-vault-secret-lifecycle-auditor-agent",
        "azure-live-entra-role-assignment-guard-agent",
        "azure-live-keyvault-rotation-purge-guard-agent",
        "azure-live-pim-jit-activation-guard-agent",
        "azure-rbac-review-agent",
        "azure-role-selector-agent",
        "azure-security-posture-hardening-agent",
        "azure-waf-security-review-agent",
        "contabo-security-hardening-agent",
        "gcp-certificate-manager-issuer-review-agent",
        "gcp-cloud-auth-advisor-agent",
        "gcp-compliance-assured-workloads-agent",
        "gcp-gcs-data-perimeter-governor-agent",
        "gcp-iam-least-privilege-review-agent",
        "gcp-live-bigquery-dataset-deletion-guard-agent",
        "gcp-live-iam-policy-change-guard-agent",
        "gcp-live-kms-key-destruction-guard-agent",
        "gcp-secret-kms-lifecycle-steward-agent",
        "gcp-security-posture-hardening-agent",
        "gcp-vpc-service-controls-architect-agent",
        "gcp-waf-security-review-agent",
        "huawei-certificate-manager-issuer-review-agent",
        "huawei-compliance-sovereignty-agent",
        "huawei-dew-kms-lifecycle-steward-agent",
        "huawei-iam-least-privilege-review-agent",
        "huawei-live-iam-policy-change-guard-agent",
        "huawei-live-kms-key-destruction-guard-agent",
        "huawei-live-obs-bucket-policy-guard-agent",
        "huawei-obs-data-perimeter-governor-agent",
        "huawei-secmaster-security-operations-agent",
        "huawei-waf-security-review-agent",
        "ionos-security-compliance-reviewer-agent",
        "kubernetes-live-rbac-mutation-guard-agent",
        "kubernetes-psa-review-agent",
        "kubernetes-rbac-review-agent",
        "kubernetes-workload-identity-review-agent",
        "kyverno-policy-review-agent",
        "nvidia-gpu-operator-kubernetes-hardening-agent",
        "nvidia-model-promotion-gatekeeper-agent",
        "nvidia-ngc-nim-supply-chain-governor-agent",
        "oci-cloud-guard-responder-agent",
        "oci-identity-access-governor-agent",
        "oci-live-iam-policy-compartment-guard-agent",
        "oci-live-vault-key-destruction-guard-agent",
        "oci-security-compliance-reviewer-agent",
        "oci-waf-security-review-agent",
        "ovhcloud-iam-policy-review-agent",
        "ovhcloud-live-kms-key-destruction-guard-agent",
        "scaleway-iam-policy-review-agent",
        "terraform-execution-governance-agent",
        "terraform-policy-evidence-agent",
        "terraform-state-reliability-agent",
        "terraform-supply-chain-integrity-agent"
      ],
      "skills": [
        "alibaba-actiontrail-audit-analyst",
        "alibaba-certificate-manager-issuer-review",
        "alibaba-china-compliance",
        "alibaba-kms-secret-lifecycle-steward",
        "alibaba-live-kms-key-mutation-guard",
        "alibaba-live-oss-bucket-policy-guard",
        "alibaba-live-ram-policy-change-guard",
        "alibaba-oss-data-perimeter-governor",
        "alibaba-ram-iam-review",
        "alibaba-security-center-hardening",
        "alibaba-waf-security-review",
        "aws-bedrock-agent-security-governor",
        "aws-compliance-evidence-mapper",
        "aws-iam-least-privilege-review",
        "aws-kms-secrets-lifecycle-steward",
        "aws-s3-data-perimeter-governor",
        "aws-security-posture-hardening",
        "aws-waf-security-review",
        "azure-entra-id-specialist",
        "azure-governance-policy-guardrails",
        "azure-identity-governance-review",
        "azure-key-vault-secret-lifecycle-auditor",
        "azure-live-entra-role-assignment-guard",
        "azure-live-keyvault-rotation-purge-guard",
        "azure-live-pim-jit-activation-guard",
        "azure-rbac-review",
        "azure-role-selector",
        "azure-security-posture-hardening",
        "azure-waf-security-review",
        "contabo-security-hardening",
        "gcp-certificate-manager-issuer-review",
        "gcp-cloud-auth-advisor",
        "gcp-compliance-assured-workloads",
        "gcp-gcs-data-perimeter-governor",
        "gcp-iam-least-privilege-review",
        "gcp-live-bigquery-dataset-deletion-guard",
        "gcp-live-iam-policy-change-guard",
        "gcp-live-kms-key-destruction-guard",
        "gcp-secret-kms-lifecycle-steward",
        "gcp-security-posture-hardening",
        "gcp-vpc-service-controls-architect",
        "gcp-waf-security-review",
        "huawei-certificate-manager-issuer-review",
        "huawei-compliance-sovereignty",
        "huawei-dew-kms-lifecycle-steward",
        "huawei-iam-least-privilege-review",
        "huawei-live-iam-policy-change-guard",
        "huawei-live-kms-key-destruction-guard",
        "huawei-live-obs-bucket-policy-guard",
        "huawei-obs-data-perimeter-governor",
        "huawei-secmaster-security-operations",
        "huawei-waf-security-review",
        "ionos-security-compliance-reviewer",
        "kubernetes-live-rbac-mutation-guard",
        "kubernetes-pod-security-admission-review",
        "kubernetes-rbac-review",
        "kubernetes-workload-identity-review",
        "kyverno-policy-review",
        "nvidia-gpu-operator-kubernetes-hardening",
        "nvidia-model-promotion-gatekeeper",
        "nvidia-ngc-nim-supply-chain-governor",
        "oci-cloud-guard-responder",
        "oci-identity-access-governor",
        "oci-live-iam-policy-compartment-guard",
        "oci-live-vault-key-destruction-guard",
        "oci-security-compliance-reviewer",
        "oci-waf-security-review",
        "ovhcloud-iam-policy-review",
        "ovhcloud-live-kms-key-destruction-guard",
        "scaleway-iam-policy-review",
        "terraform-execution-governance",
        "terraform-policy-evidence",
        "terraform-state-reliability",
        "terraform-supply-chain-integrity"
      ]
    },
    "cloud-solutions-architect": {
      "label": "Cloud Solutions Architect",
      "description": "Solution architects, migration cutover planners, resilience and BCDR reviewers, event-driven architects, AI/generative developers, and multi-cloud designers across AWS, Azure, OCI, GCP, Alibaba Cloud, and Huawei Cloud.",
      "agents": [
        "alibaba-change-impact-advisor-agent",
        "alibaba-event-driven-architecture-review-agent",
        "alibaba-maestro-agent",
        "alibaba-migration-architect-agent",
        "alibaba-resilience-bcdr-review-agent",
        "alibaba-solution-architect-agent",
        "aws-agentcore-agent",
        "aws-api-edge-delivery-review-agent",
        "aws-change-impact-advisor-agent",
        "aws-event-driven-architecture-review-agent",
        "aws-generative-ai-developer-agent",
        "aws-maestro-agent",
        "aws-migration-cutover-architect-agent",
        "aws-resilience-bcdr-review-agent",
        "aws-solution-architect-agent",
        "azure-ai-foundry-ops-governor-agent",
        "azure-landing-zone-architect-agent",
        "azure-maestro-agent",
        "azure-migrate-landing-zone-cutover-agent",
        "azure-network-topology-review-agent",
        "azure-resilience-bcdr-review-agent",
        "contabo-maestro-agent",
        "gcp-anthos-multicloud-architect-agent",
        "gcp-change-impact-advisor-agent",
        "gcp-event-driven-architecture-review-agent",
        "gcp-maestro-agent",
        "gcp-migration-cutover-architect-agent",
        "gcp-resilience-bcdr-review-agent",
        "gcp-resource-inventory-analyst-agent",
        "gcp-solution-architect-agent",
        "hetzner-maestro-agent",
        "huawei-change-impact-advisor-agent",
        "huawei-event-driven-architecture-review-agent",
        "huawei-maestro-agent",
        "huawei-migration-architect-agent",
        "huawei-resilience-bcdr-review-agent",
        "huawei-solution-architect-agent",
        "ionos-maestro-agent",
        "oci-maestro-agent",
        "oci-migration-cutover-architect-agent",
        "oci-multi-cloud-architect-agent",
        "oci-network-architect-agent",
        "oci-resource-search-inventory-analyst-agent",
        "oci-solution-architect-agent",
        "ovhcloud-maestro-agent",
        "scaleway-maestro-agent",
        "terraform-engine-compatibility-agent",
        "terraform-reviewer"
      ],
      "skills": [
        "alibaba-change-impact-advisor",
        "alibaba-event-driven-architecture-review",
        "alibaba-maestro",
        "alibaba-migration-architect",
        "alibaba-resilience-bcdr-review",
        "alibaba-solution-architect",
        "aws-agentcore",
        "aws-api-edge-delivery-review",
        "aws-change-impact-advisor",
        "aws-event-driven-architecture-review",
        "aws-generative-ai-developer",
        "aws-maestro",
        "aws-migration-cutover-architect",
        "aws-resilience-bcdr-review",
        "aws-solution-architect",
        "azure-ai-foundry-ops-governor",
        "azure-landing-zone-architect",
        "azure-maestro",
        "azure-migrate-landing-zone-cutover",
        "azure-network-topology-review",
        "azure-resilience-bcdr-review",
        "contabo-maestro",
        "gcp-anthos-multicloud-architect",
        "gcp-change-impact-advisor",
        "gcp-event-driven-architecture-review",
        "gcp-maestro",
        "gcp-migration-cutover-architect",
        "gcp-resilience-bcdr-review",
        "gcp-resource-inventory-analyst",
        "gcp-solution-architect",
        "hetzner-maestro",
        "huawei-change-impact-advisor",
        "huawei-event-driven-architecture-review",
        "huawei-maestro",
        "huawei-migration-architect",
        "huawei-resilience-bcdr-review",
        "huawei-solution-architect",
        "ionos-maestro",
        "oci-maestro",
        "oci-migration-cutover-architect",
        "oci-multi-cloud-architect",
        "oci-network-architect",
        "oci-resource-search-inventory-analyst",
        "oci-solution-architect",
        "ovhcloud-maestro",
        "scaleway-maestro",
        "terraform-engine-compatibility",
        "terraform-module-contract"
      ]
    },
    "dotnet-application-review-engineer": {
      "label": ".NET Application Review Engineer",
      "description": "Static review of .NET applications: C# and runtime correctness, ASP.NET Core API architecture, authentication and authorization, EF Core data access, test quality, CI and NuGet supply-chain integrity, performance and Native AOT readiness, in-application OpenTelemetry wiring, and .NET Aspire cloud-native posture. A dotnet-maestro router plus nine static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system.",
      "agents": [
        "dotnet-maestro-agent",
        "dotnet-csharp-runtime-review-agent",
        "dotnet-aspnetcore-api-review-agent",
        "dotnet-aspnetcore-identity-authz-review-agent",
        "dotnet-efcore-data-access-review-agent",
        "dotnet-testing-quality-review-agent",
        "dotnet-supply-chain-review-agent",
        "dotnet-performance-aot-review-agent",
        "dotnet-observability-otel-review-agent",
        "dotnet-aspire-cloud-native-review-agent"
      ],
      "skills": [
        "dotnet-maestro",
        "dotnet-csharp-runtime-review",
        "dotnet-aspnetcore-api-review",
        "dotnet-aspnetcore-identity-authz-review",
        "dotnet-efcore-data-access-review",
        "dotnet-testing-quality-review",
        "dotnet-supply-chain-review",
        "dotnet-performance-aot-review",
        "dotnet-observability-otel-review",
        "dotnet-aspire-cloud-native-review"
      ]
    },
    "java-application-review-engineer": {
      "label": "Java Application Review Engineer",
      "description": "Adversarial, evidence-first static review of Java/JVM applications: JDK-estate lifecycle and upgrade risk, virtual-thread and concurrency correctness, JVM performance and GC, containerized-JVM sizing, Spring/Quarkus/Micronaut production readiness, Spring Security authorization and Actuator exposure, untrusted-deserialization/parser security, JPA/Hibernate data-access performance, transaction and cross-resource consistency, schema-migration deploy safety, Kafka delivery reliability, resilience-pattern composition, JVM test architecture, and the application-server license-exit portfolio decision. A java-maestro router plus static-review specialists; every agent reads source and sanitized configuration only and never builds, runs, invokes a JDK, opens a database or broker connection, or contacts a live system.",
      "agents": [
        "java-maestro-agent",
        "java-application-server-exit-agent",
        "java-concurrency-and-virtual-thread-agent",
        "java-container-and-kubernetes-readiness-agent",
        "java-database-migration-safety-agent",
        "java-deserialization-and-parser-security-agent",
        "java-framework-production-readiness-agent",
        "java-jdk-lifecycle-and-upgrade-agent",
        "java-jpa-hibernate-performance-agent",
        "java-jvm-performance-and-gc-agent",
        "java-kafka-reliability-agent",
        "java-resilience-pattern-agent",
        "java-spring-security-agent",
        "java-test-architecture-agent",
        "java-transaction-and-consistency-agent"
      ],
      "skills": [
        "java-maestro",
        "java-application-server-exit",
        "java-concurrency-and-virtual-thread",
        "java-container-and-kubernetes-readiness",
        "java-database-migration-safety",
        "java-deserialization-and-parser-security",
        "java-framework-production-readiness",
        "java-jdk-lifecycle-and-upgrade",
        "java-jpa-hibernate-performance",
        "java-jvm-performance-and-gc",
        "java-kafka-reliability",
        "java-resilience-pattern",
        "java-spring-security",
        "java-test-architecture",
        "java-transaction-and-consistency"
      ]
    },
    "kubernetes-admission-security-engineer": {
      "label": "Kubernetes Admission Security Engineer",
      "description": "API and image admission control: Kyverno, native ValidatingAdmissionPolicy (CEL), Pod Security Admission, image signature verification, RBAC privilege-escalation review, and live admission policy mutation guards. Anchors the cluster's deny-by-default story.",
      "agents": [
        "kubernetes-live-admission-policy-guard-agent",
        "kubernetes-live-rbac-mutation-guard-agent",
        "kubernetes-maestro-agent",
        "kubernetes-psa-review-agent",
        "kubernetes-rbac-review-agent",
        "kyverno-policy-review-agent"
      ],
      "skills": [
        "kubernetes-live-rbac-mutation-guard",
        "kubernetes-maestro",
        "kubernetes-pod-security-admission-review",
        "kubernetes-rbac-review",
        "kyverno-policy-review"
      ]
    },
    "kubernetes-application-platform-engineer": {
      "label": "Kubernetes Application Platform Engineer",
      "description": "Golden paths and GitOps delivery: Argo CD Application/AppProject/ApplicationSet review, sync impersonation, RBAC, sync windows, and Argo CD Agent multi-cluster topologies. Owns the path from Git to running workload with bounded blast radius.",
      "agents": [
        "argocd-gitops-review-agent",
        "kubernetes-live-argocd-sync-guard-agent",
        "kubernetes-maestro-agent"
      ],
      "skills": [
        "argocd-gitops-review",
        "kubernetes-maestro",
        "kubernetes-pod-security-admission-review"
      ]
    },
    "kubernetes-developer-platform-engineer": {
      "label": "Kubernetes Developer Platform Engineer",
      "description": "Internal developer platform and GitOps delivery: Backstage Scaffolder template security review, Argo CD and Argo Rollouts progressive delivery, FluxCD Kustomization and HelmRelease GitOps review, and the kubernetes-maestro router for cross-domain dispatch.",
      "agents": [
        "argocd-gitops-review-agent",
        "argo-rollouts-progressive-delivery-review-agent",
        "backstage-scaffolder-template-review-agent",
        "fluxcd-kustomization-helmrelease-review-agent",
        "kubernetes-live-argocd-sync-guard-agent",
        "kubernetes-maestro-agent"
      ],
      "skills": [
        "argocd-gitops-review",
        "argo-rollouts-progressive-delivery-review",
        "backstage-scaffolder-template-review",
        "fluxcd-kustomization-helmrelease-review",
        "kubernetes-maestro"
      ]
    },
    "kubernetes-disaster-recovery-engineer": {
      "label": "Kubernetes Disaster Recovery Engineer",
      "description": "Backup, restore, and business continuity: Velero backup schedule review, live-guarded restore operations with pre-restore safety checklist, PV restore posture, existingResourcePolicy risk, and cross-cluster restore scope governance.",
      "agents": [
        "kubernetes-live-velero-restore-guard-agent",
        "kubernetes-maestro-agent"
      ],
      "skills": [
        "kubernetes-maestro",
        "velero-backup-restore-guard"
      ]
    },
    "kubernetes-network-engineer": {
      "label": "Kubernetes Network Engineer",
      "description": "Cluster network architecture and policy: CNI selection and dataplane (kube-proxy mode, IPAM, Pod and Service CIDR sizing, MTU, encapsulation, dual-stack), Service surface (EndpointSlices, internalTrafficPolicy, externalTrafficPolicy, topology-aware routing), Ingress to Gateway API migration, CoreDNS and NodeLocal DNSCache, multi-cluster topology (ClusterMesh, Submariner, MCS-API), egress topology and connectivity troubleshooting, plus Cilium NetworkPolicy and CiliumClusterwideNetworkPolicy review, CiliumEgressGatewayPolicy, Hubble flow observability, and Istio mesh in both sidecar and ambient modes including the L7-AuthorizationPolicy-without-waypoint trap.",
      "agents": [
        "cilium-network-policy-review-agent",
        "istio-ambient-mesh-review-agent",
        "kubernetes-live-mesh-policy-guard-agent",
        "kubernetes-live-network-architecture-mutation-guard-agent",
        "kubernetes-live-network-policy-guard-agent",
        "kubernetes-maestro-agent",
        "kubernetes-network-architecture-review-agent"
      ],
      "skills": [
        "cilium-network-policy-review",
        "istio-ambient-mesh-review",
        "kubernetes-live-network-architecture-mutation-guard",
        "kubernetes-maestro",
        "kubernetes-network-architecture-review"
      ]
    },
    "kubernetes-observability-engineer": {
      "label": "Kubernetes Observability Engineer",
      "description": "Metrics, alerting, cardinality, cost attribution, and telemetry pipeline: Prometheus alerting and recording rules, label cardinality, Alertmanager routing, OpenTelemetry Collector pipeline safety, and Kubecost chargeback and allocation model review.",
      "agents": [
        "kubecost-chargeback-allocation-review-agent",
        "kubernetes-maestro-agent",
        "opentelemetry-collector-config-review-agent",
        "prometheus-alerting-cardinality-review-agent"
      ],
      "skills": [
        "kubecost-chargeback-allocation-review",
        "kubernetes-maestro",
        "opentelemetry-collector-config-review",
        "prometheus-alerting-cardinality-review"
      ]
    },
    "kubernetes-pki-engineer": {
      "label": "Kubernetes PKI Engineer",
      "description": "Certificate lifecycle, CA trust hierarchy, and secrets management: cert-manager Issuer/ClusterIssuer scope, CertificateRequestPolicy auto-approval gap, trust-manager bundle blast radius, External Secrets Operator scope and auth, and cloud-backed CA integration via AWS Private CA, Azure Key Vault, and OCI Certificates.",
      "agents": [
        "aws-private-ca-issuer-review-agent",
        "azure-keyvault-certificate-issuer-review-agent",
        "cert-manager-issuer-trust-review-agent",
        "external-secrets-operator-review-agent",
        "kubernetes-maestro-agent",
        "oci-certificates-issuer-review-agent"
      ],
      "skills": [
        "aws-private-ca-issuer-review",
        "azure-keyvault-certificate-issuer-review",
        "cert-manager-issuer-trust-review",
        "external-secrets-operator-review",
        "kubernetes-maestro",
        "oci-certificates-issuer-review"
      ]
    },
    "kubernetes-runtime-security-engineer": {
      "label": "Kubernetes Runtime Security Engineer",
      "description": "Runtime defense and workload identity: RBAC privilege-escalation verbs, ServiceAccount token projection, AWS IRSA, Azure Workload Identity, GCP Workload Identity Federation, and the OIDC trust-policy review that ties pods to cloud IAM without long-lived static credentials.",
      "agents": [
        "falco-runtime-threat-rules-review-agent",
        "kubernetes-live-rbac-mutation-guard-agent",
        "kubernetes-maestro-agent",
        "kubernetes-rbac-review-agent",
        "kubernetes-workload-identity-review-agent",
        "sigstore-cosign-supply-chain-review-agent"
      ],
      "skills": [
        "falco-runtime-threat-rules-review",
        "kubernetes-live-rbac-mutation-guard",
        "kubernetes-maestro",
        "kubernetes-pod-security-admission-review",
        "kubernetes-rbac-review",
        "kubernetes-workload-identity-review",
        "sigstore-cosign-supply-chain-review"
      ]
    },
    "kubernetes-supply-chain-security-engineer": {
      "label": "Kubernetes Supply Chain Security Engineer",
      "description": "Software supply chain integrity: Sigstore/Cosign image signing and SBOM attestation, Falco runtime threat rules, Kyverno admission policy for enforcement, Pod Security Admission hardening, and workload pod-spec review for privilege and capabilities.",
      "agents": [
        "falco-runtime-threat-rules-review-agent",
        "kubernetes-live-admission-policy-guard-agent",
        "kubernetes-maestro-agent",
        "kubernetes-pod-spec-review-agent",
        "kubernetes-psa-review-agent",
        "kyverno-policy-review-agent",
        "sigstore-cosign-supply-chain-review-agent"
      ],
      "skills": [
        "falco-runtime-threat-rules-review",
        "kubernetes-maestro",
        "kubernetes-pod-security-admission-review",
        "kubernetes-pod-spec-review",
        "kyverno-policy-review",
        "sigstore-cosign-supply-chain-review"
      ]
    },
    "legal-hr-risk-reviewer": {
      "label": "Legal & HR Risk Reviewer",
      "description": "Adversarial, evidence-grounded triage of legal and HR/employment risk for an enterprise legal, compliance, and People function — contract, privacy, regulatory, litigation, and policy-exception review, plus terminations, discipline, accommodations, wage/hour, discrimination, harassment, retaliation, and layoff risk. Surfaces risks, evidence gaps, decision options, and escalation paths for qualified counsel across the US, EU, UK, Singapore, and Australia. Static review only; does not give legal or HR advice or form an attorney-client relationship.",
      "agents": [
        "legal-counsel-review-agent",
        "hr-risk-triage-review-agent",
        "legal-maestro-agent",
        "hr-maestro-agent",
        "legal-contract-review-agent",
        "legal-privacy-data-protection-agent",
        "legal-employment-law-risk-agent",
        "legal-litigation-discovery-hold-agent",
        "legal-regulatory-compliance-agent",
        "legal-ip-open-source-agent",
        "legal-vendor-procurement-risk-agent",
        "legal-ethics-investigations-agent",
        "legal-policy-governance-agent",
        "legal-public-disclosure-agent",
        "legal-knowledge-management-agent",
        "hr-employee-relations-agent",
        "hr-workplace-investigations-agent",
        "hr-performance-management-agent",
        "hr-termination-readiness-agent",
        "hr-leave-accommodation-agent",
        "hr-recruiting-selection-agent",
        "hr-compensation-equity-agent",
        "hr-benefits-payroll-agent",
        "hr-workforce-planning-rif-agent",
        "hr-learning-policy-agent",
        "hr-analytics-people-data-agent",
        "hr-culture-dei-agent",
        "hr-hris-process-controls-agent"
      ],
      "skills": [
        "legal-counsel-review",
        "hr-risk-triage-review",
        "legal-hr-case-capsule",
        "legal-hr-routing-protocol",
        "legal-hr-risk-taxonomy"
      ]
    },
    "marketing-governance-reviewer": {
      "label": "Marketing Governance Reviewer",
      "description": "Static, read-only review of the marketing technology compliance and security surface: consent and data-collection posture (GDPR/ePrivacy/CCPA), advertising-pixel personal-data leakage to ad networks, and least-privilege access governance across the martech stack.",
      "agents": [
        "marketing-maestro-agent",
        "marketing-consent-data-collection-review-agent",
        "marketing-pixel-data-leakage-review-agent",
        "martech-access-governance-review-agent",
        "marketing-gpc-signal-honoring-review-agent",
        "email-sender-authentication-review-agent",
        "programmatic-supply-chain-integrity-review-agent",
        "ai-advertising-targeting-fairness-review-agent",
        "eu-ai-act-marketing-system-review-agent",
        "lookalike-audience-upload-compliance-review-agent",
        "marketing-email-list-retention-review-agent",
        "influencer-disclosure-compliance-review-agent",
        "marketing-conversion-flow-dark-pattern-review-agent",
        "analytics-data-minimization-review-agent"
      ],
      "skills": [
        "marketing-maestro",
        "marketing-consent-data-collection-review",
        "marketing-pixel-data-leakage-review",
        "martech-access-governance-review",
        "marketing-gpc-signal-honoring-review",
        "email-sender-authentication-review",
        "programmatic-supply-chain-integrity-review",
        "ai-advertising-targeting-fairness-review",
        "eu-ai-act-marketing-system-review",
        "lookalike-audience-upload-compliance-review",
        "marketing-email-list-retention-review",
        "influencer-disclosure-compliance-review",
        "marketing-conversion-flow-dark-pattern-review",
        "analytics-data-minimization-review"
      ]
    },
    "netsuite-platform-advisor": {
      "label": "Oracle NetSuite Platform Advisor",
      "description": "Enterprise NetSuite architecture, operations, compliance, and implementation — platform configuration, SuiteScript development, SDF deployment, integrations (REST/SOAP), authentication (OAuth2/TBA), financial controls, audit and SOX compliance, multi-subsidiary management, and least-privilege identity governance. Advisory only — never executes live mutations without separate authorization.",
      "agents": [
        "netsuite-administrator-agent",
        "netsuite-ai-connector-mcp-agent",
        "netsuite-ai-foundations-agent",
        "netsuite-application-developer-agent",
        "netsuite-audit-controls-sox-agent",
        "netsuite-bi-reporting-agent",
        "netsuite-data-governance-privacy-agent",
        "netsuite-enterprise-architecture-agent",
        "netsuite-erp-consultant-agent",
        "netsuite-evidence-release-drift-agent",
        "netsuite-financial-foundations-agent",
        "netsuite-identity-access-role-permission-agent",
        "netsuite-integration-migration-agent",
        "netsuite-live-org-mutation-guard-agent",
        "netsuite-maestro-agent",
        "netsuite-oneworld-multisubsidiary-agent",
        "netsuite-sandbox-nonproduction-governance-agent",
        "netsuite-saved-searches-workbook-agent",
        "netsuite-sdf-devops-release-agent",
        "netsuite-sso-oauth-tba-agent",
        "netsuite-suitefoundation-agent",
        "netsuite-suitecloud-developer-agent",
        "netsuite-suitescript-secure-code-review-agent",
        "netsuite-suiteflow-automation-agent",
        "netsuite-web-services-integration-agent"
      ],
      "skills": [
        "netsuite-administrator-skill",
        "netsuite-ai-connector-mcp-skill",
        "netsuite-ai-foundations-skill",
        "netsuite-application-developer-skill",
        "netsuite-audit-controls-sox-skill",
        "netsuite-bi-reporting-skill",
        "netsuite-data-governance-privacy-skill",
        "netsuite-enterprise-architecture-skill",
        "netsuite-erp-consultant-skill",
        "netsuite-evidence-release-drift-skill",
        "netsuite-financial-foundations-skill",
        "netsuite-identity-access-role-permission-skill",
        "netsuite-integration-migration-skill",
        "netsuite-live-operation-safety-skill",
        "netsuite-oneworld-multisubsidiary-skill",
        "netsuite-routing-protocol",
        "netsuite-sandbox-nonproduction-governance-skill",
        "netsuite-saved-searches-workbook-skill",
        "netsuite-sdf-devops-release-skill",
        "netsuite-sso-oauth-tba-skill",
        "netsuite-suitecloud-developer-skill",
        "netsuite-suiteflow-automation-skill",
        "netsuite-suitefoundation-skill",
        "netsuite-suitescript-secure-code-review-skill",
        "netsuite-web-services-integration-skill"
      ]
    },
    "qa-test-quality-engineer": {
      "label": "QA / Test Quality Engineer",
      "description": "Static review of test suites, automation workflows, CI test pipelines, Helm charts, Kubernetes manifests, and AI/LLM evaluation setups for reliability, safety, and meaning — Playwright E2E flakiness and selector brittleness, framework-agnostic flaky-test triage, coverage-theater detection, CI test gating and sharding, attested Playwright suite execution, IEC 61131-3 PLC control-logic safety review, RPA workflow resilience review, Helm chart security and testability, Kubernetes manifest policy compliance, and LLM/AI pipeline evaluation quality grounded in DeepEval metrics and ISTQB principles.",
      "agents": [
        "playwright-e2e-suite-review-agent",
        "test-flakiness-triage-agent",
        "test-coverage-quality-review-agent",
        "ci-test-pipeline-review-agent",
        "playwright-e2e-execution-run-agent",
        "plc-control-logic-safety-review-agent",
        "rpa-workflow-resilience-review-agent",
        "helm-chart-quality-review-agent",
        "kubernetes-manifest-quality-review-agent",
        "llm-ai-pipeline-test-review-agent",
        "revenue-critical-journey-integrity-agent"
      ],
      "skills": [
        "playwright-e2e-suite-review",
        "test-flakiness-triage",
        "test-coverage-quality-review",
        "ci-test-pipeline-review",
        "playwright-e2e-execution-run",
        "plc-control-logic-safety-review",
        "rpa-workflow-resilience-review",
        "helm-chart-quality-review",
        "kubernetes-manifest-quality-review",
        "llm-ai-pipeline-test-review",
        "revenue-critical-journey-integrity-review"
      ]
    },
    "salesforce-portfolio-architect": {
      "label": "Salesforce Portfolio Architect",
      "description": "Salesforce platform architecture, admin governance, security, integration, revenue ops, service ops, marketing ops, Agentforce/AI risk, and compliance review across the Sales/Service/Experience/Marketing/Industry cloud surface. Static review only — never mutates a Salesforce org. Wave 1 ships canonical AGENT.md + metadata.json only; per-harness adapter files are deferred to Wave 2, so the catalog entries declare harnesses: [\"other\"] until adapters land.",
      "agents": [
        "salesforce-maestro-agent",
        "salesforce-platform-admin-review-agent",
        "salesforce-business-analyst-agent",
        "salesforce-app-builder-automation-agent",
        "salesforce-development-agent",
        "salesforce-devops-release-agent",
        "salesforce-security-identity-access-agent",
        "salesforce-data-architecture-agent",
        "salesforce-integration-mulesoft-agent",
        "salesforce-sales-cloud-revenue-agent",
        "salesforce-service-field-service-agent",
        "salesforce-experience-cloud-agent",
        "salesforce-marketing-cloud-agent",
        "salesforce-agentforce-ai-agent",
        "salesforce-analytics-tableau-agent",
        "salesforce-slack-collaboration-agent",
        "salesforce-industry-cloud-agent",
        "salesforce-enterprise-architect-agent",
        "salesforce-compliance-privacy-agent",
        "salesforce-live-guard-agent",
        "salesforce-adaptive-access-agent",
        "salesforce-certificate-lifecycle-agent",
        "salesforce-change-impact-analyst-agent",
        "salesforce-code-analyzer-orchestrator-agent",
        "salesforce-continuous-verification-agent",
        "salesforce-hyperforce-security-agent",
        "salesforce-network-policy-architect-agent",
        "salesforce-sandbox-governance-agent",
        "salesforce-sandbox-isolation-agent",
        "salesforce-session-governance-agent"
      ],
      "skills": [
        "salesforce-routing-protocol",
        "salesforce-case-capsule",
        "salesforce-risk-taxonomy",
        "salesforce-live-change-approval-protocol",
        "salesforce-data-exposure-escalation-protocol",
        "salesforce-org-assessment-skill",
        "salesforce-metadata-review-skill",
        "salesforce-permission-model-review-skill",
        "salesforce-flow-automation-review-skill",
        "salesforce-apex-lwc-code-review-skill",
        "salesforce-release-readiness-skill",
        "salesforce-integration-review-skill",
        "salesforce-marketing-consent-review-skill",
        "salesforce-agentforce-risk-review-skill",
        "salesforce-devsecops-pipeline-skill",
        "salesforce-infrastructure-audit-skill",
        "salesforce-zero-trust-maturity-skill",
        "salesforce-soql-explorer-skill",
        "salesforce-metadata-fetcher-skill",
        "salesforce-agentforce-stdm-observer-skill",
        "salesforce-soql-generator-skill",
        "salesforce-deployment-validator-skill",
        "salesforce-apex-generator-skill",
        "salesforce-apex-test-generator-skill",
        "salesforce-apex-test-runner-skill",
        "salesforce-apex-log-analyzer-skill",
        "salesforce-validation-rule-writer-skill",
        "salesforce-field-mapping-skill",
        "salesforce-flow-debugger-skill",
        "salesforce-bulk-data-ops-skill"
      ]
    },
    "sap-transformation-operations": {
      "label": "SAP Transformation & Platform Operations",
      "description": "SAP S/4HANA transformation, BTP platform, and operations board with strict tier separation. Advisory clean-core debt review (custom-code/modification debt vs released APIs and extensibility), read-only live landscape discovery (BTP subaccounts, entitlements, destinations, integration flows — inspection only), and guarded-mutating transport import under named approval, dry-run/diff, blast-radius, SoD, rollback, and post-change verification. Routing via sap-maestro with a non-negotiable live-guard gate that never auto-dispatches mutating agents.",
      "agents": [
        "sap-maestro-agent",
        "sap-clean-core-debt-reviewer-agent",
        "sap-live-readonly-landscape-discovery-agent",
        "sap-guarded-transport-import-operator-agent",
        "sap-btp-account-entitlement-governance-reviewer-agent",
        "sap-integration-suite-reviewer-agent",
        "sap-security-iam-grc-sod-reviewer-agent",
        "sap-cap-architecture-reviewer-agent",
        "sap-abap-cloud-rap-reviewer-agent",
        "sap-ai-core-genai-hub-governance-reviewer-agent",
        "sap-datasphere-data-product-architect-agent",
        "sap-analytics-cloud-planning-governance-agent",
        "sap-hana-cloud-performance-cost-agent",
        "sap-s4hana-transformation-architect-agent",
        "sap-custom-code-remediation-reviewer-agent",
        "sap-data-migration-cutover-readiness-agent",
        "sap-finance-fico-controls-agent",
        "sap-mdg-master-data-quality-agent",
        "sap-signavio-process-mining-value-agent",
        "sap-procurement-ariba-value-leakage-agent",
        "sap-supply-chain-ibp-resilience-agent",
        "sap-order-to-cash-agent",
        "sap-treasury-cash-risk-agent",
        "sap-ewm-tm-logistics-execution-agent",
        "sap-manufacturing-execution-risk-agent",
        "sap-successfactors-hr-process-risk-agent",
        "sap-joule-governance-adoption-agent",
        "sap-cloud-alm-sre-incident-agent",
        "sap-transformation-portfolio-triage-agent",
        "sap-rise-sla-vendor-risk-agent",
        "sap-license-btp-consumption-finops-agent",
        "sap-testing-quality-gate-agent",
        "sap-release-change-collision-agent",
        "sap-hypercare-incident-commander-agent",
        "sap-live-readonly-identity-trust-discovery-agent",
        "sap-fiori-ui5-ux-reviewer-agent",
        "sap-audit-evidence-packager-agent",
        "sap-role-assignment-guarded-operator-agent",
        "sap-integration-flow-guarded-operator-agent",
        "sap-btp-entitlement-guarded-operator-agent"
      ],
      "skills": [
        "sap-maestro",
        "sap-clean-core-debt-review",
        "sap-live-readonly-landscape-discovery",
        "sap-guarded-transport-import",
        "sap-btp-governance-review",
        "sap-integration-suite-review",
        "sap-security-iam-grc-sod-review",
        "sap-cap-architecture-review",
        "sap-abap-cloud-rap-review",
        "sap-ai-core-generative-ai-hub-governance",
        "sap-datasphere-data-product-architecture",
        "sap-analytics-cloud-planning-governance",
        "sap-hana-cloud-performance-cost",
        "sap-s4hana-transformation-architecture-review",
        "sap-custom-code-remediation-review",
        "sap-data-migration-cutover-readiness",
        "sap-finance-fico-controls-review",
        "sap-mdg-master-data-quality-review",
        "sap-signavio-process-mining-value",
        "sap-procurement-ariba-value-leakage-review",
        "sap-supply-chain-ibp-resilience-review",
        "sap-order-to-cash-review",
        "sap-treasury-cash-risk-review",
        "sap-ewm-tm-logistics-execution-review",
        "sap-manufacturing-execution-risk-review",
        "sap-successfactors-hr-process-risk-review",
        "sap-joule-governance-adoption-review",
        "sap-cloud-alm-sre-incident-review",
        "sap-transformation-portfolio-triage-review",
        "sap-rise-sla-vendor-risk-review",
        "sap-license-btp-consumption-finops-review",
        "sap-testing-quality-gate-review",
        "sap-release-change-collision-review",
        "sap-hypercare-incident-commander-review",
        "sap-live-readonly-identity-trust-discovery",
        "sap-fiori-ui5-ux-review",
        "sap-audit-evidence-packaging",
        "sap-guarded-role-assignment",
        "sap-guarded-integration-flow-change",
        "sap-guarded-btp-entitlement-change",
        "sap-security-hr-legal-protocol",
        "sap-data-privacy-analytics-ai-protocol",
        "sap-release-cutover-finance-controls-protocol",
        "sap-procurement-license-finops-vendor-protocol",
        "sap-integration-platform-businessops-protocol",
        "sap-ai-governance-security-architecture-protocol"
      ]
    },
    "microsoft-365-d365-platform-advisor": {
      "label": "Microsoft 365 & Dynamics 365 Platform Advisor",
      "description": "Static-review advisory across the Microsoft cloud business surface: Microsoft 365 governance, identity (Entra/Conditional Access), security and compliance (Purview, Defender XDR), collaboration, Microsoft 365 Copilot readiness, Power Platform governance, and Dynamics 365 ERP/CRM. Routes through the Microsoft maestro layer to M365, D365, Power Platform, and Copilot specialists. Advisory only — never mutates a tenant or production environment; production-impacting actions are live-guard gated and require explicit human approval.",
      "agents": [
        "microsoft-maestro-agent",
        "m365-maestro-agent",
        "d365-maestro-agent",
        "power-platform-maestro-agent",
        "copilot-governance-maestro-agent",
        "m365-copilot-readiness-governance-agent",
        "m365-identity-zero-trust-agent",
        "power-platform-governance-dataverse-security-agent",
        "d365-success-by-design-governance-agent",
        "d365-security-sod-governance-agent",
        "d365-data-migration-cutover-agent",
        "d365-finance-close-to-report-agent",
        "d365-supply-chain-plan-to-produce-agent",
        "d365-sales-revenue-operations-agent",
        "d365-field-service-to-cash-agent",
        "d365-customer-service-contact-center-agent",
        "microsoft-business-impact-value-realization-agent",
        "power-platform-alm-pipelines-agent",
        "copilot-studio-agent-governance-alm-agent",
        "power-automate-automation-risk-review-agent",
        "fabric-power-bi-business-insights-governance-agent",
        "m365-purview-data-security-compliance-agent",
        "m365-defender-xdr-security-operations-agent",
        "m365-intune-endpoint-management-agent",
        "m365-teams-collaboration-governance-agent",
        "m365-exchange-sharepoint-information-governance-agent",
        "d365-customer-insights-journeys-agent",
        "d365-fno-developer-extension-agent",
        "d365-integration-dual-write-agent",
        "m365-tenant-governance-agent",
        "m365-backup-bcdr-data-resilience-agent",
        "m365-licensing-ea-optimization-agent",
        "d365-project-operations-agent",
        "d365-commerce-agent",
        "fabric-data-engineering-agent",
        "fabric-analytics-engineering-agent",
        "m365-live-identity-posture-guard-agent",
        "d365-live-security-role-guard-agent",
        "d365-live-record-field-update-guard-agent",
        "m365-live-sensitivity-label-apply-guard-agent"
      ],
      "skills": [
        "microsoft-maestro",
        "m365-maestro",
        "d365-maestro",
        "power-platform-maestro",
        "copilot-governance-maestro",
        "m365-copilot-readiness-governance",
        "m365-identity-zero-trust",
        "power-platform-governance-dataverse-security",
        "d365-success-by-design-governance",
        "d365-security-sod-governance",
        "d365-data-migration-cutover",
        "d365-finance-close-to-report",
        "d365-supply-chain-plan-to-produce",
        "d365-sales-revenue-operations",
        "d365-field-service-to-cash",
        "d365-customer-service-contact-center",
        "microsoft-business-impact-value-realization",
        "power-platform-alm-pipelines",
        "copilot-studio-agent-governance-alm",
        "power-automate-automation-risk-review",
        "fabric-power-bi-business-insights-governance",
        "m365-purview-data-security-compliance",
        "m365-defender-xdr-security-operations",
        "m365-intune-endpoint-management",
        "m365-teams-collaboration-governance",
        "m365-exchange-sharepoint-information-governance",
        "d365-customer-insights-journeys",
        "d365-fno-developer-extension",
        "d365-integration-dual-write",
        "m365-tenant-governance",
        "m365-backup-bcdr-data-resilience",
        "m365-licensing-ea-optimization",
        "d365-project-operations",
        "d365-commerce",
        "fabric-data-engineering",
        "fabric-analytics-engineering",
        "m365-live-identity-posture-guard",
        "d365-live-security-role-guard",
        "d365-live-record-field-update-guard",
        "m365-live-sensitivity-label-apply-guard"
      ]
    },
    "microsoft-security-compliance-engineer": {
      "label": "Microsoft Security & Compliance Engineer",
      "description": "Static-review security and compliance engineering across the Microsoft 365 estate: Microsoft Entra Zero Trust & Conditional Access, Microsoft 365 Copilot data-exposure readiness, Microsoft Purview data security & compliance (DLP, sensitivity labels, retention, Insider Risk, eDiscovery, Audit, DSPM for AI), and Microsoft Defender XDR security operations. Advisory only; production identity, DLP/label/retention, eDiscovery-hold, and containment actions are live-guard gated and require explicit human approval.",
      "agents": [
        "m365-identity-zero-trust-agent",
        "m365-copilot-readiness-governance-agent",
        "m365-purview-data-security-compliance-agent",
        "m365-defender-xdr-security-operations-agent",
        "m365-backup-bcdr-data-resilience-agent",
        "m365-live-identity-posture-guard-agent",
        "d365-live-security-role-guard-agent",
        "d365-live-record-field-update-guard-agent",
        "m365-live-sensitivity-label-apply-guard-agent"
      ],
      "skills": [
        "m365-identity-zero-trust",
        "m365-copilot-readiness-governance",
        "m365-purview-data-security-compliance",
        "m365-defender-xdr-security-operations",
        "m365-backup-bcdr-data-resilience",
        "m365-live-identity-posture-guard",
        "d365-live-security-role-guard",
        "d365-live-record-field-update-guard",
        "m365-live-sensitivity-label-apply-guard"
      ]
    },
    "microsoft-collaboration-endpoint-admin": {
      "label": "Microsoft Collaboration & Endpoint Administrator",
      "description": "Static-review administration of the Microsoft 365 collaboration and endpoint estate: Microsoft Intune device/app management and compliance, Microsoft Teams collaboration & communications governance, and Exchange Online / SharePoint Online / OneDrive information governance (including SharePoint Advanced Management oversharing controls). Advisory only; tenant-wide sharing/compliance/Conditional-Access-impacting policy changes and device wipe/retire actions are live-guard gated and require explicit human approval.",
      "agents": [
        "m365-intune-endpoint-management-agent",
        "m365-teams-collaboration-governance-agent",
        "m365-exchange-sharepoint-information-governance-agent",
        "m365-tenant-governance-agent"
      ],
      "skills": [
        "m365-intune-endpoint-management",
        "m365-teams-collaboration-governance",
        "m365-exchange-sharepoint-information-governance",
        "m365-tenant-governance"
      ]
    },
    "microsoft-data-analytics-engineer": {
      "label": "Microsoft Data & Analytics Engineer",
      "description": "Static-review data and analytics engineering on Microsoft Fabric and Power BI: Fabric data engineering (Lakehouse/OneLake, Spark, pipelines, Dataflows Gen2, medallion, Real-Time Intelligence, Direct Lake), Fabric analytics engineering (data warehouse T-SQL, dimensional/semantic modeling, DAX), and Fabric/Power BI business-insights governance (semantic-model trust, RLS/OLS, workspace governance). Advisory only; production capacity, pipeline-run, warehouse-schema, semantic-model deployment, RLS, and workspace-role changes are live-guard gated and require explicit human approval.",
      "agents": [
        "fabric-data-engineering-agent",
        "fabric-analytics-engineering-agent",
        "fabric-power-bi-business-insights-governance-agent"
      ],
      "skills": [
        "fabric-data-engineering",
        "fabric-analytics-engineering",
        "fabric-power-bi-business-insights-governance"
      ]
    },
    "azure-databricks-platform-engineer": {
      "label": "Azure Databricks Platform Engineer",
      "description": "Static-review governance and engineering for Azure Databricks: Unity Catalog least-privilege grants and admin-role separation, plus lakehouse engineering (medallion, ADLS Gen2 external locations via managed identity, cluster policies, secret scopes, network isolation). Advisory only; production grant/role/policy/cluster changes are live-guard gated and require explicit human approval.",
      "agents": [
        "databricks-unity-catalog-governance-at-azure-agent",
        "databricks-lakehouse-engineering-at-azure-agent",
        "databricks-live-unity-catalog-grant-guard-at-azure-agent"
      ],
      "skills": [
        "databricks-unity-catalog-governance-at-azure",
        "databricks-lakehouse-engineering-at-azure",
        "databricks-live-unity-catalog-grant-guard-at-azure"
      ]
    },
    "azure-snowflake-platform-engineer": {
      "label": "Azure Snowflake Platform Engineer",
      "description": "Static-review governance and engineering for Snowflake on Azure: RBAC least privilege (ACCOUNTADMIN restriction, SECURITYADMIN/SYSADMIN separation of duties, network policies, Entra OAuth/SSO/SCIM) and data-platform engineering (warehouses, Azure Private Link/storage integration, masking/row-access/tagging governance). Advisory only, with one approval-gated live guard covering exactly one mutation: a single GRANT or REVOKE. Policy, warehouse, data-protection, pipeline, and failover changes are NOT gated by this role — it installs no guard that owns them. Superseded by the cloud-neutral snowflake roles, whose guards cover those mutations; these Azure-scoped assets are `lifecycle: deprecated` and retained for continuity.",
      "agents": [
        "snowflake-rbac-access-governance-at-azure-agent",
        "snowflake-data-platform-engineering-at-azure-agent",
        "snowflake-live-rbac-grant-guard-at-azure-agent"
      ],
      "skills": [
        "snowflake-rbac-access-governance-at-azure",
        "snowflake-data-platform-engineering-at-azure",
        "snowflake-live-rbac-grant-guard-at-azure"
      ]
    },
    "frontend-engineer": {
      "label": "Frontend Engineer",
      "description": "Enterprise frontend engineering across frameworks (React, Next.js, Angular, Vue, Svelte/SvelteKit) and cross-cutting platform concerns — web-platform foundations, HTML semantics, CSS architecture, JavaScript/TypeScript, state management, routing, SSR/hydration/streaming, API/BFF integration, performance and Core Web Vitals, PWA/offline, accessibility (WCAG 2.2), frontend security (DOM XSS/CSP, auth/session), observability/RUM, internationalization, browser compatibility, testing and visual regression, design-system governance, build tooling and bundling, monorepo DX, package governance, migration/modernization, product analytics/experimentation, and cost-to-serve FinOps. Review-oriented and advisory; static-review skills never execute application code.",
      "agents": [
        "accessibility-wcag-agent",
        "ai-assisted-frontend-review-agent",
        "angular-specialist-agent",
        "api-integration-bff-agent",
        "browser-compatibility-agent",
        "build-tooling-bundling-agent",
        "css-architecture-agent",
        "design-systems-governance-agent",
        "enterprise-red-team-review-agent",
        "frontend-board-chair-agent",
        "frontend-finops-cost-to-serve-agent",
        "frontend-maestro-agent",
        "frontend-migration-modernization-agent",
        "frontend-observability-rum-agent",
        "frontend-platform-architect-agent",
        "frontend-security-agent",
        "html-semantics-agent",
        "internationalization-localization-agent",
        "javascript-runtime-agent",
        "monorepo-dx-agent",
        "nextjs-specialist-agent",
        "package-governance-agent",
        "product-analytics-experimentation-agent",
        "pwa-offline-capability-agent",
        "react-specialist-agent",
        "routing-navigation-agent",
        "ssr-hydration-streaming-agent",
        "state-management-data-flow-agent",
        "svelte-sveltekit-specialist-agent",
        "testing-quality-engineering-agent",
        "typescript-contracts-agent",
        "visual-regression-agent",
        "vue-specialist-agent",
        "web-performance-core-vitals-agent",
        "web-platform-foundation-agent",
        "revenue-critical-journey-integrity-agent"
      ],
      "skills": [
        "ai-generated-frontend-code-review",
        "angular-architecture-signals-review",
        "angular-ssr-hydration-review",
        "angular-template-sanitizer-security-review",
        "api-integration-contract-review",
        "browser-compatibility-review",
        "build-tooling-vite-webpack-review",
        "bundle-budget-code-splitting-review",
        "core-web-vitals-triage",
        "critical-rendering-path-review",
        "css-architecture-design-system-review",
        "design-token-governance-review",
        "e2e-testing-playwright-review",
        "edge-cache-data-bleed-review",
        "enterprise-red-team-review",
        "framework-upgrade-risk-review",
        "frontend-auth-session-security-review",
        "frontend-bff-boundary-review",
        "frontend-board-chair",
        "frontend-dom-xss-csp-review",
        "frontend-error-boundary-resilience-review",
        "frontend-finops-cost-to-serve-review",
        "frontend-maestro",
        "frontend-migration-modernization-plan",
        "frontend-observability-rum-instrumentation",
        "frontend-platform-architecture-review",
        "frontend-testing-strategy-review",
        "graphql-client-security-review",
        "html-semantics-accessibility-review",
        "i18n-l10n-readiness-review",
        "javascript-runtime-async-review",
        "legacy-jquery-to-modern-framework-review",
        "microfrontend-boundary-review",
        "monorepo-package-governance-review",
        "nextjs-app-router-data-fetching-review",
        "nextjs-rendering-caching-review",
        "nextjs-server-security-review",
        "nuxt-fullstack-security-review",
        "pci-payment-ui-security-review",
        "product-analytics-experimentation-review",
        "pwa-offline-readiness-review",
        "react-component-architecture-review",
        "react-rsc-data-boundary-review",
        "react-state-effects-review",
        "routing-navigation-review",
        "service-worker-cache-strategy-review",
        "ssr-hydration-streaming-diagnosis",
        "state-management-decision-review",
        "sveltekit-actions-load-security-review",
        "sveltekit-progressive-enhancement-review",
        "sveltekit-routing-load-review",
        "tree-shaking-dead-code-review",
        "typescript-contracts-review",
        "visual-regression-storybook-review",
        "vue-composition-api-architecture-review",
        "vue-router-navigation-security-review",
        "vue-ssr-security-review",
        "vue-state-store-security-review",
        "wcag-22-accessibility-audit",
        "revenue-critical-journey-integrity-review"
      ]
    },
    "php-platform-engineer": {
      "label": "PHP Platform Engineer",
      "description": "Static-review board for PHP platform engineering — PHP application security (unserialize/session/upload), Composer dependency supply-chain governance, runtime version/EOL readiness with OPcache/PHP-FPM hardening, and WordPress plugin/theme/REST/block security — routed by the PHP maestro to the narrowest specialist. Advisory only: never executes payloads, installs packages, or mutates runtime or production.",
      "agents": [
        "php-maestro-agent",
        "php-application-security-agent",
        "composer-supply-chain-agent",
        "php-runtime-upgrade-readiness-agent",
        "wordpress-security-agent"
      ],
      "skills": [
        "php-maestro",
        "php-session-upload-deserialization-review",
        "composer-audit-supply-chain-review",
        "php-runtime-eol-opcache-fpm-review",
        "wordpress-rest-block-security-review"
      ]
    },
    "kotlin-backend-engineer": {
      "label": "Kotlin Backend Engineer",
      "description": "Static review for server-side Kotlin services on Ktor or Spring: language and null-safety correctness, coroutine and Flow reliability (structured concurrency, dispatchers, context propagation), backend production readiness, kotlinx.serialization wire contracts, coroutine-aware test architecture, and Gradle build health. Static review only — never builds, deploys, or contacts a live system.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-language-api-correctness-agent",
        "kotlin-coroutines-flow-reliability-agent",
        "kotlin-backend-production-readiness-agent",
        "kotlin-serialization-wire-contract-agent",
        "kotlin-test-architecture-agent",
        "kotlin-gradle-build-engineering-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-language-api-correctness",
        "kotlin-coroutines-flow-reliability",
        "kotlin-backend-production-readiness",
        "kotlin-serialization-wire-contract",
        "kotlin-test-architecture",
        "kotlin-gradle-build-engineering"
      ]
    },
    "android-kotlin-engineer": {
      "label": "Android Kotlin Engineer",
      "description": "Static review for Android apps in Kotlin: lifecycle-aware architecture and state, Jetpack Compose UI correctness and accessibility, MASVS-aligned security and privacy, measured runtime performance and reliability (startup, jank, ANR, Baseline Profiles), coroutine/Flow reliability, and test architecture. Static review only — never builds, installs, instruments, or ships an app.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-android-architecture-agent",
        "kotlin-compose-ui-quality-accessibility-agent",
        "kotlin-android-security-privacy-agent",
        "kotlin-android-performance-reliability-agent",
        "kotlin-coroutines-flow-reliability-agent",
        "kotlin-test-architecture-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-android-architecture",
        "kotlin-compose-ui-quality-accessibility",
        "kotlin-android-security-privacy",
        "kotlin-android-performance-reliability",
        "kotlin-coroutines-flow-reliability",
        "kotlin-test-architecture"
      ]
    },
    "kotlin-multiplatform-engineer": {
      "label": "Kotlin Multiplatform Engineer",
      "description": "Static review for Kotlin Multiplatform work: the adopt/don't-adopt portfolio decision, source-set and expect/actual boundary and Swift/Objective-C interop (including Kotlin/Native runtime), language correctness, coroutine/Flow reliability, kotlinx.serialization wire contracts, and Gradle build health. Static review only — decides and reviews, never builds or publishes.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-kmp-portfolio-decision-agent",
        "kotlin-kmp-boundary-interop-agent",
        "kotlin-language-api-correctness-agent",
        "kotlin-coroutines-flow-reliability-agent",
        "kotlin-serialization-wire-contract-agent",
        "kotlin-gradle-build-engineering-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-kmp-portfolio-decision",
        "kotlin-kmp-boundary-interop",
        "kotlin-language-api-correctness",
        "kotlin-coroutines-flow-reliability",
        "kotlin-serialization-wire-contract",
        "kotlin-gradle-build-engineering"
      ]
    },
    "kotlin-platform-build-engineer": {
      "label": "Kotlin Platform & Build Engineer",
      "description": "Static review for the Kotlin engineering system: Gradle build-graph quality, configuration and build cache, incremental compilation and convention plugins, CI throughput, dependency verification/locking and release supply-chain integrity, library API/ABI governance, and test architecture. Static review only — never runs a build, signs, or publishes an artifact.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-gradle-build-engineering-agent",
        "kotlin-supply-chain-release-integrity-agent",
        "kotlin-library-api-abi-governance-agent",
        "kotlin-test-architecture-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-gradle-build-engineering",
        "kotlin-supply-chain-release-integrity",
        "kotlin-library-api-abi-governance",
        "kotlin-test-architecture"
      ]
    },
    "kotlin-library-maintainer": {
      "label": "Kotlin Library Maintainer",
      "description": "Static review for Kotlin library authors: public API/ABI evolution and binary/source compatibility, language and null-safety correctness, coroutine/Flow reliability for library APIs, kotlinx.serialization wire-contract stability, test architecture, and dependency/publication supply-chain integrity. Static review only — never publishes or signs a release.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-library-api-abi-governance-agent",
        "kotlin-language-api-correctness-agent",
        "kotlin-coroutines-flow-reliability-agent",
        "kotlin-serialization-wire-contract-agent",
        "kotlin-test-architecture-agent",
        "kotlin-supply-chain-release-integrity-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-library-api-abi-governance",
        "kotlin-language-api-correctness",
        "kotlin-coroutines-flow-reliability",
        "kotlin-serialization-wire-contract",
        "kotlin-test-architecture",
        "kotlin-supply-chain-release-integrity"
      ]
    },
    "kotlin-security-engineer": {
      "label": "Kotlin Security Engineer",
      "description": "Static review for Kotlin/Android security posture: MASVS-aligned Android security and privacy, kotlinx.serialization polymorphic-deserialization and wire-contract safety, dependency verification/plugin-trust supply-chain integrity, and coroutine security-context propagation. Static review only — defers generic backend vulnerabilities to the application-security board and never contacts a live system.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-android-security-privacy-agent",
        "kotlin-serialization-wire-contract-agent",
        "kotlin-supply-chain-release-integrity-agent",
        "kotlin-coroutines-flow-reliability-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-android-security-privacy",
        "kotlin-serialization-wire-contract",
        "kotlin-supply-chain-release-integrity",
        "kotlin-coroutines-flow-reliability"
      ]
    },
    "kotlin-engineering-leader": {
      "label": "Kotlin Engineering Leader",
      "description": "Static review for Kotlin technology-portfolio and modernization decisions: Java-to-Kotlin estate modernization sequencing and reversibility, the Kotlin Multiplatform adopt-or-not portfolio decision, public library API/ABI governance, and dependency/release supply-chain integrity. Decision and review only — never migrates, publishes, signs, or contacts a live system, and expresses business impact only with evidence, never invented ROI.",
      "agents": [
        "kotlin-maestro-agent",
        "kotlin-estate-modernization-governor-agent",
        "kotlin-kmp-portfolio-decision-agent",
        "kotlin-library-api-abi-governance-agent",
        "kotlin-supply-chain-release-integrity-agent"
      ],
      "skills": [
        "kotlin-maestro",
        "kotlin-estate-modernization-governor",
        "kotlin-kmp-portfolio-decision",
        "kotlin-library-api-abi-governance",
        "kotlin-supply-chain-release-integrity"
      ]
    },
    "python-application-review-engineer": {
      "label": "Python Application Review Engineer",
      "description": "Static review of Python applications routed through the Python maestro across the full 20-agent board — application-security, async/concurrency, packaging supply chain, numerical correctness, type contracts, web-service readiness, data access, distributed tasks, testing, runtime-estate modernization, performance/memory, free-threading, native extensions, container/serverless runtime, data pipelines, ML production, observability, developer tooling, and business-critical automation governance. Static review only.",
      "agents": [
        "python-application-security-agent",
        "python-async-concurrency-reliability-agent",
        "python-business-critical-automation-governance-agent",
        "python-container-serverless-runtime-agent",
        "python-data-access-transaction-agent",
        "python-data-pipeline-reliability-agent",
        "python-developer-tooling-build-agent",
        "python-distributed-task-reliability-agent",
        "python-estate-modernization-governor-agent",
        "python-free-threading-parallelism-agent",
        "python-language-contracts-typing-agent",
        "python-maestro-agent",
        "python-ml-ai-production-agent",
        "python-native-extension-interop-agent",
        "python-numerical-scientific-correctness-agent",
        "python-observability-sre-agent",
        "python-packaging-supply-chain-agent",
        "python-performance-memory-agent",
        "python-testing-quality-engineering-agent",
        "python-web-service-production-readiness-agent"
      ],
      "skills": [
        "python-application-security",
        "python-async-concurrency-reliability",
        "python-business-critical-automation-governance",
        "python-container-serverless-runtime",
        "python-data-access-transaction",
        "python-data-pipeline-reliability",
        "python-developer-tooling-build",
        "python-distributed-task-reliability",
        "python-estate-modernization-governor",
        "python-free-threading-parallelism",
        "python-language-contracts-typing",
        "python-maestro",
        "python-ml-ai-production",
        "python-native-extension-interop",
        "python-numerical-scientific-correctness",
        "python-observability-sre",
        "python-packaging-supply-chain",
        "python-performance-memory",
        "python-testing-quality-engineering",
        "python-web-service-production-readiness"
      ]
    },
    "python-security-engineer": {
      "label": "Python Security Engineer",
      "description": "Static review of the Python attack surface routed through the Python maestro: application-security sinks (unsafe deserialization, subprocess/shell injection, SSRF, secrets, cryptography misuse) and software-supply-chain integrity (dependency locking, hash-checking, index trust, dependency confusion). Static review only — never installs, runs, or exploits code.",
      "agents": [
        "python-maestro-agent",
        "python-application-security-agent",
        "python-packaging-supply-chain-agent"
      ],
      "skills": [
        "python-maestro",
        "python-application-security",
        "python-packaging-supply-chain"
      ]
    },
    "python-reliability-data-engineer": {
      "label": "Python Reliability and Data Engineer",
      "description": "Static review of Python runtime reliability and data correctness routed through the Python maestro: asyncio event-loop reliability, numerical/scientific correctness, database access and transactions (session/transaction scope, N+1, pooling, migrations), and distributed task reliability (idempotency, retries, dead-letters). Static review only — never runs the service, the calculation, or a live connection.",
      "agents": [
        "python-maestro-agent",
        "python-async-concurrency-reliability-agent",
        "python-numerical-scientific-correctness-agent",
        "python-data-access-transaction-agent",
        "python-distributed-task-reliability-agent"
      ],
      "skills": [
        "python-maestro",
        "python-async-concurrency-reliability",
        "python-numerical-scientific-correctness",
        "python-data-access-transaction",
        "python-distributed-task-reliability"
      ]
    },
    "python-application-engineer": {
      "label": "Python Application Engineer",
      "description": "Static review for Python application engineers routed through the Python maestro: type contracts and gradual typing, web-service production readiness (FastAPI/Django/Flask), database access and transactions, application-security defects, and test quality. Static review only — never runs, deploys, or contacts a live system.",
      "agents": [
        "python-maestro-agent",
        "python-language-contracts-typing-agent",
        "python-web-service-production-readiness-agent",
        "python-data-access-transaction-agent",
        "python-application-security-agent",
        "python-testing-quality-engineering-agent"
      ],
      "skills": [
        "python-maestro",
        "python-language-contracts-typing",
        "python-web-service-production-readiness",
        "python-data-access-transaction",
        "python-application-security",
        "python-testing-quality-engineering"
      ]
    },
    "python-platform-reliability-engineer": {
      "label": "Python Platform Reliability Engineer",
      "description": "Static review of Python runtime and platform reliability routed through the Python maestro: asyncio event-loop reliability, container/serverless runtime (PID 1, signals, shutdown), in-application observability, performance and memory, free-threaded adoption, and runtime-estate modernization. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-async-concurrency-reliability-agent",
        "python-container-serverless-runtime-agent",
        "python-observability-sre-agent",
        "python-performance-memory-agent",
        "python-free-threading-parallelism-agent",
        "python-estate-modernization-governor-agent"
      ],
      "skills": [
        "python-maestro",
        "python-async-concurrency-reliability",
        "python-container-serverless-runtime",
        "python-observability-sre",
        "python-performance-memory",
        "python-free-threading-parallelism",
        "python-estate-modernization-governor"
      ]
    },
    "python-data-engineer": {
      "label": "Python Data Engineer",
      "description": "Static review for Python data engineers routed through the Python maestro: data-pipeline reliability (idempotency, backfills, schema evolution), numerical/scientific correctness, database access and transactions, and distributed task reliability. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-data-pipeline-reliability-agent",
        "python-data-access-transaction-agent",
        "python-numerical-scientific-correctness-agent",
        "python-distributed-task-reliability-agent"
      ],
      "skills": [
        "python-maestro",
        "python-data-pipeline-reliability",
        "python-data-access-transaction",
        "python-numerical-scientific-correctness",
        "python-distributed-task-reliability"
      ]
    },
    "python-ml-engineer": {
      "label": "Python ML Engineer",
      "description": "Static review for Python ML engineers routed through the Python maestro: ML production correctness (training-serving skew, leakage, artifact safety, reproducibility), numerical correctness, data-pipeline reliability, and test quality. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-ml-ai-production-agent",
        "python-numerical-scientific-correctness-agent",
        "python-data-pipeline-reliability-agent",
        "python-testing-quality-engineering-agent"
      ],
      "skills": [
        "python-maestro",
        "python-ml-ai-production",
        "python-numerical-scientific-correctness",
        "python-data-pipeline-reliability",
        "python-testing-quality-engineering"
      ]
    },
    "python-library-maintainer": {
      "label": "Python Library Maintainer",
      "description": "Static review for Python library maintainers routed through the Python maestro: type contracts and public API stability, packaging and supply-chain integrity, native-extension interop and ABI, developer tooling efficacy, and test quality. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-language-contracts-typing-agent",
        "python-packaging-supply-chain-agent",
        "python-native-extension-interop-agent",
        "python-developer-tooling-build-agent",
        "python-testing-quality-engineering-agent"
      ],
      "skills": [
        "python-maestro",
        "python-language-contracts-typing",
        "python-packaging-supply-chain",
        "python-native-extension-interop",
        "python-developer-tooling-build",
        "python-testing-quality-engineering"
      ]
    },
    "python-automation-governance-lead": {
      "label": "Python Automation Governance Lead",
      "description": "Static review for governance of business-critical Python automation routed through the Python maestro: automation ownership and controls, distributed task reliability, data-pipeline reliability, and application security. Maps controls and exposure; makes no accounting/legal/regulatory conclusions. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-business-critical-automation-governance-agent",
        "python-distributed-task-reliability-agent",
        "python-data-pipeline-reliability-agent",
        "python-application-security-agent"
      ],
      "skills": [
        "python-maestro",
        "python-business-critical-automation-governance",
        "python-distributed-task-reliability",
        "python-data-pipeline-reliability",
        "python-application-security"
      ]
    },
    "python-engineering-leader": {
      "label": "Python Engineering Leader",
      "description": "Portfolio-level static review for Python engineering leaders routed through the Python maestro: runtime-estate modernization and upgrade sequencing, business-critical automation governance, developer-tooling and gate efficacy, and performance posture. Static review only.",
      "agents": [
        "python-maestro-agent",
        "python-estate-modernization-governor-agent",
        "python-business-critical-automation-governance-agent",
        "python-developer-tooling-build-agent",
        "python-performance-memory-agent"
      ],
      "skills": [
        "python-maestro",
        "python-estate-modernization-governor",
        "python-business-critical-automation-governance",
        "python-developer-tooling-build",
        "python-performance-memory"
      ]
    },
    "python-live-platform-operator": {
      "label": "Python Live Platform Operator",
      "description": "Live control-plane operations for platform reliability, routed through the live governance maestro: runtime inventory, read-only diagnostics, continuous control testing, bounded release control, and pre-approved rollback. Mutating operators are live-guard gated — never auto-dispatched; every R3+ action requires independent approval, JIT credentials, and audit evidence.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-system-inventory-agent",
        "python-live-runtime-control-agent",
        "python-live-continuous-control-testing-agent",
        "python-live-release-control-agent",
        "python-live-rollback-and-recovery-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-system-inventory",
        "python-live-runtime-control",
        "python-live-continuous-control-testing",
        "python-live-release-control",
        "python-live-rollback-and-recovery"
      ]
    },
    "python-live-security-operator": {
      "label": "Python Live Security Operator",
      "description": "Live control-plane security operations routed through the live governance maestro: identity and authority verification, bounded dependency remediation (branch/PR), policy-gate evaluation, control-evidence collection, and continuous control testing. Read-only by default; the one mutating operator (code remediation) is live-guard gated and cannot merge or deploy.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-identity-authority-agent",
        "python-live-code-remediation-agent",
        "python-live-policy-gate-agent",
        "python-live-control-evidence-agent",
        "python-live-continuous-control-testing-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-identity-authority",
        "python-live-code-remediation",
        "python-live-policy-gate",
        "python-live-control-evidence",
        "python-live-continuous-control-testing"
      ]
    },
    "python-live-data-operator": {
      "label": "Python Live Data Operator",
      "description": "Live control-plane data operations routed through the live governance maestro: governed database change, pipeline backfill/reprocessing, distributed job control with technical and business idempotency, and change planning with reconciliation and rollback. Mutating operators are live-guard gated; no unbounded or ad-hoc production data mutation.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-data-change-control-agent",
        "python-live-job-control-agent",
        "python-live-change-plan-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-data-change-control",
        "python-live-job-control",
        "python-live-change-plan"
      ]
    },
    "python-live-ml-governance-operator": {
      "label": "Python Live ML Governance Operator",
      "description": "Live control-plane ML governance routed through the live governance maestro: immutable model-artifact promotion with risk classification and evaluation evidence, control-evidence collection, policy-gate AI-risk checks, and rollback. Makes no EU AI Act conformity or compliance determination — those are owner determinations.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-model-promotion-control-agent",
        "python-live-control-evidence-agent",
        "python-live-policy-gate-agent",
        "python-live-rollback-and-recovery-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-model-promotion-control",
        "python-live-control-evidence",
        "python-live-policy-gate",
        "python-live-rollback-and-recovery"
      ]
    },
    "python-live-automation-control-owner": {
      "label": "Python Live Automation Control Owner",
      "description": "Live control-plane governance of business-critical automation routed through the live governance maestro: job control, identity/approval authority, control-evidence, and exception governance. Separates permission from authority and execution from approval; records time-boxed exceptions with owners and expiry.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-job-control-agent",
        "python-live-identity-authority-agent",
        "python-live-control-evidence-agent",
        "python-live-exception-governance-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-job-control",
        "python-live-identity-authority",
        "python-live-control-evidence",
        "python-live-exception-governance"
      ]
    },
    "python-live-audit-and-compliance-reviewer": {
      "label": "Python Live Audit and Compliance Reviewer",
      "description": "Read-only live control-plane audit and compliance review routed through the live governance maestro: control-evidence collection, policy-gate control mapping, continuous control testing, and exception review. Contains NO mutating agents — reviews and tests controls, never executes changes, and never declares compliance.",
      "agents": [
        "python-live-governance-maestro-agent",
        "python-live-control-evidence-agent",
        "python-live-policy-gate-agent",
        "python-live-continuous-control-testing-agent",
        "python-live-exception-governance-agent"
      ],
      "skills": [
        "python-live-governance-maestro",
        "python-live-control-evidence",
        "python-live-policy-gate",
        "python-live-continuous-control-testing",
        "python-live-exception-governance"
      ]
    },
    "typescript-application-review-engineer": {
      "label": "TypeScript Application Review Engineer",
      "description": "Static review for TypeScript services and applications: runtime boundary contracts at every point external data enters the program, type-model soundness in shared code, promise and cancellation contracts, whether the code runs on the target Node and is type-checked anywhere, and what the static toolchain is required to prove. Static review only — never compiles, builds, runs, publishes, or contacts a live system.",
      "agents": [
        "typescript-maestro-agent",
        "typescript-runtime-boundary-contract-agent",
        "typescript-type-soundness-agent",
        "typescript-async-contract-reliability-agent",
        "typescript-node-execution-compatibility-agent",
        "typescript-static-enforcement-policy-agent"
      ],
      "skills": [
        "typescript-maestro",
        "typescript-runtime-boundary-contract",
        "typescript-type-soundness",
        "typescript-async-contract-reliability",
        "typescript-node-execution-compatibility",
        "typescript-static-enforcement-policy"
      ]
    },
    "typescript-library-maintainer": {
      "label": "TypeScript Library Maintainer",
      "description": "Static review for published TypeScript packages: declaration correctness and breaking-change classification against semver, module resolution and emit across every consumer mode, publication authority and provenance, and the soundness of the exported type model. Static review only — never publishes, packs, or contacts a registry.",
      "agents": [
        "typescript-maestro-agent",
        "typescript-public-api-and-declaration-governance-agent",
        "typescript-module-resolution-and-emit-agent",
        "typescript-package-publication-integrity-agent",
        "typescript-type-soundness-agent"
      ],
      "skills": [
        "typescript-maestro",
        "typescript-public-api-and-declaration-governance",
        "typescript-module-resolution-and-emit",
        "typescript-package-publication-integrity",
        "typescript-type-soundness"
      ]
    },
    "typescript-platform-build-engineer": {
      "label": "TypeScript Platform Build Engineer",
      "description": "Static review of TypeScript build and enforcement economics: the program graph and what in it costs measured time, the enforcement contract across packages and its cost, migration sequencing across an estate, and the funding case built from supplied measurements. Static review only — never runs a build, and never originates a measurement it was not given.",
      "agents": [
        "typescript-maestro-agent",
        "typescript-build-graph-performance-agent",
        "typescript-static-enforcement-policy-agent",
        "typescript-estate-modernization-governor-agent",
        "typescript-engineering-economics-agent"
      ],
      "skills": [
        "typescript-maestro",
        "typescript-build-graph-performance",
        "typescript-static-enforcement-policy",
        "typescript-estate-modernization-governor",
        "typescript-engineering-economics"
      ]
    },
    "typescript-agentic-contract-engineer": {
      "label": "TypeScript Agentic Contract Engineer",
      "description": "Static review of TypeScript agent and automation contracts: MCP tool schema fidelity against handler behavior, protocol version and error contracts, validation at every point external data enters the program, and governance of privileged automation. Static review only — never executes a tool, a script, or a migration.",
      "agents": [
        "typescript-maestro-agent",
        "typescript-mcp-tool-contract-agent",
        "typescript-runtime-boundary-contract-agent",
        "typescript-business-critical-automation-governance-agent"
      ],
      "skills": [
        "typescript-maestro",
        "typescript-mcp-tool-contract",
        "typescript-runtime-boundary-contract",
        "typescript-business-critical-automation-governance"
      ]
    },
    "snowflake-platform-architect": {
      "label": "Snowflake Platform Architect",
      "description": "End-to-end Snowflake architecture and operability: account and organization topology, workload placement and isolation, edition/cloud/region constraints, interoperability and catalog choice, the running estate's parameters, ownership and drift, and migration or coexistence with an existing data platform. Static review only — proposes structure and operating procedure, never applies a change to an account.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-solution-architect-agent",
        "snowflake-platform-administrator-agent",
        "snowflake-migration-modernization-agent",
        "snowflake-business-value-adoption-strategist-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-solution-architect",
        "snowflake-platform-administrator",
        "snowflake-migration-modernization",
        "snowflake-business-value-adoption-strategist"
      ]
    },
    "snowflake-security-governance-engineer": {
      "label": "Snowflake Security and Governance Engineer",
      "description": "Snowflake identity, reachability, data protection, and audit evidence: effective access across role hierarchy, ownership and future grants; authentication policies, MFA, federation, SERVICE and SERVICE_AGENT identities; network policies and private connectivity with lockout prevention; masking, row-access, classification and lineage; and independent evidence that a control operated across an audit period. Static review plus three approval-gated live guards, each owning exactly one mutation: a single grant or revoke, a single auth or network policy change, and a single masking or row-access policy attach, detach, or replace.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-identity-access-security-agent",
        "snowflake-network-private-connectivity-agent",
        "snowflake-governance-privacy-agent",
        "snowflake-compliance-evidence-auditor-agent",
        "snowflake-live-rbac-grant-guard-agent",
        "snowflake-live-auth-network-policy-guard-agent",
        "snowflake-live-data-protection-policy-guard-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-identity-access-security",
        "snowflake-network-private-connectivity",
        "snowflake-governance-privacy",
        "snowflake-compliance-evidence-auditor",
        "snowflake-live-rbac-grant-guard",
        "snowflake-live-auth-network-policy-guard",
        "snowflake-live-data-protection-policy-guard"
      ]
    },
    "snowflake-finops-performance-engineer": {
      "label": "Snowflake FinOps and Performance Engineer",
      "description": "Snowflake unit economics and query performance as one accountable pair: warehouse, serverless, AI and storage spend, budgets versus resource monitors, query and tag attribution, idle compute and anomaly investigation, alongside Query Profile diagnosis, pruning, spilling, queueing, clustering and acceleration economics. Static review plus one approval-gated live guard for a single warehouse or cost-governance change.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-finops-cost-governor-agent",
        "snowflake-query-performance-engineer-agent",
        "snowflake-business-value-adoption-strategist-agent",
        "snowflake-live-warehouse-cost-change-guard-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-finops-cost-governor",
        "snowflake-query-performance-engineer",
        "snowflake-business-value-adoption-strategist",
        "snowflake-live-warehouse-cost-change-guard"
      ]
    },
    "snowflake-data-engineer": {
      "label": "Snowflake Data Engineer",
      "description": "Snowflake pipeline and ingestion correctness rather than job completion: batch and ELT loading, Streams, Tasks, Dynamic Tables and achieved target lag, Snowpark transformations, idempotency and reconciliation, plus Snowpipe and Snowpipe Streaming architecture, channel and offset semantics, connector migration, and silent-loss detection. Static review plus one approval-gated live guard for a single pipeline or ingestion change.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-data-engineering-pipelines-agent",
        "snowflake-streaming-ingestion-reliability-agent",
        "snowflake-analytics-semantic-data-product-agent",
        "snowflake-live-pipeline-streaming-change-guard-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-data-engineering-pipelines",
        "snowflake-streaming-ingestion-reliability",
        "snowflake-analytics-semantic-data-product",
        "snowflake-live-pipeline-streaming-change-guard"
      ]
    },
    "snowflake-ai-analytics-engineer": {
      "label": "Snowflake AI and Analytics Engineer",
      "description": "Snowflake analytical semantics, ML lifecycle governance, and the AI trust boundary: metric and KPI contracts, semantic views and the Cortex Analyst boundary, Snowpark ML reproducibility and drift, and the security review of Cortex Agents, tools, MCP connectors, retrieval corpora, prompt injection, exfiltration paths and AI cost per successful task. Static review only.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-analytics-semantic-data-product-agent",
        "snowflake-data-science-ml-agent",
        "snowflake-cortex-ai-agent-security-governor-agent",
        "snowflake-governance-privacy-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-analytics-semantic-data-product",
        "snowflake-data-science-ml",
        "snowflake-cortex-ai-agent-security-governor",
        "snowflake-governance-privacy"
      ]
    },
    "snowflake-delivery-resilience-engineer": {
      "label": "Snowflake Delivery and Resilience Engineer",
      "description": "How Snowflake changes ship and how the estate recovers: the official Terraform provider and its stable-versus-preview split, provider upgrades, plan review, CI/CD and environment promotion, drift and behaviour-change bundles, alongside replication and failover groups, Client Redirect, RPO/RTO tracked as requested/feasible/proven, dependency readiness and failback. Static review plus the approval-gated failover promotion guard, which is never auto-dispatched.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-devops-iac-release-agent",
        "snowflake-bcdr-resilience-agent",
        "snowflake-platform-administrator-agent",
        "snowflake-live-failover-promotion-guard-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-devops-iac-release",
        "snowflake-bcdr-resilience",
        "snowflake-platform-administrator",
        "snowflake-live-failover-promotion-guard"
      ]
    },
    "snowflake-data-product-manager": {
      "label": "Snowflake Data Product Manager",
      "description": "Snowflake engineering as a sellable, supportable product: Native App architecture, application roles and requested privileges, the provider/consumer trust boundary, security-review readiness, listing and publication requirements, pricing and monetization architecture, version and patch lifecycle, supportability economics, and whether the initiative removes a business constraint anyone owns. Static review only.",
      "agents": [
        "snowflake-maestro-agent",
        "snowflake-native-app-marketplace-product-agent",
        "snowflake-business-value-adoption-strategist-agent",
        "snowflake-analytics-semantic-data-product-agent",
        "snowflake-governance-privacy-agent"
      ],
      "skills": [
        "snowflake-maestro",
        "snowflake-native-app-marketplace-product",
        "snowflake-business-value-adoption-strategist",
        "snowflake-analytics-semantic-data-product",
        "snowflake-governance-privacy"
      ]
    }
  }
}