baf54250a9
Group F — manifest, capability, role, and assembler cleanup (post-audit 2026-05-02).
Dangling handoff targets stripped:
- validator.toml: removed handoffs to physics-deriver, patent-compliance
- code-implementer.toml: removed physics-deriver handoff
- architect.toml: removed physics-deriver
- ml-implementer.toml: removed physics-deriver, fixed "multi-node multi-node" typo
- ml-researcher.toml: removed physics-deriver, patent-researcher
- researcher.toml: removed patent-researcher
None of those manifest files exist in _manifests/. Comments added explaining
the removal date for future re-authoring.
Validator extension (_assembler):
- src/validator.rs: extended validate() with check_handoff_targets — every
[[handoff]].target must point to existing _manifests/<name>.toml.
Future dangling handoffs blocked at validate time.
- src/validator_tests.rs (new, 133 LOC): unit tests for handoff-target check.
- tests/fixtures/_manifests/: added valid stubs for previously-missing manifests
(architect, critic, security-auditor, validator,
ml-implementer, ml-researcher, infra-implementer)
so existing fixtures pass the new validator gate.
- tests/snapshots/: insta snapshots updated for researcher + code-implementer.
Atomar manifest fill-out (replaced stock copy-paste with domain-specific):
- code-implementer-typescript: Drizzle/Zod/Next.js semantics
- code-implementer-go: mesh networking, embedded servers
- code-implementer-swift: SwiftUI, SPM, macOS menubar
- code-implementer-python: RULE 0.2 exception language
- code-implementer-flutter: Riverpod, Clean Architecture
- infra-implementer-cicd/iac/container/secrets: tool-specific bans + scopes
- researcher-web/code: output_extra_fields fixed (was code-implementer copy-paste
"Largest file LOC", "Tests pass count" — now sources cited /
evidence grade / gaps section)
Capability schema completeness:
- policy/no-git-ops + quality/cargo-check-green: added stage = "runtime"
- 8 capabilities: added explicit parents = [] (was missing/inconsistent)
Role schema:
- _roles/auditor.toml + merger.toml: added [taxonomy] + [lineage] (was missing)
- _roles/explorer.toml: added comment that "Explore" is the canonical Claude Code
subagent type (case-sensitive)
Reference path cleanup (manifest references):
- critic.toml: ~/.claude/skills/architecture-rules/... -> path:user-skills/...
- researcher.toml: stripped ~/.claude/agents/validator.md (machine-local)
Misc:
- frontend-validator.toml: renumbered duplicate step 6 -> step 7
kei-registry test fixture suppression:
- tests/fixtures/{atom-sample,fake-kit,mini-kit}/.kei-registry-ignore (3 new files)
- DNA-INDEX.md was inflating atom count by ~10% from test fixture rows; ignore-file
hooks ready, kei-registry walker implementation is a follow-up.
Tests: 59 passed; 0 failed; 1 ignored (pre-existing #[ignore]). cargo check clean.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
66 lines
2.4 KiB
TOML
66 lines
2.4 KiB
TOML
# Atomar agent — auto-generated 2026-04-29 (RULE ZERO decomposition).
|
|
# 1 cube = 1 responsibility. Edit this manifest, not the .md.
|
|
|
|
name = "infra-implementer-cicd"
|
|
description = "CI/CD pipeline specialist. GitHub Actions, GitLab CI, build-and-deploy scripts. Constructor Pattern."
|
|
tools = ["Glob", "Grep", "Read", "Edit", "Write", "Bash", "Agent"]
|
|
model = "sonnet"
|
|
substrate_role = "edit-shared"
|
|
|
|
role = """
|
|
You write CI/CD pipelines only — yaml workflows, build matrices, secret-injection from vault, staged deploys. You DO NOT touch IaC (Terraform/Pulumi → infra-implementer-iac), containers (→ infra-implementer-container), or secrets (→ infra-implementer-secrets).
|
|
"""
|
|
|
|
blocks = [
|
|
"baseline",
|
|
"evidence-grading",
|
|
"memory-protocol",
|
|
"rule-pre-dev-gate",
|
|
"rule-test-first",
|
|
"rule-error-budget",
|
|
"rule-double-audit",
|
|
]
|
|
|
|
domain_in = [
|
|
"GitHub Actions workflows — build matrices, caching, artifact upload/download",
|
|
"GitLab CI pipelines — stages, rules, variables, Docker-in-Docker runners",
|
|
"Forgejo / Gitea workflows (subset of GitHub Actions syntax)",
|
|
"Build-and-deploy scripts — cargo build --release, docker build+push, npm run build",
|
|
"Secret-injection from vault / GitHub Secrets / GitLab CI variables — ENV only, never inline",
|
|
"Staged deploys — canary, blue/green, rollback triggers",
|
|
]
|
|
forbidden_domain = [
|
|
"IaC (Terraform/Pulumi/CDK) — hand off to infra-implementer-iac",
|
|
"Dockerfiles or OCI images — hand off to infra-implementer-container",
|
|
"Secrets management (Vault, sops, age) — hand off to infra-implementer-secrets",
|
|
"Hardcoded secrets in workflow YAML (RULE 0.8) — use `${{ secrets.NAME }}` / ENV refs",
|
|
"Skipping build-cache steps — always cache cargo registry + target, node_modules, pip cache",
|
|
]
|
|
output_extra_fields = [
|
|
"CI platform: GitHub Actions | GitLab CI | Forgejo",
|
|
"Plan-Mode used: <yes | no + trivial-edit exemption reason>",
|
|
"Jobs defined: <list with trigger events>",
|
|
"Secrets used: <list of secret names — verify RULE 0.8 compliance>",
|
|
]
|
|
|
|
[[handoff]]
|
|
target = "validator"
|
|
trigger = "general fact-check fallback"
|
|
[references]
|
|
extra = [
|
|
"path:user-rules/code-style.md",
|
|
"path:user-rules/karpathy-behavioral.md",
|
|
]
|
|
|
|
[taxonomy]
|
|
kingdom = "manifest"
|
|
mechanism = "compose"
|
|
domain = "agent"
|
|
layer = "agent-substrate"
|
|
stage = "design-time"
|
|
stability = "stable"
|
|
language = "toml"
|
|
|
|
[lineage]
|
|
creator = "ag-orchestrator-human"
|
|
created = "2026-04-29"
|