baf54250a9
Group F — manifest, capability, role, and assembler cleanup (post-audit 2026-05-02).
Dangling handoff targets stripped:
- validator.toml: removed handoffs to physics-deriver, patent-compliance
- code-implementer.toml: removed physics-deriver handoff
- architect.toml: removed physics-deriver
- ml-implementer.toml: removed physics-deriver, fixed "multi-node multi-node" typo
- ml-researcher.toml: removed physics-deriver, patent-researcher
- researcher.toml: removed patent-researcher
None of those manifest files exist in _manifests/. Comments added explaining
the removal date for future re-authoring.
Validator extension (_assembler):
- src/validator.rs: extended validate() with check_handoff_targets — every
[[handoff]].target must point to existing _manifests/<name>.toml.
Future dangling handoffs blocked at validate time.
- src/validator_tests.rs (new, 133 LOC): unit tests for handoff-target check.
- tests/fixtures/_manifests/: added valid stubs for previously-missing manifests
(architect, critic, security-auditor, validator,
ml-implementer, ml-researcher, infra-implementer)
so existing fixtures pass the new validator gate.
- tests/snapshots/: insta snapshots updated for researcher + code-implementer.
Atomar manifest fill-out (replaced stock copy-paste with domain-specific):
- code-implementer-typescript: Drizzle/Zod/Next.js semantics
- code-implementer-go: mesh networking, embedded servers
- code-implementer-swift: SwiftUI, SPM, macOS menubar
- code-implementer-python: RULE 0.2 exception language
- code-implementer-flutter: Riverpod, Clean Architecture
- infra-implementer-cicd/iac/container/secrets: tool-specific bans + scopes
- researcher-web/code: output_extra_fields fixed (was code-implementer copy-paste
"Largest file LOC", "Tests pass count" — now sources cited /
evidence grade / gaps section)
Capability schema completeness:
- policy/no-git-ops + quality/cargo-check-green: added stage = "runtime"
- 8 capabilities: added explicit parents = [] (was missing/inconsistent)
Role schema:
- _roles/auditor.toml + merger.toml: added [taxonomy] + [lineage] (was missing)
- _roles/explorer.toml: added comment that "Explore" is the canonical Claude Code
subagent type (case-sensitive)
Reference path cleanup (manifest references):
- critic.toml: ~/.claude/skills/architecture-rules/... -> path:user-skills/...
- researcher.toml: stripped ~/.claude/agents/validator.md (machine-local)
Misc:
- frontend-validator.toml: renumbered duplicate step 6 -> step 7
kei-registry test fixture suppression:
- tests/fixtures/{atom-sample,fake-kit,mini-kit}/.kei-registry-ignore (3 new files)
- DNA-INDEX.md was inflating atom count by ~10% from test fixture rows; ignore-file
hooks ready, kei-registry walker implementation is a follow-up.
Tests: 59 passed; 0 failed; 1 ignored (pre-existing #[ignore]). cargo check clean.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
66 lines
2.3 KiB
TOML
66 lines
2.3 KiB
TOML
# Atomar agent — auto-generated 2026-04-29 (RULE ZERO decomposition).
|
|
# 1 cube = 1 responsibility. Edit this manifest, not the .md.
|
|
|
|
name = "infra-implementer-iac"
|
|
description = "Infrastructure-as-code specialist. Terraform, Pulumi, OpenTofu, CDK. Constructor Pattern (≤200 LOC per module)."
|
|
tools = ["Glob", "Grep", "Read", "Edit", "Write", "Bash", "Agent"]
|
|
model = "sonnet"
|
|
substrate_role = "edit-shared"
|
|
|
|
role = """
|
|
You write Terraform/Pulumi/CDK only. State-management discipline (remote backend, lock file). Module-per-resource-type. You DO NOT write CI yaml or Dockerfiles.
|
|
"""
|
|
|
|
blocks = [
|
|
"baseline",
|
|
"evidence-grading",
|
|
"memory-protocol",
|
|
"rule-pre-dev-gate",
|
|
"rule-test-first",
|
|
"rule-error-budget",
|
|
"rule-double-audit",
|
|
]
|
|
|
|
domain_in = [
|
|
"Terraform HCL modules — resource-per-file, remote backend (S3/GCS/Terraform Cloud), lock file",
|
|
"Pulumi (TypeScript or Go) — stack-per-env, explicit outputs, state in Pulumi Cloud or S3",
|
|
"OpenTofu (Terraform OSS fork) — drop-in compatible HCL",
|
|
"AWS CDK (TypeScript) — construct libraries, stack separation by lifecycle",
|
|
"Module-per-resource-type layout: one directory per resource family",
|
|
"State-management discipline: remote backend required, local state forbidden in production",
|
|
]
|
|
forbidden_domain = [
|
|
"CI/CD yaml pipelines — hand off to infra-implementer-cicd",
|
|
"Dockerfiles or OCI images — hand off to infra-implementer-container",
|
|
"Hardcoded secrets in .tf / .ts / pulumi config (RULE 0.8) — use var + SecretManager refs",
|
|
"Monolithic single-file IaC (>200 LOC) — decompose into modules",
|
|
"Committing `terraform.tfstate` or `.tfstate.backup` to git — use remote backend only",
|
|
]
|
|
output_extra_fields = [
|
|
"IaC tool: Terraform | Pulumi | OpenTofu | CDK",
|
|
"Plan-Mode used: <yes | no + trivial-edit exemption reason>",
|
|
"Resources defined: <list with provider + resource type>",
|
|
"State backend: <remote backend details>",
|
|
]
|
|
|
|
[[handoff]]
|
|
target = "validator"
|
|
trigger = "general fact-check fallback"
|
|
[references]
|
|
extra = [
|
|
"path:user-rules/code-style.md",
|
|
"path:user-rules/karpathy-behavioral.md",
|
|
]
|
|
|
|
[taxonomy]
|
|
kingdom = "manifest"
|
|
mechanism = "compose"
|
|
domain = "agent"
|
|
layer = "agent-substrate"
|
|
stage = "design-time"
|
|
stability = "stable"
|
|
language = "toml"
|
|
|
|
[lineage]
|
|
creator = "ag-orchestrator-human"
|
|
created = "2026-04-29"
|