Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,10 +22,11 @@ agents/ # Copilot custom agent profiles (org-wide)
compliance-auditor.md # Org standards compliance checking
feature-ideator.md # Feature idea generation
pr-reviewer.md # Multi-tier cascading PR review
why-not-approved.md # Explains why a PR has not been approved
prompts/ # Prompt libraries used by workflows
scripts/ # Shell orchestration for GitHub Actions
frameworks/ # Installed agentic frameworks (git subtree)
bmad-bgreat-suite/ # bmad-bgreat-suite @ ae8914e84b87: SRE, DevOps, and Security agents
bmad-bgreat-suite/ # bmad-bgreat-suite @ ae8914e84b87: SRE and DevOps agents and workflows
bmad-method/ # BMAD-METHOD v6.8.0: multi-agent development lifecycle
bmad-test-architecture/ # bmad-method-test-architecture-enterprise v1.19.0
.github/workflows/ # Scheduled automation (PR review, health checks)
Expand All @@ -35,10 +36,11 @@ frameworks/ # Installed agentic frameworks (git subtree)

| Agent | Purpose | Invoke with |
|-------|---------|-------------|
| [`agentic-workflows`](agents/agentic-workflows.md) | Agentic workflow orchestration | `@agentic-workflows` in any org repo |
| [`compliance-auditor`](agents/compliance-auditor.md) | Audit repo against org standards | `@compliance-auditor` in any org repo |
| [`agentic-workflows`](agents/agentic-workflows.md) | Authoring, updating, debugging, and compiling gh-aw agentic workflow markdown files | `@agentic-workflows` in any org repo |
| [`compliance-auditor`](agents/compliance-auditor.md) | Audit repo against org standards (CI, agent config, repo settings, dependabot, push protection) and auto-fix non-breaking gaps | `@compliance-auditor` in any org repo |
| [`feature-ideator`](agents/feature-ideator.md) | Generate and prioritize feature ideas | `@feature-ideator` in any org repo |
| [`pr-reviewer`](agents/pr-reviewer.md) | Cascading PR review (triage → deep → security audit) with cross-engine adversarial review (see also [`pr-review-trigger.yml`](.github/workflows/pr-review-trigger.yml) for scheduled automation) | `@pr-reviewer` in any org PR |
| [`why-not-approved`](agents/why-not-approved.md) | Explains why pr-review has not approved a PR, and what would change that, by running the real pr-review gate chain read-only | `@why-not-approved` in any org PR |

## Automated Workflows

Expand Down Expand Up @@ -67,9 +69,12 @@ Scheduled workflows post reports and dashboards as issues or run summaries for m
|----------|---------|
| [`actions-fleet-monitor.yml`](.github/workflows/actions-fleet-monitor.yml) | Actions fleet monitor — org-wide workflow token usage and run anomalies |
| [`auto-rebase-health.yml`](.github/workflows/auto-rebase-health.yml) | Daily auto-rebase health report (issue) — rebase success/failure trends |
| [`budget-breaker.yml`](.github/workflows/budget-breaker.yml) | Budget breaker — pauses the agent fleet when the fleet reports quota refusals and lifts its own pause at the reported reset; default off, logs the write it would make until armed (#2153) |
| [`budget-poller.yml`](.github/workflows/budget-poller.yml) | Dry-run Claude budget poller — reads the usage windows twice hourly, logs what the token-budget breaker would do (never sets a variable), and proves the feed is alive (#2029) |
| [`daily-pr-review-health.yml`](.github/workflows/daily-pr-review-health.yml) | Daily PR-review health check — flags PR-review agent failures as an issue |
| [`docs-health-check.yml`](.github/workflows/docs-health-check.yml) | Docs health check — flags stale/broken docs as an issue |
| [`engine-token-liveness.yml`](.github/workflows/engine-token-liveness.yml) | Engine-token liveness monitor — asserts dev-lead/pr-review caller stubs are not failing at the "Engine token preflight" step, and escalates a sustained fleet-wide outage that would otherwise go unalerted (#1587) |
| [`model-ab.yml`](.github/workflows/model-ab.yml) | Manually dispatched Opus 5.5 vs 4.8 held-out A/B + liveness/effort probe |
| [`premature-closure-audit.yml`](.github/workflows/premature-closure-audit.yml) | Premature-closure audit — flags issues closed as completed with no merged closing PR, and OPEN issues carrying an unbacked completion claim (#1445) |
| [`reviewer-report.yml`](.github/workflows/reviewer-report.yml) | Reviewer scorecard (per workflow-run summary) — per-reviewer PR-review activity |
| [`skill-eval-report.yml`](.github/workflows/skill-eval-report.yml) | Skill-eval results report — agent skill pass/fail trends (self-improving-skills pipeline) |
Expand All @@ -96,6 +101,7 @@ Notable subtopics are listed below to aid discoverability; see the standards dir
| [`agent-standards`](https://github.com/combsmith/.github/blob/main/standards/agent-standards.md) | Required files, compliance exemptions, AgentShield CI workflow, decision-making reusables, BMAD Method Workflows |
| [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | Staged promotion through concentric rings, reusable workflow versioning (`stable` channel), action pinning policy, permissions policy, Dev-Lead Agent |
| [`codeowners-standard`](https://github.com/combsmith/.github/blob/main/standards/codeowners-standard.md) | Team composition, required setup for new bots, branch protection, verified end-to-end |
| [`commercial-support-standard`](https://github.com/combsmith/.github/blob/main/standards/commercial-support-standard.md) | Purpose & scope, canonical README section, standard commercial offerings & rate card, repository adoption guidelines |
| [`copilot-instructions-standard`](https://github.com/combsmith/.github/blob/main/standards/copilot-instructions-standard.md) | Canonical instruction files, adding a new language, required sections, content quality rules |
| [`dependabot-policy`](https://github.com/combsmith/.github/blob/main/standards/dependabot-policy.md) | Configuration files, auto-merge workflow, vulnerability audit CI check, applying to a repository |
| [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | AI/ML vendor & lab sources, developer tooling changelogs, security & compliance sources, newsletters, podcasts |
Expand Down
26 changes: 17 additions & 9 deletions profile/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,17 @@ standards, and agentic infrastructure.
| [.github](https://github.com/combsmith/.github) | Organization-wide GitHub configuration and workflows | Shell |
| [.github-private](https://github.com/combsmith/.github-private) | Org-wide Copilot custom agents and agentic workflow infrastructure | Shell |
| [ContentTwin](https://github.com/combsmith/ContentTwin) | AI-powered Social Media Agent for small organizations — enterprise-quality social presence at non-profit pricing | Shell |
| [TalkTerm](https://github.com/combsmith/TalkTerm) | | HTML |
| [TalkTerm](https://github.com/combsmith/TalkTerm) | | Shell |
Comment thread
don-petry marked this conversation as resolved.
Resolved
| [bmad-bgreat-suite](https://github.com/combsmith/bmad-bgreat-suite) | BMad Operations Suite — SRE and DevOps agents and workflows for the BMad Method ecosystem | Shell |
| [broodly](https://github.com/combsmith/broodly) | A test implementation of the BMAD method | HTML |
| [broodminder-export](https://github.com/combsmith/broodminder-export) | Extract all of your data from the BroodMinder API into portable files — resumable, rate-limit-aware. | Python |
| [broodminder-data](https://github.com/combsmith/broodminder-data) | Unified Python client, CLI, bulk export, periodic delta sync, OpenAPI 3.1 spec, and MCP server for BroodMinder beehive data | Python |
| [empower-personal-dashboard](https://github.com/combsmith/empower-personal-dashboard) | Modern Python client and CLI for the Empower Personal Dashboard (formerly Personal Capital) API with 2FA, session persistence, balances, holdings, and transactions. | Python |
| [google-app-scripts](https://github.com/combsmith/google-app-scripts) | A place to share Google AppScripts for personal productivity | JavaScript |
| [incubator](https://github.com/combsmith/incubator) | Product incubator: pre-product idea Discussions, decision briefs/PRD-lite, and disposable POCs. Ideas graduate to their own product repo once a POC proves out. Front-of-funnel for the .github-private ideation pipeline. | Shell |
| [incubator](https://github.com/combsmith/incubator) | Product incubator: pre-product idea Discussions, decision briefs/PRD-lite, and disposable POCs. Ideas graduate to their own product repo once a POC proves out. Front-of-funnel for the .github-private ideation pipeline. | Python |
| [markets](https://github.com/combsmith/markets) | | HTML |
| [repo-template](https://github.com/combsmith/repo-template) | Org template repository: one-click scaffold for new combsmith repos. Files via 'Use this template'; non-file standards via bootstrap. See epic combsmith/.github-private#964. | Shell |
| [software-factory](https://github.com/combsmith/software-factory) | | Python |
| [software-factory-canary](https://github.com/combsmith/software-factory-canary) | Throwaway repo for the Factory's platform trials. Nothing here is depended on. | — |

## Standards & Practices

Expand All @@ -26,21 +29,22 @@ Engineering standards live in

| Standard | Purpose | Key sections |
|---|---|---|
| [`advanced-security`](https://github.com/combsmith/.github/blob/main/standards/advanced-security.md) | GitHub Advanced Security configuration | Enablement via Code Security Configurations · Push-protection live-fire test (canary) · Licensing & billing · Compliance audit checks |
| [`advanced-security`](https://github.com/combsmith/.github/blob/main/standards/advanced-security.md) | GitHub Advanced Security configuration | Enablement Mechanism — Code Security Configurations · Push-protection live-fire test (canary) · Licensing & billing · Compliance audit checks |
| [`agent-rate-limits`](https://github.com/combsmith/.github/blob/main/standards/agent-rate-limits.md) | Per-agent token budget and rate-limit controls | What is limited · The token-budget breaker · Canary scope (enforcing vs log-only) · Status — signed off and wired (Phase 4) · Exempt actors — sanctioned, not a misconfiguration · Operator runbook |
| [`agent-standards`](https://github.com/combsmith/.github/blob/main/standards/agent-standards.md) | Guidelines for building and deploying AI agents | Required Files · Compliance Exemptions · AgentShield CI Workflow · Decision-Making Reusables · BMAD Method Workflows |
| [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | CI/CD pipeline conventions | Staged promotion through concentric rings · Action Pinning Policy · Permissions Policy · Required Workflows · Dev-Lead Agent |
| [`ci-standards`](https://github.com/combsmith/.github/blob/main/standards/ci-standards.md) | CI/CD pipeline conventions | Staged promotion through concentric rings · Reusable workflow versioning — the `stable` channel · Action Pinning Policy · Permissions Policy · Dev-Lead Agent |
| [`codeowners-standard`](https://github.com/combsmith/.github/blob/main/standards/codeowners-standard.md) | CODEOWNERS file requirements | Team Composition · Required Setup for New Bots · Branch Protection |
| [`commercial-support-standard`](https://github.com/combsmith/.github/blob/main/standards/commercial-support-standard.md) | Commercial support offerings and README section | Purpose & Scope · Canonical README Section · Standard Commercial Offerings & Rate Card · Repository Adoption Guidelines |
| [`copilot-instructions-standard`](https://github.com/combsmith/.github/blob/main/standards/copilot-instructions-standard.md) | Copilot custom instruction guidelines | Canonical Instruction Files · Required Sections · Content Quality Rules |
| [`dependabot-policy`](https://github.com/combsmith/.github/blob/main/standards/dependabot-policy.md) | Dependency update and automerge policy | Dependabot Templates · Auto-Merge Workflow · Vulnerability Audit CI Check · CODEOWNERS Approval Timing |
| [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | Sources and process for feature ideation | AI / ML — Vendor & Lab Primary Sources · Developer Tooling & Platform Changelogs · Security & Compliance · Conferences |
| [`github-settings`](https://github.com/combsmith/.github/blob/main/standards/github-settings.md) | Repository settings baselines | Repository Rulesets · Organization-Level Secrets · GitHub Apps & Integrations · Labels — Standard Set · Compliance Audit Process |
| [`feature-ideation-sources`](https://github.com/combsmith/.github/blob/main/standards/feature-ideation-sources.md) | Sources and process for feature ideation | AI / ML — Vendor & Lab Primary Sources · Developer Tooling, DevEx & Platform Changelogs · Security & Compliance · Conferences |
| [`github-settings`](https://github.com/combsmith/.github/blob/main/standards/github-settings.md) | Repository settings baselines | Repository Rulesets · Organization-Level Secrets for Standard CI · GitHub Apps & Integrations · Labels — Standard Set · Compliance Audit Process |
| [`gitignore-standard`](https://github.com/combsmith/.github/blob/main/standards/gitignore-standard.md) | `.gitignore` management with a two-layer (secrets + ecosystem) model | Two-Layer Model · L1 — Secrets baseline (org-managed, verbatim, required) · L2 — Ecosystem / OS extension · Managed-block markers · Compliance check |
| [`initiatives-project`](https://github.com/combsmith/.github/blob/main/standards/initiatives-project.md) | Project board for tracking org initiatives | What belongs on the board · Fields · Theme → Initiative · How the auto-add works |
| [`persona-standards`](https://github.com/combsmith/.github/blob/main/standards/persona-standards.md) | Agent and Copilot persona guidelines | The trigger matrix (onboarding checklist) · Canary onboarding · Trust, permissions, and safety · Definition of Done |
| [`persona-standards`](https://github.com/combsmith/.github/blob/main/standards/persona-standards.md) | Agent and Copilot persona guidelines | The trigger matrix (the onboarding checklist) · Canary onboarding · Trust, permissions, and safety · Definition of Done |
| [`pr-limits`](https://github.com/combsmith/.github/blob/main/standards/pr-limits.md) | Pull request size and scope limits | What is limited · Exempt actors · Reconciliation with the Dependabot cap · Operator runbook |
| [`push-protection`](https://github.com/combsmith/.github/blob/main/standards/push-protection.md) | Secret push protection configuration | Layer 1 — GitHub Push Protection · Layer 2 — Local Pre-Commit Prevention · Layer 3 — CI Secret Scanning · Incident Response |
| [`ruleset-remediation-runbook`](https://github.com/combsmith/.github/blob/main/standards/ruleset-remediation-runbook.md) | Steps to remediate ruleset violations | Bypass actors · Legacy rulesets — migrate checks first, then delete · Rollback |
| [`ruleset-remediation-runbook`](https://github.com/combsmith/.github/blob/main/standards/ruleset-remediation-runbook.md) | Steps to remediate ruleset violations | Bypass actors · Legacy rulesets — migrate checks first, THEN delete · Rollback |
| [`standards-versioning`](https://github.com/combsmith/.github/blob/main/standards/standards-versioning.md) | Versioning and tagging of standards documents | The two tag forms · Who / what moves it · Cutting a release · N-1 resolvability · Opting in |

## @-Mention Agents
Expand All @@ -56,6 +60,7 @@ Invoke any agent by typing `@<agent-name>` in a supported surface.
| [`compliance-auditor`](https://github.com/combsmith/.github-private/blob/main/agents/compliance-auditor.md) | Audits a repository against combsmith org standards (CI, agent config, repo settings, dependabot, push protection). Reports findings and can auto-fix non-breaking compliance gaps. |
| [`feature-ideator`](https://github.com/combsmith/.github-private/blob/main/agents/feature-ideator.md) | Generates feature ideas and improvements for a repository by analyzing its codebase, issues, discussions, and competitive landscape. Produces actionable feature proposals with effort estimates. |
| [`pr-reviewer`](https://github.com/combsmith/.github-private/blob/main/agents/pr-reviewer.md) | Multi-tier PR review agent with cascading risk assessment. Classifies PR risk (LOW/MEDIUM/HIGH), runs deep analysis with cross-engine adversarial review, and makes approve/escalate decisions. (Automated event-driven counterpart: [`pr-review-trigger.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/pr-review-trigger.yml).) |
| [`why-not-approved`](https://github.com/combsmith/.github-private/blob/main/agents/why-not-approved.md) | Explains why pr-review has not approved a combsmith pull request, and what would change that, by running the real pr-review gate chain read-only. |

## Automated Workflows

Expand Down Expand Up @@ -97,9 +102,12 @@ Scheduled reports and dashboards post as issues or workflow-run summaries for ma
|---|---|
| [`actions-fleet-monitor.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/actions-fleet-monitor.yml) | Actions fleet monitor — org-wide workflow token usage and run anomalies |
| [`auto-rebase-health.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/auto-rebase-health.yml) | Daily auto-rebase health report (issue) — rebase success/failure trends |
| [`budget-breaker.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/budget-breaker.yml) | Budget breaker — pauses the agent fleet when the fleet reports quota refusals and lifts its own pause at the reported reset; default off, logs the write it would make until armed (#2153) |
| [`budget-poller.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/budget-poller.yml) | Dry-run Claude budget poller — reads the usage windows twice hourly, logs what the token-budget breaker would do (never sets a variable), and proves the feed is alive (#2029) |
| [`daily-pr-review-health.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/daily-pr-review-health.yml) | Daily PR-review health check — flags PR-review agent failures as an issue |
| [`docs-health-check.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/docs-health-check.yml) | Docs health check — flags stale/broken docs as an issue |
| [`engine-token-liveness.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/engine-token-liveness.yml) | Engine-token liveness monitor — asserts dev-lead/pr-review caller stubs are not failing at the "Engine token preflight" step, and escalates a sustained fleet-wide outage that would otherwise go unalerted (#1587) |
| [`model-ab.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/model-ab.yml) | Manually dispatched Opus 5.5 vs 4.8 held-out A/B + liveness/effort probe |
| [`premature-closure-audit.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/premature-closure-audit.yml) | Premature-closure audit — flags issues closed as completed with no merged closing PR, and OPEN issues carrying an unbacked completion claim (#1445) |
| [`reviewer-report.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/reviewer-report.yml) | Reviewer scorecard (per workflow-run summary) — per-reviewer PR-review activity |
| [`skill-eval-report.yml`](https://github.com/combsmith/.github-private/blob/main/.github/workflows/skill-eval-report.yml) | Skill-eval results report — agent skill pass/fail trends (self-improving-skills pipeline) |
Expand Down
Loading