fix(ms-ai-architect): RX-P1 installert-modus-hardening — ${CLAUDE_PLUGIN_ROOT}-forankring + scoped agent-delegering [skip-docs]
- Forankre 115 skills/-KB-stier med ${CLAUDE_PLUGIN_ROOT}/ i 26 commands + 10 agenter
(relative stier resolver kun dev-modus; installert fra katalog mistet subagentene KB-last)
- Foren delegering til registrert scoped navn ms-ai-architect:<agent>
(var: architect:X feil-namespace + bare navn + general-purpose+"Read agents/X.md")
- Dropp redundant "Read/Les agents/X.md"-instruks (scoped agent auto-laster egen kropp)
- Bevar per-kommando KB-kontrakt inkl. dpia betinget data-residens-ruting (Option B)
- generate-skills: sonnet→opus (opus-direktiv), {PLUGIN_ROOT}→${CLAUDE_PLUGIN_ROOT};
git-pathspecs holdt repo-relative
- plugin.json repository: ktg-plugin-marketplace→ms-ai-architect (polyrepo egen repo)
- validate-plugin.sh Check 6 (install-safety lint: sti + delegering + opus-only) + node-wrapper i kanonisk suite
This commit is contained in:
parent
9e5e4a338a
commit
5b05009b44
39 changed files with 247 additions and 148 deletions
|
|
@ -40,7 +40,7 @@ Et kompakt sammendrag av virksomhetskonteksten injiseres ambient i hovedøkten v
|
|||
|
||||
### 1. Read Template
|
||||
|
||||
Read `skills/ms-ai-advisor/references/architecture/adr-template.md` for the MADR v3.0 format.
|
||||
Read `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/adr-template.md` for the MADR v3.0 format.
|
||||
|
||||
### 2. Parse Input
|
||||
|
||||
|
|
|
|||
|
|
@ -23,17 +23,17 @@ You are a Norwegian regulatory compliance specialist focused on EU AI Act assess
|
|||
## Knowledge Base References
|
||||
|
||||
Read relevant files from:
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-classification-methodology.md` — **OBLIGATORISK:** 4-stegs klassifiseringsmetodikk
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-provider-obligations.md` — Provider-forpliktelser Art. 9-27
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-deployer-obligations.md` — Deployer-forpliktelser Art. 26-27
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-fria-template.md` — FRIA-mal Art. 27
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-conformity-assessment.md` — Samsvarsvurdering Annex IV/VI/VII
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-transparency-notices.md` — Art. 13/50 transparensnotiser
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-microsoft-tools-mapping.md` — Artikkel-til-verktøy-mapping
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-compliance-guide.md` — Generell compliance-veileder
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-annex-iii-checklist.md` — Annex III sjekkliste med beslutningstre
|
||||
- `skills/ms-ai-governance/references/norwegian-public-sector-governance/norge-ai-strategy-government.md` — Norsk AI-strategi
|
||||
- `skills/ms-ai-governance/references/norwegian-public-sector-governance/forvaltningsloven-ai-decisions.md` — Forvaltningsloven og AI
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-classification-methodology.md` — **OBLIGATORISK:** 4-stegs klassifiseringsmetodikk
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-provider-obligations.md` — Provider-forpliktelser Art. 9-27
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-deployer-obligations.md` — Deployer-forpliktelser Art. 26-27
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-fria-template.md` — FRIA-mal Art. 27
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-conformity-assessment.md` — Samsvarsvurdering Annex IV/VI/VII
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-transparency-notices.md` — Art. 13/50 transparensnotiser
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-microsoft-tools-mapping.md` — Artikkel-til-verktøy-mapping
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-compliance-guide.md` — Generell compliance-veileder
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-annex-iii-checklist.md` — Annex III sjekkliste med beslutningstre
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/norge-ai-strategy-government.md` — Norsk AI-strategi
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/forvaltningsloven-ai-decisions.md` — Forvaltningsloven og AI
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
|
|||
|
|
@ -63,7 +63,7 @@ For høyrisiko-systemer, verifiser:
|
|||
- [ ] **FRIA gjennomført (Art. 27):** Obligatorisk for offentlig sektor-deployers
|
||||
|
||||
**Ekstra KB-referanse:**
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-conformity-assessment.md`
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-conformity-assessment.md`
|
||||
|
||||
### 3. Utredningsinstruksen (Analysis Requirements)
|
||||
- **Problem description**: Clear problem statement, affected parties identified
|
||||
|
|
@ -156,12 +156,12 @@ Read the architecture proposal. Extract:
|
|||
|
||||
### 2. Load Reference Knowledge
|
||||
Read relevant knowledge base files:
|
||||
- `skills/ms-ai-advisor/references/architecture/decision-trees.md` — Platform selection validation
|
||||
- `skills/ms-ai-advisor/references/architecture/security.md` — Security best practices
|
||||
- `skills/ms-ai-advisor/references/architecture/public-sector-checklist.md` — Norwegian compliance checklist
|
||||
- `skills/ms-ai-advisor/references/architecture/ai-utredning-template.md` — Utredningsinstruksen template
|
||||
- `skills/ms-ai-advisor/references/architecture/cost-models.md` — Cost estimation patterns
|
||||
- `skills/ms-ai-advisor/references/architecture/licensing-matrix.md` — License requirements
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/decision-trees.md` — Platform selection validation
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/security.md` — Security best practices
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/public-sector-checklist.md` — Norwegian compliance checklist
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/ai-utredning-template.md` — Utredningsinstruksen template
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/cost-models.md` — Cost estimation patterns
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/licensing-matrix.md` — License requirements
|
||||
|
||||
Load domain-specific references only when dimension requires depth (max 2-3 additional):
|
||||
- AI Act: `responsible-ai/ai-act-compliance-guide.md`, `responsible-ai/ai-act-annex-iii-checklist.md`
|
||||
|
|
@ -169,8 +169,8 @@ Load domain-specific references only when dimension requires depth (max 2-3 addi
|
|||
- Norwegian: `norwegian-public-sector-governance/utredningsinstruksen-ai-methodology.md`
|
||||
- Security: `ai-security-engineering/ai-threat-modeling-stride.md`
|
||||
- Cost: `cost-optimization/azure-ai-foundry-cost-governance.md`, `cost-optimization/deterministic-cost-calculation-model.md`
|
||||
- RAG-arkitektur (når løsningen er RAG-/gjenfinningsbasert): `skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`, `rag-architecture/rag-evaluation-frameworks.md`
|
||||
- MLOps/GenAIOps (når løsningen har produksjons-/livssyklusfokus): `skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/monitoring-observability-ml-systems.md`, `mlops-genaiops/model-deployment-strategies-azure.md`
|
||||
- RAG-arkitektur (når løsningen er RAG-/gjenfinningsbasert): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`, `rag-architecture/rag-evaluation-frameworks.md`
|
||||
- MLOps/GenAIOps (når løsningen har produksjons-/livssyklusfokus): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/monitoring-observability-ml-systems.md`, `mlops-genaiops/model-deployment-strategies-azure.md`
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
|
|||
|
|
@ -47,7 +47,7 @@ Provide accurate, comprehensive cost estimates for Microsoft AI solutions includ
|
|||
|
||||
**ALWAYS start by reading:**
|
||||
```bash
|
||||
Read skills/ms-ai-advisor/references/architecture/cost-models.md
|
||||
Read ${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/cost-models.md
|
||||
```
|
||||
|
||||
This file contains verified pricing data and calculation formulas.
|
||||
|
|
@ -55,9 +55,9 @@ This file contains verified pricing data and calculation formulas.
|
|||
## Knowledge Base References (max 3 per invokasjon)
|
||||
|
||||
Read these core files:
|
||||
- `skills/ms-ai-security/references/cost-optimization/deterministic-cost-calculation-model.md` — **OBLIGATORISK:** Enhetspriser, beregningsformler, P10/P50/P90 konfidensintervaller
|
||||
- `skills/ms-ai-security/references/cost-optimization/azure-ai-foundry-cost-governance.md` — FinOps-rammeverk
|
||||
- `skills/ms-ai-advisor/references/architecture/cost-models.md` — Cost model templates
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/deterministic-cost-calculation-model.md` — **OBLIGATORISK:** Enhetspriser, beregningsformler, P10/P50/P90 konfidensintervaller
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/azure-ai-foundry-cost-governance.md` — FinOps-rammeverk
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/cost-models.md` — Cost model templates
|
||||
|
||||
Load additional files only when estimate requires specific depth:
|
||||
- PTU: `cost-optimization/ptu-vs-paygo-economics.md`
|
||||
|
|
|
|||
|
|
@ -45,7 +45,7 @@ Et kompakt sammendrag av virksomhetskonteksten injiseres ambient i hovedøkten v
|
|||
|
||||
Les prompt-maler fra:
|
||||
```
|
||||
skills/ms-ai-advisor/references/architecture/diagram-prompt-templates.md
|
||||
${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/diagram-prompt-templates.md
|
||||
```
|
||||
|
||||
## Azure-stilguide
|
||||
|
|
|
|||
|
|
@ -17,9 +17,9 @@ You are a Norwegian data protection specialist conducting structured DPIAs for A
|
|||
## Knowledge Base References (3 kjernefiler + betinget)
|
||||
|
||||
Read these core files:
|
||||
- `skills/ms-ai-governance/references/norwegian-public-sector-governance/dpia-norwegian-methodology-ai.md` — DPIA-metodikk
|
||||
- `skills/ms-ai-governance/references/responsible-ai/gdpr-compliance-ai-systems.md` — GDPR for AI
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-impact-assessment-framework.md` — Konsekvensvurdering
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/dpia-norwegian-methodology-ai.md` — DPIA-metodikk
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/gdpr-compliance-ai-systems.md` — GDPR for AI
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-impact-assessment-framework.md` — Konsekvensvurdering
|
||||
|
||||
Load additional files only when assessment requires specific depth:
|
||||
- Bias: `responsible-ai/bias-detection-mitigation-strategies.md`
|
||||
|
|
@ -51,8 +51,8 @@ Før DPIA-vurderingen, sjekk om AI Act-klassifisering er utført:
|
|||
- Fortsett DPIA som normalt — klassifisering er ikke forutsetning
|
||||
|
||||
### Ekstra KB-referanser for AI Act
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-deployer-obligations.md` — Deployer-krav inkl. FRIA og logging
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-transparency-notices.md` — Art. 13/50 maler for transparenstiltak
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-deployer-obligations.md` — Deployer-krav inkl. FRIA og logging
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-transparency-notices.md` — Art. 13/50 maler for transparenstiltak
|
||||
|
||||
## DPIA Framework (5 Phases)
|
||||
|
||||
|
|
|
|||
|
|
@ -41,11 +41,11 @@ Given a set of Microsoft license types, produce a complete capability map showin
|
|||
### 1. Read Reference Data
|
||||
|
||||
Read these files:
|
||||
- `skills/ms-ai-advisor/references/architecture/licensing-matrix.md` — master matrix
|
||||
- `skills/ms-ai-advisor/references/platforms/azure-ai-foundry.md` — Foundry capabilities
|
||||
- `skills/ms-ai-advisor/references/platforms/copilot-studio.md` — Copilot Studio capabilities
|
||||
- `skills/ms-ai-advisor/references/platforms/m365-copilot.md` — M365 Copilot capabilities
|
||||
- `skills/ms-ai-advisor/references/platforms/power-platform.md` — Power Platform capabilities
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/licensing-matrix.md` — master matrix
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/platforms/azure-ai-foundry.md` — Foundry capabilities
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/platforms/copilot-studio.md` — Copilot Studio capabilities
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/platforms/m365-copilot.md` — M365 Copilot capabilities
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/platforms/power-platform.md` — Power Platform capabilities
|
||||
|
||||
### 2. Map Licenses to Capabilities
|
||||
|
||||
|
|
|
|||
|
|
@ -34,8 +34,8 @@ Et kompakt sammendrag av virksomhetskonteksten injiseres ambient i hovedøkten v
|
|||
## Lokal KB-baseline (betinget — RAG / MLOps / engineering-temaer)
|
||||
|
||||
Når forskningstemaet er RAG, gjenfinning, MLOps eller GenAIOps, les den relevante engineering-kjernefilen **først** som hypotese-baseline — verifiser den deretter mot live Microsoft Learn. KB-en kan være utdatert; **MCP-resultatet er fasit**.
|
||||
- RAG/gjenfinning: `skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`
|
||||
- MLOps/GenAIOps: `skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/llm-evaluation-production.md`
|
||||
- RAG/gjenfinning: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`
|
||||
- MLOps/GenAIOps: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/llm-evaluation-production.md`
|
||||
|
||||
Les maks 2 baseline-filer. **Flagg eksplisitt** hvis live docs avviker fra KB-baselinen (samme avviks-flagging som Fase 4).
|
||||
|
||||
|
|
|
|||
|
|
@ -22,7 +22,7 @@ You are a Norwegian risk management specialist conducting structured ROS analyse
|
|||
|
||||
ROS er en bevisst KB-tung agent. En deterministisk analyse krever et fast **kjernesett** pluss et **betinget sett** lastet på definerte triggere. Dette er større enn det generelle «3 kjernefiler»-mønsteret i `CLAUDE.md` (security/cost/review) — det er en dokumentert, håndhevet last-rekkefølge, ikke fri lesing. **To analytikere som kjører samme system skal laste de samme filene i samme rekkefølge.**
|
||||
|
||||
Alle stier under `skills/ms-ai-governance/references/norwegian-public-sector-governance/` med mindre annet er angitt.
|
||||
Alle stier under `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/` med mindre annet er angitt.
|
||||
|
||||
### Obligatorisk kjerne (last ALLTID, i denne rekkefølgen)
|
||||
1. `ros-ai-threat-library.md` — AI-trusselbibliotek (kilde for T-xxx-IDer)
|
||||
|
|
@ -39,7 +39,7 @@ Alle stier under `skills/ms-ai-governance/references/norwegian-public-sector-gov
|
|||
| AI Act-dybde i dimensjon 6 | `responsible-ai/ai-act-classification-methodology.md` + `responsible-ai/ai-act-provider-obligations.md` (maks 2) |
|
||||
|
||||
### Referanse (last kun ved eksplisitt behov, ikke default)
|
||||
- `skills/ms-ai-security/references/ai-security-engineering/security-scoring-rubrics-6x5.md` — scoringsmønster-referanse
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/security-scoring-rubrics-6x5.md` — scoringsmønster-referanse
|
||||
- `ros-analyse-ai-systems.md` — generell ROS-bakgrunn
|
||||
- `responsible-ai/ai-risk-taxonomy-classification.md` — risikotaksonomi
|
||||
|
||||
|
|
@ -118,8 +118,8 @@ I tillegg til eksisterende trusler i dimensjon 6, vurder følgende:
|
|||
- Art. 50 (transparens): Opptil 7,5 MEUR eller 1,5 % av global omsetning
|
||||
|
||||
**KB-referanser for AI Act-dybde i dimensjon 6** (betinget — last per last-kontrakten øverst, AI Act-trigger):
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-classification-methodology.md`
|
||||
- `skills/ms-ai-governance/references/responsible-ai/ai-act-provider-obligations.md`
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-classification-methodology.md`
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-provider-obligations.md`
|
||||
|
||||
## 8-fase metodikk (NS 5814-compliant)
|
||||
|
||||
|
|
|
|||
|
|
@ -21,9 +21,9 @@ You are a Microsoft AI security specialist. You assess AI architectures against
|
|||
## Knowledge Base References (max 3 per invokasjon)
|
||||
|
||||
Read these core files:
|
||||
- `skills/ms-ai-security/references/ai-security-engineering/security-scoring-rubrics-6x5.md` — **OBLIGATORISK:** Deterministiske scoringsrubrikker
|
||||
- `skills/ms-ai-security/references/ai-security-engineering/ai-security-scoring-framework.md` — Scoring-rammeverk
|
||||
- `skills/ms-ai-security/references/ai-security-engineering/ai-threat-modeling-stride.md` — STRIDE trusselmodellering
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/security-scoring-rubrics-6x5.md` — **OBLIGATORISK:** Deterministiske scoringsrubrikker
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/ai-security-scoring-framework.md` — Scoring-rammeverk
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/ai-threat-modeling-stride.md` — STRIDE trusselmodellering
|
||||
|
||||
Load additional files only when assessment requires specific depth:
|
||||
- Prompt injection: `ai-security-engineering/prompt-injection-defense-patterns.md`
|
||||
|
|
@ -147,8 +147,8 @@ Read the architecture proposal or solution description. Look for:
|
|||
|
||||
### 2. Load Reference Knowledge
|
||||
Read these knowledge base files:
|
||||
- `skills/ms-ai-advisor/references/architecture/security.md` — Security best practices
|
||||
- `skills/ms-ai-advisor/references/architecture/public-sector-checklist.md` — Norwegian compliance (if exists)
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/security.md` — Security best practices
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/public-sector-checklist.md` — Norwegian compliance (if exists)
|
||||
|
||||
### 3. Validate Latest Guidance
|
||||
Use `microsoft_docs_search` for:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue