Inventory

⚠️ Staleness notice: This file is manually maintained and may not reflect recently added agents, skills, or instruction files. For a current machine-generated listing:

• Agents: run pwsh scripts/update-metadata.ps1 and see basecoat-metadata.json
• Instructions and skills: browse the instructions/ and skills/ directories directly

This catalog helps teams discover what exists in Base Coat and when to use it.

Name collisions between instructions and skills are allowed. If an instruction and skill share a name (for example, basecoat-10-core-architecture or basecoat-50-security-security), treat them as distinct assets and disambiguate by source path (instructions/ vs skills/) and type.

Instructions

File	Use For	Keywords
instructions/basecoat-10-core-agent-behavior.instructions.md	anti-loop detection and agent behavioral guardrails	agent, behavior, loop, guardrail, anti-pattern
instructions/basecoat-10-core-agents.instructions.md	agent authoring standards	agents, authoring, frontmatter, design
instructions/basecoat-10-core-architecture.instructions.md	architecture, API, and design-diagram guidance	architecture, api, design, diagram, adr
instructions/basecoat-40-azure-azure.instructions.md	basecoat-40-azure-azure application and service guidance	azure, managed identity, key vault, app service
instructions/basecoat-10-core-backend.instructions.md	API, services, data access, basecoat-10-core-backend guardrails	backend, api, refactor, service, basecoat-10-core-reliability
instructions/basecoat-10-core-bicep.instructions.md	basecoat-10-core-bicep authoring, parameters, and deployment hygiene	bicep, bicepparam, module, symbolic name
instructions/basecoat-10-core-config.instructions.md	basecoat-10-core-config file safety and secrets prevention	config, secrets, safety, environment
instructions/basecoat-80-data-data-science.instructions.md	data science, ML workflows, notebooks, medallion lakehouse	data-science, ml, notebook, pipeline, medallion, bronze, silver, gold
instructions/basecoat-10-core-development.instructions.md	shared standards for backend-dev, frontend-dev, middleware-dev, basecoat-80-data-data-tier basecoat-10-core-agents	development, code style, error handling, security, logging, testing, collaboration
instructions/basecoat-10-core-documentation.instructions.md	docs updates and operational notes	docs, readme, changelog, migration, usage
instructions/basecoat-10-core-drift-monitor.instructions.md	detect and prevent configuration drift across environments	drift, monitor, config, environment, consistency
instructions/basecoat-10-core-error-kb.instructions.md	error knowledge base and resolution pattern guidance	error, knowledge-base, resolution, troubleshooting
instructions/basecoat-10-core-frontend.instructions.md	UI, accessibility, responsiveness, basecoat-10-core-frontend changes	frontend, ui, css, accessibility, react
instructions/basecoat-20-lang-governance.instructions.md	repository-wide AI basecoat-20-lang-governance rules	governance, rules, compliance, standards
instructions/basecoat-10-core-mcp.instructions.md	basecoat-10-core-mcp server/tool basecoat-20-lang-governance and safe integration rules	mcp, tools, server, governance, allowlist
instructions/basecoat-10-core-model-routing.instructions.md	cost-aware model selection and fleet dispatch	model, routing, cost, fleet, dispatch, tier
instructions/basecoat-10-core-naming.instructions.md	consistent basecoat-10-core-naming across code and infrastructure	naming, convention, style, files, resources
instructions/basecoat-10-core-nextjs-react19.instructions.md	Next.js and React 19 patterns and conventions	nextjs, react, react19, ssr, server-components
instructions/basecoat-10-core-npm-workspaces.instructions.md	npm workspaces and monorepo conventions	npm, workspaces, monorepo, packages
instructions/basecoat-10-core-output-style.instructions.md	agent output formatting and style guidance	output, style, formatting, markdown
instructions/basecoat-10-core-plan-first.instructions.md	basecoat-10-core-plan-first workflow for basecoat-10-core-agents — think before coding	plan, workflow, think, design, before-coding
instructions/basecoat-10-core-process.instructions.md	delivery lifecycle, sprint, triage, and release basecoat-10-core-process	process, sprint, triage, release, delivery
instructions/basecoat-90-quality-quality.instructions.md	PR review, security, performance, and coverage gates	quality, review, security, performance, coverage
instructions/basecoat-10-core-reliability.instructions.md	resilience, failure modes, basecoat-10-core-observability	reliability, retry, timeout, logging, resilience
instructions/basecoat-50-security-security.instructions.md	secure coding, auth boundaries, secret handling	security, auth, secrets, validation, unsafe
instructions/basecoat-10-core-session-hygiene.instructions.md	clean session context management for basecoat-10-core-agents	session, hygiene, context, cleanup, state
instructions/basecoat-30-ai-tailwind-v4.instructions.md	Tailwind CSS v4 patterns and migration	tailwind, css, v4, utility, design-system
instructions/basecoat-10-core-terraform.instructions.md	basecoat-10-core-terraform authoring for basecoat-40-azure-azure and shared IaC	terraform, azurerm, modules, providers, state
instructions/basecoat-10-core-testing.instructions.md	test expectations with positive and negative coverage	tests, unit test, integration test, regression, positive, negative
instructions/basecoat-50-security-token-economics.instructions.md	token budget awareness and cost-conscious model usage	token, economics, budget, cost, model, optimization
instructions/basecoat-10-core-tool-minimization.instructions.md	reduce unnecessary tool calls for efficiency	tool, minimization, efficiency, calls, overhead
instructions/basecoat-10-core-ux.instructions.md	UX, accessibility, and design-system guidance	ux, accessibility, design, wcag
instructions/basecoat-10-core-verification.instructions.md	verification-driven basecoat-10-core-development — test-first workflow	verification, tdd, test-first, validation
instructions/basecoat-30-ai-ai-verification.instructions.md	risk-tiered basecoat-10-core-verification protocol for AI-generated code	ai, verification, risk, trust, basecoat-90-quality-code-review
instructions/basecoat-10-core-bootstrap-autodetect.instructions.md	auto-detect values in bootstrap scripts without interactive prompts	bootstrap, autodetect, scripting, automation
instructions/basecoat-50-security-bootstrap-github-secrets.instructions.md	provision identity and GitHub Actions secrets in bootstrap scripts	bootstrap, secrets, github-actions, ci-cd
instructions/basecoat-10-core-bootstrap-structure.instructions.md	decomposition, idempotency, and cross-platform requirements for bootstrap scripts	bootstrap, structure, idempotency, cross-platform
instructions/basecoat-60-workflow-ci-firewall.instructions.md	GitHub Actions workflows accessing firewalled basecoat-40-azure-azure resources with single-job runner IP	ci, firewall, azure, github-actions
instructions/basecoat-10-core-cpp.instructions.md	memory safety, concurrency, undefined behavior, and sanitizer validation for C++	cpp, c++, memory-safety, concurrency, sanitizers
instructions/basecoat-10-core-data-workload-testing.instructions.md	medallion pattern basecoat-10-core-testing and data basecoat-90-quality-quality validation for bronze/silver/gold layers	data, medallion, testing, bronze, silver, gold
instructions/basecoat-20-lang-dotnet-dependency-analysis.instructions.md	.NET dependency compatibility and remediation analysis	dotnet, dependency, compatibility, analysis
instructions/basecoat-20-lang-dotnet-test-strategy.instructions.md	.NET modernization test strategy and regression-gate guidance	dotnet, testing, modernization, regression
instructions/basecoat-20-lang-dotnet-upgrade-planning.instructions.md	phased .NET upgrade planning checklist and execution guidance	dotnet, upgrade, planning, migration
instructions/basecoat-10-core-electron.instructions.md	secure basecoat-10-core-electron desktop apps: IPC, CSP, code signing, auto-updates, credential storage	electron, desktop, security, csp, signing
instructions/basecoat-10-core-enterprise-configuration.instructions.md	GitHub Copilot enterprise policy configuration, seat management, basecoat-50-security-security policies	enterprise, copilot, policy, configuration
instructions/basecoat-10-core-fabric-notebooks.instructions.md	Microsoft Fabric notebooks CI/CD, lakehouse integration, and production basecoat-20-lang-governance	fabric, notebooks, lakehouse, ci-cd
instructions/basecoat-10-core-monolith.instructions.md	context scoping, dependency awareness, and safe decomposition for large basecoat-10-core-monolith codebases	monolith, decomposition, context, dependencies
instructions/basecoat-10-core-mutation-testing.instructions.md	mutation basecoat-10-core-testing standards for verifying test basecoat-90-quality-quality and mutation score interpretation	mutation, testing, quality, coverage
instructions/basecoat-10-core-observability.instructions.md	OpenTelemetry instrumentation, trace propagation, structured logging, metrics, and dashboards	observability, opentelemetry, tracing, metrics, logging
instructions/basecoat-20-lang-python.instructions.md	basecoat-20-lang-python conventions for data science, ML pipelines, pandas, scikit-learn, DuckDB, Jupyter	python, data-science, ml, pandas, jupyter
instructions/basecoat-50-security-rbac-authentication.instructions.md	RBAC-only basecoat-40-azure-azure authentication — no shared keys, SAS tokens, or connection strings	rbac, azure, authentication, security, managed-identity
instructions/basecoat-10-core-rest-client-resilience.instructions.md	timeouts, retries, 429 handling, circuit breakers, and structured failure logging for HTTP clients	rest, resilience, retry, circuit-breaker, http
instructions/basecoat-10-core-runtime-debugging.instructions.md	AI-assisted debugging using crash dumps, logs, memory state, and production telemetry	debugging, runtime, crash-dump, telemetry, logs
instructions/basecoat-50-security-secrets-management.instructions.md	never commit secrets, use Vault solutions, implement rotation, and audit access	secrets, vault, rotation, audit, basecoat-50-security-security
instructions/basecoat-50-security-security-monitoring.instructions.md	SIEM integration, alert configuration, detection rules, and incident escalation	security, siem, monitoring, alerts, detection
instructions/basecoat-10-core-terraform-init.instructions.md	basecoat-10-core-terraform init in bootstrap scripts and CI/CD pipelines without blocking automation	terraform, init, bootstrap, ci-cd

Skills

File	Use For	Keywords
skills/agent-design/SKILL.md	agent, instruction, and skill authoring templates	agent, design, authoring, template
skills/api-design/SKILL.md	OpenAPI spec, API governance, and versioning templates	api, openapi, governance, versioning
skills/api-security/SKILL.md	API authentication, authorization, input validation, and rate limiting patterns	skill, api-security, owasp, authentication
skills/app-inventory/SKILL.md	legacy app inventory reports and complexity scoring	inventory, legacy, scanning, complexity
skills/architecture/SKILL.md	ADR, C4 diagram, and tech selection templates	architecture, adr, c4, diagram, tech-selection
skills/azure-container-apps/SKILL.md	deploy, scale, and manage containers on basecoat-40-azure-azure Container Apps with managed identity, health probes, and traffic splitting	azure, container apps, aca, ingress, scale, revision, health probes, managed identity
skills/azure-devops-rest/SKILL.md	basecoat-40-azure-azure DevOps REST API patterns — auth, scopes, pagination, and endpoint taxonomy	skill, azure-devops, rest-api, authentication
skills/azure-identity/SKILL.md	design RBAC hierarchies, managed identities, app registrations, conditional access, and workload identity federation	azure, identity, rbac, managed identity, entra, zero trust, oidc
skills/azure-landing-zone/SKILL.md	enterprise-scale landing zone scaffolding with basecoat-10-core-bicep templates	azure, landing-zone, eslz, caf, basecoat-10-core-bicep
skills/azure-networking/SKILL.md	design basecoat-40-azure-azure hub-spoke topologies, private endpoints, DNS zones, NSG rules, and firewall policies	azure, networking, hub-spoke, vnet, private endpoint, dns, nsg, firewall, cidr, udr
skills/azure-policy/SKILL.md	author custom basecoat-40-azure-azure Policy definitions, initiatives, remediation tasks, and compliance KQL queries	basecoat-40-azure-azure policy, governance, compliance, initiative, remediation, KQL, CIS, NIST, ISO 27001
skills/azure-waf-review/SKILL.md	assess basecoat-40-azure-azure workloads against the five WAF pillars and produce scored findings with remediation templates	azure, well-architected, WAF, reliability, security, cost, performance, operations
skills/backend-dev/SKILL.md	design and implement APIs, service layers, and data access repositories	backend, api, service, repository, error catalog
skills/basecoat/SKILL.md	/basecoat router — discovery and delegation entry point	basecoat, router, discovery, delegation
skills/code-review/SKILL.md	review changes for risk, regressions, and missing tests	review, bug risk, regression, findings
skills/contract-testing/SKILL.md	Consumer-driven contracts, Pact, E2E testing, and mutation basecoat-10-core-testing patterns	skill, contract-testing, pact, cdc
skills/copilot-usage-analytics/SKILL.md	Per-session Copilot CLI cost estimation and basecoat-10-core-model-routing efficiency analysis	skill, copilot, usage, analytics
skills/cqrs-event-sourcing/SKILL.md	CQRS and Event Sourcing for scalable, auditable distributed systems patterns	skill, cqrs, event-sourcing, distributed
skills/create-instruction/SKILL.md	create a new instruction file for a domain	create instruction, applyTo, frontmatter
skills/create-skill/SKILL.md	create a new reusable skill with proper frontmatter	create skill, skill template, customization
skills/data-tier/SKILL.md	design schemas, write migrations, review queries, build data dictionaries	data, schema, migration, query, indexing
skills/database-migration/SKILL.md	Zero-downtime database migrations, blue-green deployments, and rollback	skill, database-migration, zero-downtime, rollback
skills/dev-containers/SKILL.md	VS Code Dev Containers for reproducible dev environments and Codespaces setup	skill, dev-containers, codespaces, reproducible
skills/devops/SKILL.md	CI/CD pipeline, deployment, and rollback templates	devops, cicd, deployment, rollback, github-actions
skills/documentation/SKILL.md	README, runbook, and ADR templates	documentation, readme, runbook, adr
skills/domain-driven-design/SKILL.md	Aggregate patterns, bounded contexts, CQRS, and distributed systems design	skill, ddd, bounded-context, aggregates
skills/dotnet-modernization/SKILL.md	Structured guidance for .NET modernization from assessment through execution	skill, dotnet, modernization, upgrade
skills/e2e-testing/SKILL.md	Production E2E basecoat-10-core-testing with Playwright and Cypress, flakiness prevention, CI/CD	skill, e2e-testing, playwright, cypress
skills/electron-apps/SKILL.md	Build secure basecoat-10-core-electron desktop apps with IPC, CSP, packaging, and auto-updates	skill, electron, desktop, basecoat-50-security-security
skills/entity-framework-migration/SKILL.md	Migrate Entity Framework legacy codebases to modern EF Core patterns	skill, entity-framework, ef-core, migration
skills/environment-bootstrap/SKILL.md	environment setup and bootstrap configuration	environment, bootstrap, setup, configuration
skills/frontend-dev/SKILL.md	build accessible, responsive UI components and manage client state	frontend, ui, component, accessibility, state management
skills/gitops/SKILL.md	GitOps with Flux/ArgoCD, desired-state reconciliation, multi-cluster topology	skill, gitops, flux, argocd
skills/ha-resilience/SKILL.md	Multi-AZ/region architectures, circuit breakers, and SRE chaos practices	skill, high-availability, resilience, chaos-basecoat-10-core-testing
skills/handoff/SKILL.md	structured agent-to-agent handoff protocols	handoff, agent, protocol, transition
skills/human-in-the-loop/SKILL.md	human approval gates and intervention patterns	human, approval, gate, intervention, review
skills/identity-migration/SKILL.md	identity and authentication migration patterns	identity, migration, auth, entra, modernization
skills/manual-test-strategy/SKILL.md	define manual scope, produce charters, checklists, and handoff artifacts	manual testing, exploratory, charter, regression, defect, automation handoff
skills/mcp-development/SKILL.md	basecoat-10-core-mcp server, tool definition, and transport templates	mcp, server, tool, transport, integration
skills/observability/SKILL.md	Guidance for instrumentation, telemetry design, and operational visibility	skill, observability, instrumentation, telemetry
skills/penetration-testing/SKILL.md	OWASP Top 10 coverage, exploitation techniques, and finding reporting patterns	skill, penetration-testing, owasp, vulnerability
skills/performance-profiling/SKILL.md	isolate and measure slow code paths	profiling, performance, latency, hot path
skills/production-readiness/SKILL.md	PRR gates, business continuity planning, disaster recovery, and FMEA templates	skill, production-readiness, bcp, drp
skills/refactoring/SKILL.md	restructure code without changing behavior	refactor, cleanup, simplify, extract, rename
skills/security/SKILL.md	OWASP checklist, STRIDE threat model, and vulnerability templates	security, owasp, stride, threat-model, vulnerability
skills/security-operations/SKILL.md	Threat detection, SIEM rules, and incident response automation patterns	skill, security-operations, siem, detection
skills/github-security-posture/SKILL.md	audit GitHub org and repo basecoat-50-security-security configurations with traffic-light scoring and remediation commands	github, security, posture, audit, rulesets, secret-scanning, dependabot, branch-protection, codeowners
skills/service-bus-migration/SKILL.md	basecoat-40-azure-azure Service Bus migration patterns and guidance	service-bus, migration, messaging, basecoat-40-azure-azure
skills/sprint-management/SKILL.md	sprint planning, backlog grooming, and retrospective templates	sprint, planning, backlog, retrospective
skills/sprint-retrospective/SKILL.md	repo history reconstruction and sprint retrospective templates	sprint, retrospective, history, metrics, tips
skills/supply-chain-security/SKILL.md	Artifact signing, SBOM generation, provenance tracking, and vuln scanning	skill, supply-chain, sbom, signing
skills/tech-debt/SKILL.md	Technical debt management, RICE prioritization, debt budgets, and visualization	skill, tech-debt, prioritization, rice
skills/twelve-factor/SKILL.md	12-Factor App methodology for codebase, config, backing services, and processes	skill, twelve-factor, methodology, cloud-native
skills/ux/SKILL.md	user journey, wireframe, and accessibility audit templates	ux, journey, wireframe, accessibility, audit

Prompts

File	Use For	Keywords
prompts/architect.prompt.md	break down a system or feature before implementation	architecture, design, tradeoffs, plan
prompts/code-review.prompt.md	initiate a focused code review workflow	review, pull request, findings
prompts/bugfix.prompt.md	investigate and fix a bug at the root cause	bugfix, incident, regression, failure

Portal Prompts

Portal-specific prompts live in portal/prompts/ and are not synced to consumer repos.

File	Use For	Keywords
portal/prompts/portal-audit-risk-analysis.prompt.md	analyze audit findings and surface risk themes	audit, risk, compliance, portal
portal/prompts/portal-compliance-mapping.prompt.md	map controls to compliance frameworks (SOC 2, GDPR, HIPAA)	compliance, mapping, controls, portal
portal/prompts/portal-plain-language.prompt.md	rewrite technical content in plain language	plain-language, accessibility, portal
portal/prompts/portal-remediation-planning.prompt.md	create a prioritized remediation plan from audit results	remediation, planning, priority, portal
portal/prompts/portal-threat-analysis.prompt.md	perform threat analysis using STRIDE / OWASP	threat, analysis, stride, owasp, basecoat-50-security-security

basecoat-10-core-agents

File	Use For	Keywords
agents/basecoat-10-core-agent-designer.agent.md	design and author Copilot agent definitions	agent, design, authoring, copilot
agents/basecoat-10-core-agentops.agent.md	manage agent lifecycle, versioning, rollout health, rollback, and retirement	agent, operations, versioning, canary, blue-green, rollback, telemetry
agents/basecoat-10-core-api-designer.agent.md	API design for OpenAPI, REST, GraphQL, and basecoat-20-lang-governance	agent, api, openapi, rest, graphql, versioning
agents/basecoat-50-security-api-security.agent.md	API threat modeling, OWASP API basecoat-50-security-security Top 10 assessment, and secure API design	agent, api-security, owasp, threat-modeling
agents/basecoat-10-core-app-inventory.agent.md	scan legacy apps for project files, NuGet/npm/maven packages, connection strings, external services, framework versions, and migration complexity scores	agent, inventory, legacy, migration, dependencies, csproj, packages, scanning
agents/basecoat-40-azure-azure-landing-zone.agent.md	scaffold enterprise-scale basecoat-40-azure-azure landing zones following CAF/ESLZ	agent, azure, landing-zone, eslz, caf, bicep, terraform, management-groups, hub-networking, policy
agents/basecoat-10-core-backend-dev.agent.md	design and implement APIs, service layers, and data access patterns	agent, backend, api, service, rest, graphql, repository, error handling
agents/basecoat-10-core-chaos-engineer.agent.md	fault injection, game days, resilience scoring, and recovery validation	agent, chaos, resilience, fault-injection, game-day
agents/basecoat-90-quality-code-review.agent.md	multi-step repository review basecoat-10-core-process	agent, review, repo scan, risk
agents/basecoat-50-security-config-auditor.agent.md	scan for committed or unprotected basecoat-10-core-config secrets	agent, config, secrets, audit, basecoat-50-security-security
agents/basecoat-50-security-container-security.agent.md	Container and Kubernetes basecoat-50-security-security — Pod basecoat-50-security-security Standards and runtime basecoat-50-security-security	agent, container, kubernetes, basecoat-50-security-security
agents/basecoat-30-ai-containerization-planner.agent.md	containerization readiness assessment and deployment configuration	agent, container, docker, kubernetes, migration
agents/basecoat-10-core-contract-testing.agent.md	Consumer-driven contracts, E2E basecoat-10-core-testing strategy, and mutation basecoat-10-core-testing	agent, contract-testing, cdc, integration
agents/basecoat-80-data-data-architect.agent.md	Design scalable data architectures, medallion layers, governance, and ETL workflows	agent, data-architecture, medallion, basecoat-20-lang-governance
agents/basecoat-80-data-data-integrity.agent.md	Distributed data integrity — eventual consistency, ACID compliance, and recovery	agent, data-integrity, consistency, recovery
agents/basecoat-80-data-data-tier.agent.md	design schemas, write migrations, optimize queries, and define data access	agent, data, schema, migration, query, indexing, repository
agents/basecoat-60-workflow-data-pipeline.agent.md	medallion lakehouse pipelines (bronze/silver/gold), data basecoat-90-quality-quality gates, feature store integration, and ML pipeline orchestration	agent, data-pipeline, medallion, bronze, silver, gold, delta-lake, feature-store, ml-pipeline, notebook
agents/basecoat-80-data-database-migration.agent.md	Database migrations: schema evolution, zero-downtime upgrades, and modernization	agent, database-migration, schema, zero-downtime
agents/basecoat-80-data-dataops.agent.md	data quality, lineage, governance, orchestration, and drift detection	agent, data, quality, lineage, governance, pipeline
agents/basecoat-10-core-dependency-lifecycle.agent.md	dependency updates, breaking changes, upgrade paths, and migration guides	agent, dependency, update, upgrade, breaking-change
agents/basecoat-10-core-devops-engineer.agent.md	CI/CD, IaC, deployment, rollback, and basecoat-10-core-observability	agent, devops, cicd, iac, deployment, basecoat-10-core-observability
agents/basecoat-30-ai-domain-designer.agent.md	Domain-Driven Design: bounded contexts, aggregate design, and DDD patterns	agent, ddd, bounded-context, aggregates
agents/basecoat-20-lang-dotnet-modernization-advisor.agent.md	.NET modernization assessment, upgrade planning, and execution guidance	agent, dotnet, modernization, upgrade
agents/basecoat-90-quality-e2e-test-strategy.agent.md	E2E basecoat-10-core-testing orchestration, critical paths, and flakiness prevention	agent, e2e-testing, playwright, cypress
agents/basecoat-10-core-exploratory-charter.agent.md	generate time-boxed exploratory sessions with scope, evidence capture, and GitHub Issue filing	agent, exploratory, charter, session, findings
agents/basecoat-10-core-feedback-loop.agent.md	user feedback collection, prompt effectiveness tracking, and A/B basecoat-10-core-testing	agent, feedback, effectiveness, tracking, a-b-basecoat-10-core-testing
agents/basecoat-10-core-finops-advisor.agent.md	FinOps advisor for cloud cost governance, optimization, and chargeback/showback	agent, finops, cost-optimization, cloud-cost
agents/basecoat-10-core-frontend-dev.agent.md	build accessible component-driven UIs with Core Web Vitals targets	agent, frontend, ui, component, accessibility, wcag, state, performance
agents/basecoat-50-security-github-security-posture.agent.md	audit GitHub org and repo basecoat-50-security-security settings: code basecoat-50-security-security configs, rulesets, secret scanning, Dependabot alerts, and branch protection	agent, security, github, posture, audit, rulesets, secret-scanning, dependabot, branch-protection
agents/basecoat-10-core-gitops-engineer.agent.md	Design GitOps workflows for IaC, declarative config, and automated deployment	agent, gitops, argo-cd, flbasecoat-10-core-ux
agents/basecoat-30-ai-guardrail.agent.md	validate outputs against safety, quality, compliance, and formatting rules before delivery	agent, guardrail, validation, safety, compliance, basecoat-90-quality-quality
agents/basecoat-10-core-ha-architect.agent.md	Design high-availability, resilience, and chaos basecoat-10-core-testing for distributed systems	agent, high-availability, resilience, disaster-recovery
agents/basecoat-10-core-hardening-advisor.agent.md	CIS Benchmarks and STIG hardening for Dockerfiles and Kubernetes manifests	agent, hardening, cis, stig
agents/basecoat-10-core-identity-architect.agent.md	basecoat-40-azure-azure RBAC, managed identities, Entra ID app registrations, conditional access, and workload identity federation	agent, identity, rbac, entra, managed-identity, zero-trust
agents/basecoat-60-workflow-incident-responder.agent.md	incident classification, mitigation, communications, and post-incident learning	agent, incident, response, mitigation, postmortem
agents/basecoat-60-workflow-infrastructure-deploy.agent.md	basecoat-40-azure-azure infrastructure deployments using basecoat-10-core-bicep with rollback strategies	agent, infrastructure, deploy, bicep, basecoat-40-azure-azure
agents/basecoat-10-core-issue-triage.agent.md	triage, classify, label, and prioritize GitHub issues	agent, triage, issues, labels, prioritization
agents/basecoat-10-core-legacy-modernization.agent.md	guide Web Forms to Razor Pages migration using the strangler fig pattern for incremental modernization	agent, legacy, modernization, web forms, razor pages, strangler fig, migration
agents/basecoat-10-core-llmops.agent.md	prompt deployment pipelines, model gateway configuration, and inference monitoring	agent, llm, inference, gateway, prompt-deployment
agents/basecoat-90-quality-manual-test-strategy.agent.md	produce a full manual test strategy with rubric, charter, checklist, defect template, and automation backlog	agent, manual testing, strategy, exploratory, automation candidate
agents/basecoat-10-core-mcp-developer.agent.md	basecoat-10-core-mcp servers, tools, and integrations	agent, mcp, tools, server, integration
agents/basecoat-10-core-memory-curator.agent.md	cross-session knowledge extraction, deduplication, and retrieval	agent, memory, knowledge, cross-session, curation
agents/basecoat-10-core-merge-coordinator.agent.md	merge multiple feature branches into a target without interactive git editor hangs	agent, merge, conflict, parallel, branches, rebase, no-edit
agents/basecoat-10-core-middleware-dev.agent.md	design integration layers, message contracts, and resilience patterns	agent, middleware, integration, message, event-driven, circuit breaker, retry
agents/basecoat-30-ai-mlops.agent.md	model lifecycle, experiment tracking, deployment automation, and drift monitoring	agent, mlops, model, experiment, deployment, drift
agents/basecoat-10-core-new-customization.agent.md	choose and create the right customization type	agent, customization, instruction, prompt
agents/basecoat-10-core-observability-engineer.agent.md	OpenTelemetry instrumentation, distributed tracing, and metrics taxonomy	agent, observability, opentelemetry, tracing
agents/basecoat-90-quality-penetration-test.agent.md	basecoat-50-security-security assessments, vulnerability discovery, and remediation workflows (OWASP)	agent, penetration-testing, vulnerability, owasp
agents/basecoat-10-core-performance-analyst.agent.md	profiling, load testing, and performance optimization	agent, performance, profiling, load-test, optimization
agents/basecoat-50-security-policy-as-code-compliance.agent.md	validate policy-as-code rules, automated compliance checks, exceptions, and audit-ready evidence	agent, compliance, policy-as-code, governance, audit, exceptions
agents/basecoat-10-core-product-manager.agent.md	requirements, user stories, acceptance criteria, roadmaps	agent, product, requirements, stories, roadmap
agents/basecoat-10-core-production-readiness.agent.md	Ensure apps meet operational requirements before release; coordinates BCP/DRP	agent, production-readiness, bcp, drp
agents/basecoat-10-core-project-onboarding.agent.md	Base Coat repository onboarding and setup	agent, onboarding, bootstrap, setup
agents/basecoat-10-core-prompt-coach.agent.md	iteratively score, critique, and improve prompts through coaching and revision comparison	agent, prompt, coaching, scoring, critique, token efficiency, iteration
agents/basecoat-10-core-prompt-engineer.agent.md	prompt and system-prompt optimization	agent, prompt, optimization, system-prompt
agents/basecoat-60-workflow-release-impact-advisor.agent.md	release readiness assessment, blast radius analysis, and rollback planning	agent, release, impact, readiness, rollback
agents/basecoat-60-workflow-release-manager.agent.md	versioned release workflow, changelog, tagging, and publishing	agent, release, version, changelog, tag
agents/basecoat-90-quality-resilience-reviewer.agent.md	Code-level resilience: circuit breakers, timeouts, bulkhead, and retry logic	agent, resilience, circuit-breaker, retry
agents/basecoat-60-workflow-retro-facilitator.agent.md	sprint retrospective summary and improvement issue creation	agent, retro, sprint, retrospective, improvement
agents/basecoat-60-workflow-rollout-basecoat.agent.md	onboard a repo to a pinned Base Coat release	agent, rollout, bootstrap, enterprise
agents/basecoat-50-security-secrets-manager.agent.md	Secrets lifecycle: discovery, rotation, expiry scanning, and Vault patterns	agent, secrets, rotation, vault
agents/basecoat-50-security-security-analyst.agent.md	vulnerability assessment, threat modeling, secure code review	agent, security, vulnerability, threat-model
agents/basecoat-50-security-security-monitor.agent.md	Detection engineering and SIEM config; maps MITRE ATT&CK to detection rules	agent, security-monitor, siem, detection
agents/basecoat-50-security-security-operations.agent.md	SOC playbook for threat detection, incident response, and operational basecoat-50-security-security	agent, soc, threat-detection, incident-response
agents/basecoat-60-workflow-self-healing-ci.agent.md	CI failure analysis, log parsing, flaky test detection, and pipeline remediation	agent, ci, failure, flaky-test, remediation
agents/basecoat-10-core-solution-architect.agent.md	system design, C4 diagrams, ADRs, and technology selection	agent, architecture, c4, adr, design
agents/basecoat-10-core-sprint-planner.agent.md	sprint goal-to-issues breakdown and wave planning	agent, sprint, planning, issues, waves
agents/basecoat-10-core-sprint-retrospective.agent.md	reconstruct repo history for sprint retrospectives with metrics and tips	agent, sprint, retrospective, history, metrics
agents/basecoat-10-core-sre-engineer.agent.md	SLOs, error budgets, incident response, chaos engineering, and toil reduction	agent, sre, slo, error-budget, toil
agents/basecoat-10-core-strategy-to-automation.agent.md	convert manual paths into tiered automation candidates and file GitHub Issues for every one	agent, automation, smoke, regression, integration, candidate
agents/basecoat-50-security-supply-chain-security.agent.md	Secure software supply chain with artifact signing, SBOM, and provenance tracking	agent, supply-chain, sbom, signing
agents/basecoat-10-core-tech-writer.agent.md	technical docs, runbooks, tutorials, and changelogs	agent, docs, runbook, tutorial, changelog
agents/basecoat-10-core-ux-designer.agent.md	journey mapping, wireframes, and accessibility audits	agent, ux, journey, wireframe, accessibility

basecoat-10-core-documentation Assets

File	Use For	Keywords
docs/documentation-heading-scaffolds.md	shared heading templates for common basecoat-10-core-documentation types	docs, headings, template, scaffold
docs/prd-and-spec-guidance.md	guidance and templates for PRDs and technical specs	prd, spec, requirements, design
docs/repo-template-standard.md	standard for bootstrapping and enforcing Base Coat in templates	template, governance, drift, enforcement
docs/MULTI_AGENT_WORKFLOWS.md	structure parallel agent sprints to minimize merge conflicts; branch naming; merge order; fresh clone principle	multi-agent, parallel, sprint, merge, conflict, branch
docs/app-inventory.md	conceptual guide for legacy app scanning: parameters, complexity scoring, output formats, and downstream integration	inventory, legacy, scanning, dependencies, complexity, migration
docs/treatment-matrix.md	decision framework mapping complexity scores and strategic value to Retire/Rehost/Replatform/Refactor/Rebuild/Replace treatment paths	treatment, migration, retire, rehost, replatform, refactor, rebuild, replace

Operational Assets

File	Use For	Keywords
scripts/validate-basecoat.sh	local and CI validation on macOS and Linbasecoat-10-core-ux	validate, bash, ci, frontmatter
scripts/validate-basecoat.ps1	local and CI validation on Windows	validate, powershell, ci, frontmatter
scripts/install-git-hooks.sh	configure local git hooks for basecoat-30-ai-guardrail enforcement	hooks, git, security, pre-commit
scripts/install-git-hooks.ps1	configure local git hooks for basecoat-30-ai-guardrail enforcement	hooks, git, security, pre-commit
scripts/scan-commit-messages.sh	scan commit messages for secrets and PII patterns	commit-msg, security, secrets, pii
.githooks/commit-msg	block commits when message contains sensitive data	hook, commit-msg, security, pii
scripts/package-basecoat.sh	create release artifacts on macOS and Linbasecoat-10-core-ux	package, tar.gz, zip, checksum
scripts/package-basecoat.ps1	create release artifacts on Windows	package, zip, checksum, powershell
scripts/audit-assets.ps1	basecoat-90-quality-quality scoring rubric for all assets; outputs table/markdown/JSON; grades A–F; max 10 pts per asset	audit, quality, scoring, grade, powershell
scripts/check-coherence.ps1	cross-asset conflict detection: orphaned skill refs, keyword contradictions, scope overlaps, deprecated refs, duplicate descriptions; non-blocking CI warning	coherence, conflict, orphaned, contradiction, powershell
scripts/adoption/detect-basecoat.ps1	per-repo adoption detection; -AssetDetail flag enables per-asset adoption rate across consumer repos	adoption, detect, consumer, asset-detail, powershell
.github/workflows/validate-basecoat.yml	validate repo structure on push and pull request	workflow, ci, validation
.github/workflows/validate-repo-template-sample.yml	validate sample repository template assets and contracts	workflow, template, governance, ci
.github/workflows/prd-spec-gate.yml	enforce PRD/spec references on risky or large pull requests	workflow, prd, spec, basecoat-20-lang-governance
.github/workflows/asset-health.yml	weekly Monday 08:00 UTC health report; posts to GitHub Step Summary; opens issue if any asset grades F	workflow, health, weekly, grade, issue
.github/workflows/package-basecoat.yml	package and publish release artifacts	workflow, release, package, artifact
.github/workflows/stale-asset-alerts.yml	alert consumer repos when their synced BaseCoat assets go stale after a new release; opens issues in stale consumer repos on tag push	workflow, alerts, consumer, stale, drift, release
.github/PULL_REQUEST_TEMPLATE.md	pull request template with PRD/spec reference fields	pull request, template, prd, spec
examples/workflows/bootstrap-from-release.yml	install a pinned Base Coat release into a new repo	workflow, bootstrap, pinned release
examples/workflows/validate-basecoat-consumer.yml	validate a consumer repo keeps Base Coat present	workflow, consumer, drift, validation
.github/template-repos/repo-template/.github/base-coat.lock.json	lock file contract for template-based Base Coat pinning	template, lock, pinned version
.github/template-repos/repo-template/.github/workflows/bootstrap-basecoat-template.yml	bootstrap Base Coat in a new repo from lock file	template, bootstrap, release, checksum
.github/template-repos/repo-template/.github/workflows/enforce-basecoat-template.yml	enforce lock/version consistency and block unsafe drift	template, enforcement, drift, policy

Test Assets

File	Use For	Keywords
tests/run-tests.ps1	smoke tests for validation, packaging, hooks, and commit-message scanning on Windows	test, powershell, smoke, packaging
tests/run-tests.sh	smoke tests for validation, packaging, hooks, and commit-message scanning on macOS and Linbasecoat-10-core-ux	test, bash, smoke, packaging
tests/quality-gate-tests.ps1	CI-blocking basecoat-90-quality-quality gate: enforces avg score ≥ 5.0, red% ≤ 50%, no zero-score assets, all category avgs ≥ 4.0	test, quality-gate, ci, powershell, scoring
tests/README.md	test suite scope and execution commands	tests, docs, usage

Current Asset Addendum

The tables below are generated from the current repository contents to keep the inventory complete.

Agents

File	Use For	Keywords
agents/basecoat-10-core-bom-validator.agent.md	Use when validating a Workcell BOM against the plant registry before S2 starts. USE FOR: schema validation, CAF naming checks, circular dependency detection, and GitHub check results. DO NOT USE FOR: runtime state merges or cutover decisions.	basecoat, 10, core, bom, validator
agents/basecoat-10-core-branch-hygiene-sweeper.agent.md	Use when cleaning stale branches, dangling refs, and release branch hygiene while preserving active work. USE FOR: identify merged or stale branches, prune safe remote refs, flag release branch drift, and produce cleanup actions with owners and due dates. DO NOT USE FOR: deleting branches with open PRs, changing branch protection, or resolving merge conflicts.	basecoat, 10, core, branch, hygiene, sweeper
agents/basecoat-10-core-change-isolation-architect.agent.md	Designs layered CI/CD isolation so independent domains (for example mobile, database, portal, extension, and infra) can evolve and release separately without cross-triggered pipeline noise.	basecoat, 10, core, change, isolation, architect
agents/basecoat-10-core-definition-of-done.agent.md	Validate that a feature, PR, or release meets the Definition of Done before closing. Enforces testing evidence, config verification, response validation, and acceptance criteria. USE FOR: check PR meets DoD, validate acceptance criteria, verify release readiness. DO NOT USE FOR: writing acceptance criteria, implementing features.	basecoat, 10, core, definition, of, done
agents/basecoat-10-core-dependency-blocker-monitor.agent.md	Use when monitoring workcell BOM dependencies and cell health to open or resolve blocker issues when a cell fails or recovers. USE FOR: read workcell BOM dependencies, monitor cell deployment status, create blocker issues, and resolve them on recovery. DO NOT USE FOR: general incident response, application code, or one-off issue triage.	basecoat, 10, core, dependency, blocker, monitor
agents/basecoat-10-core-dependency-update-advisor.agent.md	Reviews Dependabot pull requests and posts a structured risk assessment comment: semver bump type, breaking change likelihood, suggested test focus areas, and known CVE context. USE FOR: assess Dependabot PR risk, evaluate semver bump safety, get CVE context for dependency update. DO NOT USE FOR: creating Dependabot config, general code review.	basecoat, 10, core, dependency, update, advisor
agents/basecoat-10-core-escalation-router.agent.md	Use when high-risk decisions need a human approver and a PR-comment approval trail. USE FOR: release signoff, irreversible changes, compliance gates. DO NOT USE FOR: routine automation.	basecoat, 10, core, escalation, router
agents/basecoat-10-core-factory-conductor.agent.md	Use when reading .factory-state.json and auto-queuing the next ready wave of factory work. USE FOR: route S2/S3/S4 work, batch dispatch by wave, and ping the right follow-up workflow. DO NOT USE FOR: state normalization, BOM validation, or product backlog prioritization.	basecoat, 10, core, factory, conductor
agents/basecoat-10-core-factory-state-curator.agent.md	Use when merging Workcell intake YAML, GitHub labels, and gate results into a single S1-S5 state snapshot. USE FOR: normalize station state, publish .factory-state.json, reconcile blockers, and surface stale work. DO NOT USE FOR: implementing product code or changing workflow policy.	basecoat, 10, core, factory, state, curator
agents/basecoat-10-core-memory-promoter.agent.md	Analyzes session transcripts and sprint summaries to identify high-value patterns for promotion to long-term BaseCoat memory contributions. USE FOR: extract reusable patterns from session transcripts, identify conventions worth promoting to BaseCoat memory, review sprint summaries for learnings. DO NOT USE FOR: writing code or instructions directly, real-time session assistance.	basecoat, 10, core, memory, promoter
agents/basecoat-10-core-orchestrator.agent.md	Multi-agent orchestrator for complex, cross-domain tasks. USE FOR: decomposing large goals into subtasks, routing work to specialist agents, coordinating parallel execution, monitoring progress and escalating blockers, aggregating results. DO NOT USE FOR: simple single-agent tasks, real-time requirements, direct implementation.	basecoat, 10, core, orchestrator
agents/basecoat-10-core-orphaned-pr-cleanup.agent.md	Use when identifying and resolving stale or orphaned pull requests that have no active owner, blocked reviews, or outdated mergeability status. USE FOR: detect PRs without recent activity, classify close/revive/merge candidates, request ownership reassignment, and produce cleanup actions with SLA windows. DO NOT USE FOR: code implementation work, deep architecture design, or replacing release governance decisions.	basecoat, 10, core, orphaned, pr, cleanup
agents/basecoat-10-core-rca.agent.md	Root Cause Analysis agent for deep-dive incident investigations, hypothesis testing, and prevention follow-up. USE FOR: run post-incident root cause analysis, trace production outage to contributing factors, generate 5-why analysis report. DO NOT USE FOR: live incident triage and containment, general performance tuning.	basecoat, 10, core, rca
agents/basecoat-10-core-replanning-engine.agent.md	Use when S2 assessment data shows the work is far larger than estimated and a replanning decision is needed. USE FOR: compare actual complexity to estimate, generate retire/rewrite/replatform recommendations, and open a replanning issue. DO NOT USE FOR: routine triage or deployment execution.	basecoat, 10, core, replanning, engine
agents/basecoat-10-core-s4-shadow-mode-validator.agent.md	Use when comparing shadow-mode and live behavior during S4 soak before cutover. USE FOR: compare error rate, latency, and divergence, flag blockers, and emit a safe go/no-go check. DO NOT USE FOR: state curation or general monitoring.	basecoat, 10, core, s4, shadow, mode, validator
agents/basecoat-10-core-sprint-project-mapper.agent.md	Use when issues/PRs need clustering into meaningful sprint/project groups and rollup metrics for planning or release notes. USE FOR: grouping by sprint/wave/tags, computing issue-PR-LOC-cycle-time metrics, validating group size significance, and producing release-note-ready summaries. DO NOT USE FOR: code implementation, CI/CD deployment, or one-off issue editing.	basecoat, 10, core, sprint, project, mapper
agents/basecoat-10-core-station-bottleneck-analyzer.agent.md	Use when analyzing takt-time JSON to compute queue length and throughput by station, rank bottlenecks, and file the weekly bottleneck report issue. USE FOR: station-level queue pressure, throughput trends, weekly issue filing, and follow-up actions. DO NOT USE FOR: dispatching work or changing replanning policy.	basecoat, 10, core, station, bottleneck, analyzer
agents/basecoat-10-core-takt-time-tracker.agent.md	Use when measuring dwell time at each station and flagging SLA breaches. USE FOR: compute median and p95 time at S1-S5, identify bottlenecks, and export dashboard-ready JSON. DO NOT USE FOR: dispatching work or making replanning decisions.	basecoat, 10, core, takt, time, tracker
agents/basecoat-30-ai-daily-standup-facilitator.agent.md	Use when running daily standup ceremonies to surface blockers, dependencies, and near-term execution risk. USE FOR: extract actionable updates, identify blockers needing escalation, map dependencies across team members, and produce a day plan with owners. DO NOT USE FOR: writing feature code, replacing sprint planning, or long-term roadmap analysis.	basecoat, 30, ai, daily, standup, facilitator
agents/basecoat-30-ai-failure-pattern-process.agent.md	Failure pattern process agent for evidence-first mining, raw logging, triage, and enhancement planning. USE FOR: mining failure signals across issues/PRs/CI/logs/incidents, producing append-only raw findings logs, classifying common versus repo-specific patterns with rationale, and building prioritized enhancement plans with early-detection gates. DO NOT USE FOR: implementing feature code changes, auto-remediating production incidents, or bypassing evidence and gate requirements.	basecoat, 30, ai, failure, pattern, process
agents/basecoat-50-security-ci-audit.agent.md	CI/CD audit agent for GitHub organization auditing. USE FOR: auditing GitHub organization CI/CD settings, enterprise policies, runner configurations, dependencies, and installed apps. DO NOT USE FOR: writing application code, general code reviews, infrastructure-as-code development unrelated to CI/CD auditing.	basecoat, 50, security, ci, audit
agents/basecoat-50-security-guidance-author.agent.md	BaseCoat guidance documentation author. USE FOR: creating security playbooks and best practices, authoring new instruction files and agent templates, writing skill documentation, drafting guidance framework updates. DO NOT USE FOR: incident response, operational tasks, code implementation.	basecoat, 50, security, guidance, author
agents/basecoat-50-security-instruction-auditor.agent.md	Detects missing instruction coverage for a repo — identifies tech stacks and workflow patterns present in the codebase that have no corresponding BaseCoat instruction file in the overlay. USE FOR: find uncovered tech stacks in a repo overlay, audit BaseCoat instruction file gaps, identify missing workflow pattern coverage. DO NOT USE FOR: writing new instruction files, general code review.	basecoat, 50, security, instruction, auditor
agents/basecoat-50-security-sprint-closeout-auditor.agent.md	Use when closing a sprint and validating completion evidence before planning the next sprint. USE FOR: verify merged PR coverage, confirm CI health, identify unresolved errors and open issues, check test evidence, and produce carry-forward actions with owners. DO NOT USE FOR: writing feature code, replacing incident postmortems, or long-term roadmap prioritization.	basecoat, 50, security, sprint, closeout, auditor
agents/basecoat-60-workflow-broken-build-troubleshooter.agent.md	Use when CI or local builds are failing and the team needs fast, repeatable triage to isolate root cause and restore green status. USE FOR: classify failure signatures, pinpoint failing stage/test/toolchain segment, propose minimal safe remediation, and generate a fix validation checklist. DO NOT USE FOR: feature implementation, long-form architecture documents, or security incident response ownership.	basecoat, 60, workflow, broken, build, troubleshooter
agents/basecoat-60-workflow-ci-failure-escalation.agent.md	Detects N consecutive CI failures on the same workflow job, opens a blocking issue, and gates further deploys to that environment — the andon cord / halt-the-line pattern for CI/CD pipelines. USE FOR: gate deploys on CI failures, open blocking issues, enforce halt-line policy. DO NOT USE FOR: fixing failing tests, writing CI config.	basecoat, 60, workflow, ci, failure, escalation
agents/basecoat-60-workflow-release-freeze-enforcer.agent.md	Use when enforcing release freeze windows, routing exception requests, and coordinating branch access during a freeze. USE FOR: evaluate freeze exceptions, block unauthorized merge attempts, and publish go/no-go decisions for frozen branches. DO NOT USE FOR: merging changes, bypassing approvals, or resolving code conflicts.	basecoat, 60, workflow, release, freeze, enforcer
agents/basecoat-60-workflow-release-readiness-chair.agent.md	Use when facilitating release readiness ceremonies and making explicit go/no-go decisions. USE FOR: collect release evidence across quality, operations, and rollback readiness; identify unresolved launch risks; enforce gate criteria; and publish decision records with owners and due dates. DO NOT USE FOR: implementing feature code, replacing incident response command, or product roadmap planning.	basecoat, 60, workflow, release, readiness, chair
agents/basecoat-60-workflow-run-history-cleanup.agent.md	Cleans GitHub Actions workflow run history safely by deleting stale, completed runs according to retention policy while preserving evidence for active incidents and compliance windows. USE FOR: pruning old completed workflow runs, reducing run-history noise, enforcing run-retention policy, and producing a cleanup report. DO NOT USE FOR: deleting in-progress runs, deleting runs tied to active incidents, changing workflow YAML retention-days, or bypassing compliance retention rules.	basecoat, 60, workflow, run, history, cleanup
agents/basecoat-60-workflow-task-scope-validator.agent.md	Task scope validator for sub-agent dispatch. Analyzes task prompts to detect overscope, ambiguity, and risk before forwarding to explore, task, or general-purpose agents. USE FOR: validate task prompts pre-dispatch, classify tasks as automatable/gather-only/defer, identify scope refinement needs. DO NOT USE FOR: executing tasks, writing implementation code, or modifying task prompts without user feedback.	basecoat, 60, workflow, task, scope, validator
agents/basecoat-90-quality-guidance-reviewer.agent.md	Use when validating a BaseCoat guidance draft (instruction, skill, agent, prompt) before committing. Checks lint rules, required sections, frontmatter schema, and BaseCoat conventions. Returns a structured pass/fail verdict with actionable fixes.	basecoat, 90, quality, guidance, reviewer
agents/orchestrator.agent.md	Compatibility alias for the orchestrator agent. Preserves the legacy filename while the prefixed BaseCoat agent is the canonical source. USE FOR: routing multi-step workflows, coordinating parallel agents, tracking execution state. DO NOT USE FOR: single-step tasks, user-facing triage, direct tool calls.	orchestrator

Skills

File	Use For	Keywords
skills/agentops-audit/SKILL.md	Audits agent definitions, routing configurations, and tool bindings. USE FOR: reviewing agent definitions for correctness, assessing tool routing logic, validating tool bindings, evaluating prompt quality, analyzing agent behavior consistency. DO NOT USE FOR: writing agents from scratch, designing agent architectures, implementing tools, general code review.	agentops, audit
skills/api-audit/SKILL.md	Audits API endpoint designs, contracts, versioning strategies, and error handling. USE FOR: reviewing API endpoint definitions, validating request/response contracts, assessing error handling patterns, evaluating versioning strategies, analyzing documentation completeness. DO NOT USE FOR: implementing API endpoints, writing backend code, database design, frontend development, infrastructure setup.	api, audit
skills/azure-identity-audit/SKILL.md	Use when reviewing Azure identity and access designs across RBAC, managed identities, Entra ID, and federation. USE FOR: audit RBAC assignments, managed identity scope, app registration permissions, OIDC federation, least privilege. DO NOT USE FOR: network topology design, app feature code, non-Azure IAM platforms.	azure, identity, audit
skills/azure-linux-app-service/SKILL.md	Use when deploying or operating Python, Ruby, or Node.js apps on Azure App Service Linux. USE FOR: deploy a Flask or FastAPI app to App Service Linux, configure a startup command for a Node app, set up a deployment slot swap, stream Azure App Service logs, choose between code deploy and container deploy. DO NOT USE FOR: Windows App Service configuration, AKS ingress tuning, desktop app packaging.	azure, linux, app, service
skills/azure-policy-audit/SKILL.md	Use when reviewing Azure Policy definitions, initiatives, exemptions, remediation tasks, or compliance reporting. USE FOR: audit policy coverage, remediation completeness, exemption hygiene, policy drift, compliance reporting. DO NOT USE FOR: app business logic, RBAC-only questions, generic troubleshooting.	azure, policy, audit
skills/backend-audit/SKILL.md	Audits generated or implemented backend code output. Evaluates code quality, testing coverage, performance, security, and maintainability. USE FOR: reviewing backend implementations, analyzing code quality, assessing test coverage, identifying performance bottlenecks, security vulnerabilities, structural debt. DO NOT USE FOR: writing backend code from scratch, database schema design, API contract design, frontend code review, infrastructure provisioning.	backend, audit
skills/backlog-burndown/SKILL.md	Use when managing backlog burn-down and flow health across a sprint window or milestone. USE FOR: build burn-down tables from issue and open-PR state changes, detect spillover risk from velocity and remaining scope, prioritize blockers to protect sprint goals, and produce daily backlog status updates with explicit actions. DO NOT USE FOR: writing implementation code, replacing sprint retrospective analysis, or setting annual portfolio strategy.	backlog, burndown
skills/bom-schema/SKILL.md	Use when defining or validating BOM schemas, resource ID formats, required cells, or naming conventions. USE FOR: JSON schema for BOM validation, required-field checks, and template creation. DO NOT USE FOR: unrelated app schemas or general data-model design.	bom, schema
skills/bom-validation/SKILL.md	Validates Workcell BOMs against plant registry and CAF naming rules. USE FOR: validating BOM completeness before S2, detecting circular dependencies, enforcing CAF naming compliance, checking registry references before handoff. DO NOT USE FOR: approving incomplete BOMs, inferring missing resources, writing application code, running release/deployment tasks.	bom, validation
skills/build-failure-triage/SKILL.md	Use when diagnosing failed builds to quickly isolate fault class and restore delivery flow. USE FOR: identify first failing stage, map log signatures to likely causes, recommend smallest safe fix path, and produce validation checklist for CI and local runs. DO NOT USE FOR: writing new feature code, replacing incident commander workflows, or making unreviewed production changes.	build, failure, triage
skills/change-isolation/SKILL.md	Use when designing or reviewing monorepo workflow isolation so independent layers (mobile, database, portal, extension, infra) can build, test, and release separately. USE FOR: define path-based lane boundaries, isolate deploy workflows by layer, design independent versioning lanes, audit cross-trigger coupling in GitHub Actions, create release lane contracts. DO NOT USE FOR: implementing application feature logic, writing database queries unrelated to CI/CD boundaries, or generic project planning without workflow scope.	change, isolation
skills/ci-audit/SKILL.md	Audits GitHub organization CI/CD settings and runner configurations. USE FOR: auditing CI/CD settings, analyzing runners, scanning dependencies, generating optimization recommendations, creating audit findings. DO NOT USE FOR: writing application code, code reviews, database schema design, creating GitHub Actions workflows, infrastructure-as-code development unrelated to CI/CD auditing.	ci, audit
skills/ci-flake-quarantine/SKILL.md	Use when isolating flaky CI tests with evidence-based quarantine windows and expiry policy. USE FOR: confirm flakiness, quarantine only after repeat evidence, and produce owner/expiry tracking. DO NOT USE FOR: hiding failures, permanently disabling tests, or replacing root-cause remediation.	ci, flake, quarantine
skills/container-build-assessment/SKILL.md	Assess Docker build readiness with composable scripts that analyze Dockerfile structure, inspect dependency footprint, estimate image size, and report security posture in structured JSON suitable for automation and remediation planning.	container, build, assessment
skills/container-migration/SKILL.md	Scaffold containerization of a legacy app for Azure Container Apps or Kubernetes with Dockerfile, health probes, and deployment assets. USE FOR: containerize this legacy app, create a Dockerfile for production, migrate app to Azure Container Apps, add Kubernetes manifests and health checks, set up ACR build and push workflow. DO NOT USE FOR: simple VM deployment without containers, tuning application business logic, non-container desktop packaging.	container, migration
skills/cross-stack-modernization/SKILL.md	Language-agnostic modernization guidance for incrementally replacing legacy applications using strangler fig, ACLs, and risk scoring. USE FOR: plan legacy app modernization strategy, choose rewrite versus refactor versus replace, design strangler fig migration, sequence service extraction by dependency risk, decide database-first or UI-first migration. DO NOT USE FOR: greenfield system design, minor bug fixes in one service, container-only deployment setup.	cross, stack, modernization
skills/data-tier-audit/SKILL.md	Use when reviewing schemas, migrations, indexes, query plans, or data contract safety. USE FOR: audit schema drift, migration rollback safety, index health, query risk, repository patterns. DO NOT USE FOR: UI copywriting, infrastructure-only tasks, generic code review.	data, tier, audit
skills/decision-log-capture/SKILL.md	Use when capturing ceremony outcomes into durable decision records. USE FOR: document decision, rationale, options considered, owner, and follow-up actions from standup, sprint, and release ceremonies. DO NOT USE FOR: writing implementation code, replacing full ADR workflows, or generating marketing content.	decision, log, capture
skills/dependency-blocker-monitoring/SKILL.md	Use when monitoring workcell BOM dependencies and cell health so blocker issues are opened when a cell fails and resolved when it recovers. USE FOR: dependency maps, cell health checks, blocker issue creation, and recovery closures. DO NOT USE FOR: general project tracking or unrelated CI triage.	dependency, blocker, monitoring
skills/devops-audit/SKILL.md	Audits CI/CD pipelines, deployment configurations, and environment management. USE FOR: reviewing GitHub Actions workflows, analyzing deployment processes, validating environment configurations, assessing automation completeness, identifying workflow bottlenecks. DO NOT USE FOR: implementing CI/CD workflows from scratch, infrastructure provisioning, application code development, database administration.	devops, audit
skills/docs-site/SKILL.md	Scaffold a MkDocs Material documentation site with GitHub Pages deployment, navigation, and starter content for a repository. USE FOR: create a docs site for this repo, set up MkDocs Material, publish documentation to GitHub Pages, generate getting-started docs with diagrams, add docs CI workflow. DO NOT USE FOR: writing a single inline code comment, building an app frontend, creating product marketing landing pages.	docs, site
skills/escalation-routing/SKILL.md	Use when routing high-risk decisions to the right human approver with a PR-comment approval trail. USE FOR: release signoff, irreversible changes, compliance gates. DO NOT USE FOR: routine automation.	escalation, routing
skills/factory-state-machine/SKILL.md	Use when defining factory state transitions, reading or writing .github/factory-state.json, or orchestrating workcell workflow gates. USE FOR: intake/complete/pending transitions, auto-proceed rules, escalation checks, and state validation. DO NOT USE FOR: general app state management or unrelated workflow docs.	factory, state, machine
skills/failure-pattern-process/SKILL.md	Use when running the failure-pattern consumer process from mining through enhancement planning. USE FOR: evidence mining, append-only raw finding capture, common-versus-local triage with rationale, and prioritized enhancement planning with early-detection gates. DO NOT USE FOR: implementing repository feature changes, incident hotfix execution, or unsupported analysis without evidence links.	failure, pattern, process
skills/frontend-audit/SKILL.md	Use when reviewing frontend implementations, component output, responsive behavior, accessibility states, or UI consistency. USE FOR: audit generated UI, review a PR for WCAG or responsive issues, verify interaction states and copy consistency, check performance-sensitive patterns. DO NOT USE FOR: building UI features from scratch, backend API design, database schema modeling.	frontend, audit
skills/git-worktrees/SKILL.md	Use when isolating parallel tasks, experiments, or hotfixes into separate working directories. USE FOR: create isolated workspace for feature branch, run parallel tasks without stashing, set up clean environment for risky experiment, manage multiple branches simultaneously, clean up stale worktrees. DO NOT USE FOR: simple branch switching, single-task linear workflows, repos with submodule-heavy setups that complicate worktrees.	git, worktrees
skills/infrastructure-audit/SKILL.md	Audits Infrastructure-as-Code (Bicep/Terraform), resource configurations, and networking. USE FOR: reviewing IaC code quality, validating resource configurations, assessing networking architecture, identifying security misconfigurations, analyzing cost optimization opportunities. DO NOT USE FOR: writing IaC from scratch, provisioning infrastructure, network architecture design, application development, DevOps workflow creation.	infrastructure, audit
skills/issue-triage/SKILL.md	Audits GitHub issues for quality, validity, duplicates, labels, and priority. USE FOR: backlog hygiene and duplicate detection, validating closed issues have resolution evidence, enforcing label/type/priority conventions, auditing titles and relationships. DO NOT USE FOR: implementing product features, writing deployment pipelines, editing application runtime code, running non-triage project planning.	issue, triage
skills/landing-zone-audit/SKILL.md	Use when reviewing Azure landing zone designs, management group hierarchies, hub/spoke patterns, policy baselines, or vending completeness. USE FOR: audit landing zone designs, verify hierarchy and platform subscriptions, check policy baseline coverage, review vending readiness. DO NOT USE FOR: single-resource deployment, AWS org design, application code generation.	landing, zone, audit
skills/lexicon/SKILL.md	Use when defining or auditing a project's vocabulary, taxonomy, ontology, and brand voice so docs, agents, and prompts use consistent canonical terms. USE FOR: create project lexicon file, audit docs for terminology drift, define naming taxonomy for assets, detect off-brand tone or vibe mismatches, standardize canonical product terms. DO NOT USE FOR: copyediting grammar only, generating logos or visuals, source code refactoring unrelated to language.	lexicon
skills/mcp-audit/SKILL.md	Audits MCP server implementations, tool definitions, and schema compliance. USE FOR: reviewing MCP server code quality, validating tool definitions, assessing schema compliance, identifying integration issues, evaluating error handling. DO NOT USE FOR: implementing MCP servers from scratch, designing tool specifications, writing client applications, general code review.	mcp, audit
skills/memory-promoter/SKILL.md	Use when mining completed sessions and sprint summaries for reusable patterns that should be promoted into long-term team memory. USE FOR: extract recurring fix patterns, rank memory candidates by frequency and impact, produce contribution-ready memory payloads, filter ephemeral or secret content before memory submission. DO NOT USE FOR: writing production code, real-time troubleshooting during active debugging, or storing personal/project-sensitive data.	memory, promoter
skills/merge-conflict-mediator/SKILL.md	Use when a merge conflict needs a deterministic playbook for docs, config, manifests, or release artifacts. USE FOR: classify conflict types, choose a merge policy, and hand a resolution plan to merge-coordinator. DO NOT USE FOR: auto-resolving source code conflicts, silently dropping dependency changes, or bypassing human review.	merge, conflict, mediator
skills/orphaned-pr-triage/SKILL.md	Use when triaging stale pull requests and review backlog to keep repository flow healthy. USE FOR: identify orphaned PRs by inactivity windows, classify revive/close/escalate actions, draft maintainer comments for ownership handoff, and produce weekly cleanup reports with metrics. DO NOT USE FOR: implementing code changes, rewriting product requirements, or replacing security vulnerability triage.	orphaned, pr, triage
skills/public-safe-sanitization/SKILL.md	Converts internal material to public-safe artifacts. USE FOR: sanitizing roadmap/issue notes for sharing, redacting private URLs/customer names/IDs, producing public-safe summaries with redaction ledger, rewriting internal details into generic guidance. DO NOT USE FOR: publishing raw internal notes, preserving sensitive identifiers, generating legal/compliance determinations, creating unrelated product plans.	public, safe, sanitization
skills/receiving-code-review/SKILL.md	Use when responding to pull request review feedback. Covers acknowledging comments, categorizing severity, addressing changes, and re-requesting review. USE FOR: address PR review comments, respond to code review feedback, categorize review items, re-request review after changes, resolve review threads. DO NOT USE FOR: performing initial code review, writing review comments on others' PRs, general PR creation.	receiving, code, review
skills/release-audit/SKILL.md	Use when reviewing release readiness, changelog quality, version bumps, tags, or publish completeness. USE FOR: audit a release candidate, verify semver and changelog entries, check tag and release note completeness, review rollback readiness. DO NOT USE FOR: cutting the release, planning sprint work, debugging product bugs, deployment troubleshooting.	release, audit
skills/release-notes/SKILL.md	Use when drafting or updating release notes from commits, pull requests, tags, waves, or sprints. USE FOR: create release notes for a version, summarize changes since a tag, generate notes by wave/sprint labels, produce internal or customer-facing changelog drafts, and structure upgrade notes with traceability. DO NOT USE FOR: release readiness audits, deployment execution, rollback operations, or post-release production incident troubleshooting.	release, notes
skills/rollout-basecoat/SKILL.md	Use when refreshing a consumer repository to the latest BaseCoat build or a pinned BaseCoat release tag. USE FOR: refresh basecoat, update basecoat in a consumer repo, run sync.ps1 or sync.sh with .basecoat.yml defaults, verify installed basecoat version after sync, recover when rollout-basecoat skill invocation fails. DO NOT USE FOR: editing BaseCoat framework internals, designing new agents or skills, running unrelated CI/CD deployments.	rollout, basecoat
skills/s4-deployment-checklist/SKILL.md	Use when preparing an S4 cutover, shadow-mode soak, rollback validation, or deployment readiness review. USE FOR: checklist-driven release gating, rollback testing, monitoring readiness, and team briefing. DO NOT USE FOR: generic release notes or unrelated sprint planning.	s4, deployment, checklist
skills/s4-rollback-testing/SKILL.md	Designs and runs S4 rollback drills and recovery tests. USE FOR: building repeatable rollback rehearsal workflows, verifying rollback activation after soak windows, sequencing deploy/wait/rollback/verify/smoke-test steps, documenting drill outcomes for readiness checks. DO NOT USE FOR: skipping rollback verification, treating deploy success as rollback proof, implementing application features, drafting unrelated communications.	s4, rollback, testing
skills/skill-scripts/SKILL.md	Use when a skill needs executable multi-step workflows where each script produces structured JSON that is passed to the next step, enabling composable assessment, planning, validation, and execution with clear contracts.	skill, scripts
skills/sprint-closeout-audit/SKILL.md	Use when auditing sprint closure readiness with explicit pass/fail evidence for merge state, CI health, unresolved errors, open issues, and test execution. USE FOR: run end-of-sprint completion checklist, validate carry-forward decisions, produce closeout report for leadership, and gate next-sprint planning until closure criteria are explicit. DO NOT USE FOR: feature implementation, architecture design, or standalone incident response.	sprint, closeout, audit
skills/sprint-closeout/SKILL.md	Use when closing a sprint and preparing handoff artifacts for the next planning cycle. USE FOR: run closeout checklist across goals, completed work, spillover items, and unresolved blockers; produce release notes inputs and stakeholder summary; capture carry-forward actions with owners and due dates; and package evidence for retrospective and planning. DO NOT USE FOR: coding features, replacing incident postmortems, or long-term roadmap prioritization.	sprint, closeout
skills/sprint-planner/SKILL.md	Compatibility routing skill for sprint planning requests that resolve to skill(sprint-planner). USE FOR: sprint goal decomposition, wave/dependency planning, issue breakdown planning, and next-sprint commitment shaping. DO NOT USE FOR: implementing product code changes, CI/build remediation, or production incident response.	sprint, planner
skills/sprint-project-mapper/SKILL.md	Use when mapping issue/PR items into meaningful sprint or project groups. USE FOR: clustering by sprint/wave/project tags, split-vs-merge debate, and release-note metric rollups. DO NOT USE FOR: code implementation, issue-by-issue triage cleanup, or deployment execution.	sprint, project, mapper
skills/standup-signal-extraction/SKILL.md	Use when extracting actionable standup signals from team updates. USE FOR: convert updates into blockers/actions/dependencies, prioritize escalations, and produce owner-based daily execution plans. DO NOT USE FOR: feature implementation, deep architecture design, or retrospective trend analysis.	standup, signal, extraction
skills/station-bottleneck-analyzer/SKILL.md	Use when analyzing takt-time JSON to calculate queue length and throughput by station, rank bottlenecks, and draft the weekly bottleneck report issue. USE FOR: station-level queue pressure, throughput trends, bottleneck ranking, and weekly issue filing. DO NOT USE FOR: dispatching work or changing routing policy.	station, bottleneck, analyzer
skills/takt-time-measurement/SKILL.md	Use when measuring takt time, exporting throughput metrics, or building a GitHub Actions workflow that captures timing data. USE FOR: workflow templates, takt calculations, and metric export guidance. DO NOT USE FOR: general project management or unrelated observability tasks.	takt, time, measurement
skills/task-decomposition/SKILL.md	Use when breaking complex tasks into sub-agent-friendly chunks, validating automation fitness, and composing multi-step prompts. USE FOR: split large tasks into smaller async work items, decide if work is automatable vs research vs deferred, validate sub-agent prompts for clarity, design task decomposition workflows. DO NOT USE FOR: single-step code changes, immediate sync problem-solving, architectural design starting from scratch.	task, decomposition

Instructions

File	Use For	Keywords
instructions/architecture.instructions.md	BaseCoat compatibility alias for architecture guidance. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	architecture
instructions/basecoat-10-core-agent-routing.instructions.md	Use when deciding which agent tier to invoke for a task. Provides cost-aware, security-conscious agent routing to avoid mismatches between task requirements and agent capabilities.	basecoat, 10, core, agent, routing
instructions/basecoat-10-core-escalation-criteria.instructions.md	Use when deciding whether work should escalate for design review, approval, or compliance sign-off.	basecoat, 10, core, escalation, criteria
instructions/basecoat-10-core-hrm-execution.instructions.md	HRM Phase 2 — Formal layer contracts, two-dimensional routing matrix, guidance signals, and agent decomposition scope rules for the BaseCoat execution hierarchy.	basecoat, 10, core, hrm, execution
instructions/basecoat-10-core-intent-routing.instructions.md	Intent prefix routing — interprets user-defined prefixes to determine urgency, timing, and which agents or skills to invoke. Applies to all conversations.	basecoat, 10, core, intent, routing
instructions/basecoat-10-core-j2ee-jakarta-ee.instructions.md	Use when migrating J2EE / Jakarta EE applications. Covers namespace migration, EJB modernization, Azure deployment targets, Strangler Fig decomposition, database migration, and auth modernization.	basecoat, 10, core, j2ee, jakarta, ee
instructions/basecoat-10-core-memory-index.instructions.md	L2 memory index. Loads at session start to prime fast pattern recall. Maps trigger contexts to known high-confidence patterns and subject tags for deeper retrieval. Keep under 500 tokens — index only, no full memories.	basecoat, 10, core, memory, index
instructions/basecoat-10-core-public-guidance.instructions.md	Use when converting internal roadmap or feedback into a separate public-safe guidance artifact.	basecoat, 10, core, public, guidance
instructions/basecoat-10-core-s4-safety-gates.instructions.md	Use when defining S4 cutover safety gates, including shadow-mode validation, rollback testing, and on-call review.	basecoat, 10, core, s4, safety, gates
instructions/basecoat-10-core-shearing-layers.instructions.md	Shearing Layers design framework — guides contributors and AI agents to reason about change velocity and coupling between BaseCoat layers.	basecoat, 10, core, shearing, layers
instructions/basecoat-10-core-subagent-review.instructions.md	Defines a two-stage review protocol for subagent task output. Stage 1 checks spec compliance, Stage 2 checks code quality. Applies when orchestrating multi-agent work.	basecoat, 10, core, subagent, review
instructions/basecoat-10-core-tdd-enforcement.instructions.md	Enforces RED-GREEN-REFACTOR test-driven development as a sequence gate for implementation work. Applies to feature code, bug fixes, and refactors in source directories.	basecoat, 10, core, tdd, enforcement
instructions/basecoat-10-core-trm-reflexion.instructions.md	TRM (Tiny Recursive Model) Reflexion loop for intent classification and turn budget estimation. Apply whenever classifying task intent or tracking progress against a turn budget.	basecoat, 10, core, trm, reflexion
instructions/basecoat-20-lang-django.instructions.md	Use when working on Django applications targeting Azure. Covers Azure deployment targets, production configuration, PostgreSQL, Entra ID OIDC auth, Redis sessions, and CI/CD.	basecoat, 20, lang, django
instructions/basecoat-20-lang-java-spring-boot.instructions.md	Conventions for Java Spring Boot projects targeting Azure: deployment targets, containerization, database migration, auth modernization, and CI/CD patterns.	basecoat, 20, lang, java, spring, boot
instructions/basecoat-20-lang-ruby-on-rails.instructions.md	Conventions for Ruby on Rails projects targeting Azure: deployment targets, containerization, database migration, auth modernization, and CI/CD patterns.	basecoat, 20, lang, ruby, on, rails
instructions/basecoat-40-azure-azure-app-configuration.instructions.md	Use when working with Azure App Configuration — centralizing feature flags, application settings, and dynamic configuration for Azure-hosted applications.	basecoat, 40, azure, azure, app, configuration
instructions/basecoat-40-azure-azure-service-connector.instructions.md	Use when working with Azure Service Connector — connecting App Service, Container Apps, AKS, or Azure Functions to backing services (databases, storage, cache, messaging) using passwordless authentication.	basecoat, 40, azure, azure, service, connector
instructions/basecoat-50-security-copilot-github-token-bootstrap.instructions.md	Use when configuring COPILOT_GITHUB_TOKEN for gh-aw workflows. Enforces repo-level secret setup, least-privilege token guidance, and non-echo handling for PAT input.	basecoat, 50, security, copilot, github, token, bootstrap
instructions/basecoat-50-security-entra-oidc-user-auth.instructions.md	Use when implementing human user authentication via browser — Authorization Code Flow with PKCE, confidential client flows, MSAL token caching, and Entra ID app registration. Complements bac-authentication.instructions.md which covers service-to-service managed identity.	basecoat, 50, security, entra, oidc, user, auth
instructions/basecoat-60-workflow-factory-orchestration.instructions.md	Use when editing factory orchestration workflows, state files, escalation paths, or Workcell triggers.	basecoat, 60, workflow, factory, orchestration
instructions/basecoat-60-workflow-high-stakes-workflow.instructions.md	Enforces a mandatory sequential workflow for high-stakes changes. Prevents skipping phases when work involves architecture, public APIs, multi-agent dispatch, or new features with broad impact.	basecoat, 60, workflow, high, stakes, workflow
instructions/basecoat-60-workflow-multi-repo-orchestration.instructions.md	Multi-repo orchestration guidance for hub-and-spoke CI/CD patterns using workflow_dispatch.	basecoat, 60, workflow, multi, repo, orchestration
instructions/basecoat-60-workflow-workflow-file-integrity.instructions.md	Guard against silent GitHub Actions workflow file corruption and enforce checksum validation when programmatically modifying workflow YAML.	basecoat, 60, workflow, workflow, file, integrity
instructions/basecoat-60-workflow-workflow-integrity.instructions.md	Prevent common GitHub Actions workflow security vulnerabilities including script injection, credential embedding, and unpinned actions.	basecoat, 60, workflow, workflow, integrity
instructions/ci-firewall.instructions.md	BaseCoat compatibility alias for CI/CD runner firewall management. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	ci, firewall
instructions/documentation.instructions.md	BaseCoat compatibility alias for documentation guidance. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	documentation
instructions/governance.instructions.md	BaseCoat compatibility alias for governance rules. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	governance
instructions/intent-routing.instructions.md	BaseCoat compatibility alias for intent prefix routing. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	intent, routing
instructions/observability.instructions.md	BaseCoat compatibility alias for observability guidance. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	observability
instructions/plan-first.instructions.md	BaseCoat compatibility alias for the plan-first workflow. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	plan, first
instructions/rbac-authentication.instructions.md	BaseCoat compatibility alias for RBAC-only Azure authentication. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	rbac, authentication
instructions/security.instructions.md	BaseCoat compatibility alias for security guidance. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	security
instructions/ux.instructions.md	BaseCoat compatibility alias for UX guidance. Preserves the legacy filename while the prefixed BaseCoat instruction is the canonical source.	ux

Prompts

File	Use For	Keywords
prompts/integrate.prompt.md	Integrate BaseCoat into a repository and run a baseline audit. Invoke with a GitHub repo URL or run from inside the target repo. Works in GitHub Copilot CLI, VS Code Copilot Chat, and any editor with Copilot Chat support.	integrate
prompts/plan-sharedStandardsRepo.prompt.md	Use when planning a shared standards repository with auto-sync capabilities for GitHub Copilot customizations across teams.	plan, sharedStandardsRepo