diff --git a/README.md b/README.md index c859821a5..43211fb70 100644 --- a/README.md +++ b/README.md @@ -22,10 +22,11 @@ agents/ # Copilot custom agent profiles (org-wide) compliance-auditor.md # Org standards compliance checking feature-ideator.md # Feature idea generation pr-reviewer.md # Multi-tier cascading PR review + why-not-approved.md # Explains why a PR has not been approved prompts/ # Prompt libraries used by workflows scripts/ # Shell orchestration for GitHub Actions frameworks/ # Installed agentic frameworks (git subtree) - bmad-bgreat-suite/ # bmad-bgreat-suite @ ae8914e84b87: SRE, DevOps, and Security agents + bmad-bgreat-suite/ # bmad-bgreat-suite @ ae8914e84b87: SRE and DevOps agents and workflows bmad-method/ # BMAD-METHOD v6.8.0: multi-agent development lifecycle bmad-test-architecture/ # bmad-method-test-architecture-enterprise v1.19.0 .github/workflows/ # Scheduled automation (PR review, health checks) @@ -35,10 +36,11 @@ frameworks/ # Installed agentic frameworks (git subtree) | Agent | Purpose | Invoke with | |-------|---------|-------------| -| [`agentic-workflows`](agents/agentic-workflows.md) | Agentic workflow orchestration | `@agentic-workflows` in any org repo | -| [`compliance-auditor`](agents/compliance-auditor.md) | Audit repo against org standards | `@compliance-auditor` in any org repo | +| [`agentic-workflows`](agents/agentic-workflows.md) | Authoring, updating, debugging, and compiling gh-aw agentic workflow markdown files | `@agentic-workflows` in any org repo | +| [`compliance-auditor`](agents/compliance-auditor.md) | Audit repo against org standards (CI, agent config, repo settings, dependabot, push protection) and auto-fix non-breaking gaps | `@compliance-auditor` in any org repo | | [`feature-ideator`](agents/feature-ideator.md) | Generate and prioritize feature ideas | `@feature-ideator` in any org repo | | [`pr-reviewer`](agents/pr-reviewer.md) | Cascading PR review (triage → deep → security audit) with cross-engine adversarial review (see also [`pr-review-trigger.yml`](.github/workflows/pr-review-trigger.yml) for scheduled automation) | `@pr-reviewer` in any org PR | +| [`why-not-approved`](agents/why-not-approved.md) | Explains why pr-review has not approved a PR, and what would change that, by running the real pr-review gate chain read-only | `@why-not-approved` in any org PR | ## Automated Workflows @@ -67,9 +69,12 @@ Scheduled workflows post reports and dashboards as issues or run summaries for m |----------|---------| | [`actions-fleet-monitor.yml`](.github/workflows/actions-fleet-monitor.yml) | Actions fleet monitor — org-wide workflow token usage and run anomalies | | [`auto-rebase-health.yml`](.github/workflows/auto-rebase-health.yml) | Daily auto-rebase health report (issue) — rebase success/failure trends | +| [`budget-breaker.yml`](.github/workflows/budget-breaker.yml) | Budget breaker — pauses the agent fleet when the fleet reports quota refusals and lifts its own pause at the reported reset; default off, logs the write it would make until armed (#2153) | +| [`budget-poller.yml`](.github/workflows/budget-poller.yml) | Dry-run Claude budget poller — reads the usage windows twice hourly, logs what the token-budget breaker would do (never sets a variable), and proves the feed is alive (#2029) | | [`daily-pr-review-health.yml`](.github/workflows/daily-pr-review-health.yml) | Daily PR-review health check — flags PR-review agent failures as an issue | | [`docs-health-check.yml`](.github/workflows/docs-health-check.yml) | Docs health check — flags stale/broken docs as an issue | | [`engine-token-liveness.yml`](.github/workflows/engine-token-liveness.yml) | Engine-token liveness monitor — asserts dev-lead/pr-review caller stubs are not failing at the "Engine token preflight" step, and escalates a sustained fleet-wide outage that would otherwise go unalerted (#1587) | +| [`model-ab.yml`](.github/workflows/model-ab.yml) | Manually dispatched Opus 5.5 vs 4.8 held-out A/B + liveness/effort probe | | [`premature-closure-audit.yml`](.github/workflows/premature-closure-audit.yml) | Premature-closure audit — flags issues closed as completed with no merged closing PR, and OPEN issues carrying an unbacked completion claim (#1445) | | [`reviewer-report.yml`](.github/workflows/reviewer-report.yml) | Reviewer scorecard (per workflow-run summary) — per-reviewer PR-review activity | | [`skill-eval-report.yml`](.github/workflows/skill-eval-report.yml) | Skill-eval results report — agent skill pass/fail trends (self-improving-skills pipeline) | @@ -96,6 +101,7 @@ Notable subtopics are listed below to aid discoverability; see the standards dir | [`agent-standards`](https://github.com/combsmith/.github/blob/main/standards/agent-standards.md) | Required files, compliance exemptions, AgentShield CI workflow, decision-making reusables, BMAD Method Workflows | | [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | Staged promotion through concentric rings, reusable workflow versioning (`stable` channel), action pinning policy, permissions policy, Dev-Lead Agent | | [`codeowners-standard`](https://github.com/combsmith/.github/blob/main/standards/codeowners-standard.md) | Team composition, required setup for new bots, branch protection, verified end-to-end | +| [`commercial-support-standard`](https://github.com/combsmith/.github/blob/main/standards/commercial-support-standard.md) | Purpose & scope, canonical README section, standard commercial offerings & rate card, repository adoption guidelines | | [`copilot-instructions-standard`](https://github.com/combsmith/.github/blob/main/standards/copilot-instructions-standard.md) | Canonical instruction files, adding a new language, required sections, content quality rules | | [`dependabot-policy`](https://github.com/combsmith/.github/blob/main/standards/dependabot-policy.md) | Configuration files, auto-merge workflow, vulnerability audit CI check, applying to a repository | | [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | AI/ML vendor & lab sources, developer tooling changelogs, security & compliance sources, newsletters, podcasts | diff --git a/profile/README.md b/profile/README.md index 7adabd14b..05c8dc0c7 100644 --- a/profile/README.md +++ b/profile/README.md @@ -10,14 +10,17 @@ standards, and agentic infrastructure. | [.github](https://github.com/combsmith/.github) | Organization-wide GitHub configuration and workflows | Shell | | [.github-private](https://github.com/combsmith/.github-private) | Org-wide Copilot custom agents and agentic workflow infrastructure | Shell | | [ContentTwin](https://github.com/combsmith/ContentTwin) | AI-powered Social Media Agent for small organizations — enterprise-quality social presence at non-profit pricing | Shell | -| [TalkTerm](https://github.com/combsmith/TalkTerm) | | HTML | +| [TalkTerm](https://github.com/combsmith/TalkTerm) | | Shell | | [bmad-bgreat-suite](https://github.com/combsmith/bmad-bgreat-suite) | BMad Operations Suite — SRE and DevOps agents and workflows for the BMad Method ecosystem | Shell | | [broodly](https://github.com/combsmith/broodly) | A test implementation of the BMAD method | HTML | -| [broodminder-export](https://github.com/combsmith/broodminder-export) | Extract all of your data from the BroodMinder API into portable files — resumable, rate-limit-aware. | Python | +| [broodminder-data](https://github.com/combsmith/broodminder-data) | Unified Python client, CLI, bulk export, periodic delta sync, OpenAPI 3.1 spec, and MCP server for BroodMinder beehive data | Python | +| [empower-personal-dashboard](https://github.com/combsmith/empower-personal-dashboard) | Modern Python client and CLI for the Empower Personal Dashboard (formerly Personal Capital) API with 2FA, session persistence, balances, holdings, and transactions. | Python | | [google-app-scripts](https://github.com/combsmith/google-app-scripts) | A place to share Google AppScripts for personal productivity | JavaScript | -| [incubator](https://github.com/combsmith/incubator) | Product incubator: pre-product idea Discussions, decision briefs/PRD-lite, and disposable POCs. Ideas graduate to their own product repo once a POC proves out. Front-of-funnel for the .github-private ideation pipeline. | Shell | +| [incubator](https://github.com/combsmith/incubator) | Product incubator: pre-product idea Discussions, decision briefs/PRD-lite, and disposable POCs. Ideas graduate to their own product repo once a POC proves out. Front-of-funnel for the .github-private ideation pipeline. | Python | | [markets](https://github.com/combsmith/markets) | | HTML | | [repo-template](https://github.com/combsmith/repo-template) | Org template repository: one-click scaffold for new combsmith repos. Files via 'Use this template'; non-file standards via bootstrap. See epic combsmith/.github-private#964. | Shell | +| [software-factory](https://github.com/combsmith/software-factory) | | Python | +| [software-factory-canary](https://github.com/combsmith/software-factory-canary) | Throwaway repo for the Factory's platform trials. Nothing here is depended on. | — | ## Standards & Practices @@ -26,21 +29,22 @@ Engineering standards live in | Standard | Purpose | Key sections | |---|---|---| -| [`advanced-security`](https://github.com/combsmith/.github/blob/main/standards/advanced-security.md) | GitHub Advanced Security configuration | Enablement via Code Security Configurations · Push-protection live-fire test (canary) · Licensing & billing · Compliance audit checks | +| [`advanced-security`](https://github.com/combsmith/.github/blob/main/standards/advanced-security.md) | GitHub Advanced Security configuration | Enablement Mechanism — Code Security Configurations · Push-protection live-fire test (canary) · Licensing & billing · Compliance audit checks | | [`agent-rate-limits`](https://github.com/combsmith/.github/blob/main/standards/agent-rate-limits.md) | Per-agent token budget and rate-limit controls | What is limited · The token-budget breaker · Canary scope (enforcing vs log-only) · Status — signed off and wired (Phase 4) · Exempt actors — sanctioned, not a misconfiguration · Operator runbook | | [`agent-standards`](https://github.com/combsmith/.github/blob/main/standards/agent-standards.md) | Guidelines for building and deploying AI agents | Required Files · Compliance Exemptions · AgentShield CI Workflow · Decision-Making Reusables · BMAD Method Workflows | -| [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | CI/CD pipeline conventions | Staged promotion through concentric rings · Action Pinning Policy · Permissions Policy · Required Workflows · Dev-Lead Agent | +| [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | CI/CD pipeline conventions | Staged promotion through concentric rings · Reusable workflow versioning — the `stable` channel · Action Pinning Policy · Permissions Policy · Dev-Lead Agent | | [`codeowners-standard`](https://github.com/combsmith/.github/blob/main/standards/codeowners-standard.md) | CODEOWNERS file requirements | Team Composition · Required Setup for New Bots · Branch Protection | +| [`commercial-support-standard`](https://github.com/combsmith/.github/blob/main/standards/commercial-support-standard.md) | Commercial support offerings and README section | Purpose & Scope · Canonical README Section · Standard Commercial Offerings & Rate Card · Repository Adoption Guidelines | | [`copilot-instructions-standard`](https://github.com/combsmith/.github/blob/main/standards/copilot-instructions-standard.md) | Copilot custom instruction guidelines | Canonical Instruction Files · Required Sections · Content Quality Rules | | [`dependabot-policy`](https://github.com/combsmith/.github/blob/main/standards/dependabot-policy.md) | Dependency update and automerge policy | Dependabot Templates · Auto-Merge Workflow · Vulnerability Audit CI Check · CODEOWNERS Approval Timing | -| [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | Sources and process for feature ideation | AI / ML — Vendor & Lab Primary Sources · Developer Tooling & Platform Changelogs · Security & Compliance · Conferences | -| [`github-settings`](https://github.com/combsmith/.github/blob/main/standards/github-settings.md) | Repository settings baselines | Repository Rulesets · Organization-Level Secrets · GitHub Apps & Integrations · Labels — Standard Set · Compliance Audit Process | +| [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | Sources and process for feature ideation | AI / ML — Vendor & Lab Primary Sources · Developer Tooling, DevEx & Platform Changelogs · Security & Compliance · Conferences | +| [`github-settings`](https://github.com/combsmith/.github/blob/main/standards/github-settings.md) | Repository settings baselines | Repository Rulesets · Organization-Level Secrets for Standard CI · GitHub Apps & Integrations · Labels — Standard Set · Compliance Audit Process | | [`gitignore-standard`](https://github.com/combsmith/.github/blob/main/standards/gitignore-standard.md) | `.gitignore` management with a two-layer (secrets + ecosystem) model | Two-Layer Model · L1 — Secrets baseline (org-managed, verbatim, required) · L2 — Ecosystem / OS extension · Managed-block markers · Compliance check | | [`initiatives-project`](https://github.com/combsmith/.github/blob/main/standards/initiatives-project.md) | Project board for tracking org initiatives | What belongs on the board · Fields · Theme → Initiative · How the auto-add works | -| [`persona-standards`](https://github.com/combsmith/.github/blob/main/standards/persona-standards.md) | Agent and Copilot persona guidelines | The trigger matrix (onboarding checklist) · Canary onboarding · Trust, permissions, and safety · Definition of Done | +| [`persona-standards`](https://github.com/combsmith/.github/blob/main/standards/persona-standards.md) | Agent and Copilot persona guidelines | The trigger matrix (the onboarding checklist) · Canary onboarding · Trust, permissions, and safety · Definition of Done | | [`pr-limits`](https://github.com/combsmith/.github/blob/main/standards/pr-limits.md) | Pull request size and scope limits | What is limited · Exempt actors · Reconciliation with the Dependabot cap · Operator runbook | | [`push-protection`](https://github.com/combsmith/.github/blob/main/standards/push-protection.md) | Secret push protection configuration | Layer 1 — GitHub Push Protection · Layer 2 — Local Pre-Commit Prevention · Layer 3 — CI Secret Scanning · Incident Response | -| [`ruleset-remediation-runbook`](https://github.com/combsmith/.github/blob/main/standards/ruleset-remediation-runbook.md) | Steps to remediate ruleset violations | Bypass actors · Legacy rulesets — migrate checks first, then delete · Rollback | +| [`ruleset-remediation-runbook`](https://github.com/combsmith/.github/blob/main/standards/ruleset-remediation-runbook.md) | Steps to remediate ruleset violations | Bypass actors · Legacy rulesets — migrate checks first, THEN delete · Rollback | | [`standards-versioning`](https://github.com/combsmith/.github/blob/main/standards/standards-versioning.md) | Versioning and tagging of standards documents | The two tag forms · Who / what moves it · Cutting a release · N-1 resolvability · Opting in | ## @-Mention Agents @@ -56,6 +60,7 @@ Invoke any agent by typing `@` in a supported surface. | [`compliance-auditor`](https://github.com/combsmith/.github-private/blob/main/agents/compliance-auditor.md) | Audits a repository against combsmith org standards (CI, agent config, repo settings, dependabot, push protection). Reports findings and can auto-fix non-breaking compliance gaps. | | [`feature-ideator`](https://github.com/combsmith/.github-private/blob/main/agents/feature-ideator.md) | Generates feature ideas and improvements for a repository by analyzing its codebase, issues, discussions, and competitive landscape. Produces actionable feature proposals with effort estimates. | | [`pr-reviewer`](https://github.com/combsmith/.github-private/blob/main/agents/pr-reviewer.md) | Multi-tier PR review agent with cascading risk assessment. Classifies PR risk (LOW/MEDIUM/HIGH), runs deep analysis with cross-engine adversarial review, and makes approve/escalate decisions. (Automated event-driven counterpart: [`pr-review-trigger.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/pr-review-trigger.yml).) | +| [`why-not-approved`](https://github.com/combsmith/.github-private/blob/main/agents/why-not-approved.md) | Explains why pr-review has not approved a combsmith pull request, and what would change that, by running the real pr-review gate chain read-only. | ## Automated Workflows @@ -97,9 +102,12 @@ Scheduled reports and dashboards post as issues or workflow-run summaries for ma |---|---| | [`actions-fleet-monitor.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/actions-fleet-monitor.yml) | Actions fleet monitor — org-wide workflow token usage and run anomalies | | [`auto-rebase-health.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/auto-rebase-health.yml) | Daily auto-rebase health report (issue) — rebase success/failure trends | +| [`budget-breaker.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/budget-breaker.yml) | Budget breaker — pauses the agent fleet when the fleet reports quota refusals and lifts its own pause at the reported reset; default off, logs the write it would make until armed (#2153) | +| [`budget-poller.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/budget-poller.yml) | Dry-run Claude budget poller — reads the usage windows twice hourly, logs what the token-budget breaker would do (never sets a variable), and proves the feed is alive (#2029) | | [`daily-pr-review-health.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/daily-pr-review-health.yml) | Daily PR-review health check — flags PR-review agent failures as an issue | | [`docs-health-check.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/docs-health-check.yml) | Docs health check — flags stale/broken docs as an issue | | [`engine-token-liveness.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/engine-token-liveness.yml) | Engine-token liveness monitor — asserts dev-lead/pr-review caller stubs are not failing at the "Engine token preflight" step, and escalates a sustained fleet-wide outage that would otherwise go unalerted (#1587) | +| [`model-ab.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/model-ab.yml) | Manually dispatched Opus 5.5 vs 4.8 held-out A/B + liveness/effort probe | | [`premature-closure-audit.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/premature-closure-audit.yml) | Premature-closure audit — flags issues closed as completed with no merged closing PR, and OPEN issues carrying an unbacked completion claim (#1445) | | [`reviewer-report.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/reviewer-report.yml) | Reviewer scorecard (per workflow-run summary) — per-reviewer PR-review activity | | [`skill-eval-report.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/skill-eval-report.yml) | Skill-eval results report — agent skill pass/fail trends (self-improving-skills pipeline) |