fix(ms-ai-architect): RX-P2 reg-kjede-wiring + komprehensiv agent-sti-forankring [skip-docs]
- classify->dpia->ros kjede-wiring: dpia/ros Task-templater far eksplisitte AI Act-klassifiserings- + DPIA-funn-felt (kjede-data agentene allerede branchet pa) - dpia-agent uutforbar "spor bruker" -> "marker vurderingen" (Hvis-ikke-klassifisert + Error Handling); speilet til ros-analysis-agent - adr-writer-agent: Write-verktoy fjernet, returnerer ADR-markdown til hovedkontekst (command er eneste skriver -- subagenter skriver aldri) - KB-sti-forankring (komprehensiv): 36 bare referanse-subdir-stier i 6 agenter + 2 commands fullkvalifisert med CLAUDE_PLUGIN_ROOT/skills/<skill>/references/ --- ogsa innen-skill kortformer, uresolverbare i installert modus - mekanisme: validate-plugin.sh Check 6d (bare-subdir-lint m/ hyphen-guard) + negativ-probe-test (beviser tenner) + RX-P2 wiring-regresjonstester Suite 859/859 exit 0. validate-plugin 250 PASS / 0 FAIL. 145 forankrede stier verifisert eksisterende (0 mangler).
This commit is contained in:
parent
5b05009b44
commit
b68514487c
13 changed files with 151 additions and 36 deletions
|
|
@ -2,12 +2,12 @@
|
|||
name: adr-writer-agent
|
||||
description: |
|
||||
Generates Architecture Decision Records (ADR) in MADR v3.0 format from structured input.
|
||||
Reads adr-template.md, fills in from session context, and writes to file.
|
||||
Reads adr-template.md, fills in from session context, and returns the ADR markdown to the main context.
|
||||
Use when architect:adr needs to generate a complete ADR document.
|
||||
Triggers on: ADR generation, decision documentation, architect:adr delegation.
|
||||
model: opus
|
||||
color: orange
|
||||
tools: ["Read", "Write", "Glob"]
|
||||
tools: ["Read", "Glob"]
|
||||
---
|
||||
|
||||
# ADR Writer Agent
|
||||
|
|
@ -87,9 +87,9 @@ Fill in every section of the MADR template:
|
|||
|
||||
**Validering og oppfølging**: Concrete next steps with responsible party.
|
||||
|
||||
### 4. Write to File
|
||||
### 4. Return to Main Context
|
||||
|
||||
Write the ADR to the location specified in the input. Default: `docs/adr/ADR-NNN-[slug].md`
|
||||
Return the complete ADR markdown as your final message. The main context (the `/architect:adr` command) writes it to file — do not write files yourself (you run as a subagent).
|
||||
|
||||
## Output Format
|
||||
|
||||
|
|
@ -101,7 +101,7 @@ The generated ADR should be:
|
|||
|
||||
## Quality Checklist
|
||||
|
||||
Before writing:
|
||||
Before returning:
|
||||
- [ ] All template sections filled (no placeholders)
|
||||
- [ ] Compliance section included (even if "Not assessed")
|
||||
- [ ] Confidence level reflects actual analysis quality
|
||||
|
|
|
|||
|
|
@ -164,13 +164,13 @@ Read relevant knowledge base files:
|
|||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/licensing-matrix.md` — License requirements
|
||||
|
||||
Load domain-specific references only when dimension requires depth (max 2-3 additional):
|
||||
- AI Act: `responsible-ai/ai-act-compliance-guide.md`, `responsible-ai/ai-act-annex-iii-checklist.md`
|
||||
- Governance: `responsible-ai/ai-governance-structure-framework.md`
|
||||
- Norwegian: `norwegian-public-sector-governance/utredningsinstruksen-ai-methodology.md`
|
||||
- Security: `ai-security-engineering/ai-threat-modeling-stride.md`
|
||||
- Cost: `cost-optimization/azure-ai-foundry-cost-governance.md`, `cost-optimization/deterministic-cost-calculation-model.md`
|
||||
- RAG-arkitektur (når løsningen er RAG-/gjenfinningsbasert): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`, `rag-architecture/rag-evaluation-frameworks.md`
|
||||
- MLOps/GenAIOps (når løsningen har produksjons-/livssyklusfokus): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/monitoring-observability-ml-systems.md`, `mlops-genaiops/model-deployment-strategies-azure.md`
|
||||
- AI Act: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-compliance-guide.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-annex-iii-checklist.md`
|
||||
- Governance: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-governance-structure-framework.md`
|
||||
- Norwegian: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/utredningsinstruksen-ai-methodology.md`
|
||||
- Security: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/ai-threat-modeling-stride.md`
|
||||
- Cost: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/azure-ai-foundry-cost-governance.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/deterministic-cost-calculation-model.md`
|
||||
- RAG-arkitektur (når løsningen er RAG-/gjenfinningsbasert): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/agentic-rag-patterns.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-evaluation-frameworks.md`
|
||||
- MLOps/GenAIOps (når løsningen har produksjons-/livssyklusfokus): `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/monitoring-observability-ml-systems.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/model-deployment-strategies-azure.md`
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
|
|||
|
|
@ -60,9 +60,9 @@ Read these core files:
|
|||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-advisor/references/architecture/cost-models.md` — Cost model templates
|
||||
|
||||
Load additional files only when estimate requires specific depth:
|
||||
- PTU: `cost-optimization/ptu-vs-paygo-economics.md`
|
||||
- Caching: `cost-optimization/semantic-caching-patterns.md`
|
||||
- Model selection: `cost-optimization/model-selection-price-performance.md`
|
||||
- PTU: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/ptu-vs-paygo-economics.md`
|
||||
- Caching: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/semantic-caching-patterns.md`
|
||||
- Model selection: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/cost-optimization/model-selection-price-performance.md`
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
|
|||
|
|
@ -22,10 +22,10 @@ Read these core files:
|
|||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-impact-assessment-framework.md` — Konsekvensvurdering
|
||||
|
||||
Load additional files only when assessment requires specific depth:
|
||||
- Bias: `responsible-ai/bias-detection-mitigation-strategies.md`
|
||||
- PII: `ai-security-engineering/pii-detection-norwegian-context.md`
|
||||
- Data leakage: `ai-security-engineering/data-leakage-prevention-ai.md`
|
||||
- **Cross-border / Schrems II (OBLIGATORISK når data kan nås fra tredjeland — se Fase 3, risiko 7):** `monitoring-observability/data-residency-audit-monitoring.md` — EDPB seks-stegs-TIA, CLOUD Act/FISA 702/EO 12333-restanalyse, EO 14086/DPF-status, tekniske tilleggstiltak
|
||||
- Bias: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/bias-detection-mitigation-strategies.md`
|
||||
- PII: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/pii-detection-norwegian-context.md`
|
||||
- Data leakage: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/data-leakage-prevention-ai.md`
|
||||
- **Cross-border / Schrems II (OBLIGATORISK når data kan nås fra tredjeland — se Fase 3, risiko 7):** `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/monitoring-observability/data-residency-audit-monitoring.md` — EDPB seks-stegs-TIA, CLOUD Act/FISA 702/EO 12333-restanalyse, EO 14086/DPF-status, tekniske tilleggstiltak
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
@ -47,7 +47,7 @@ Før DPIA-vurderingen, sjekk om AI Act-klassifisering er utført:
|
|||
- Integrer deployer-forpliktelser fra `ai-act-deployer-obligations.md` som tiltak i Fase 4
|
||||
|
||||
### Hvis ikke klassifisert
|
||||
- Spør om det bør gjøres: "Er det gjennomført AI Act-klassifisering for dette systemet? Hvis nei, anbefaler vi `/architect:classify` — men DPIA fortsetter uansett."
|
||||
- Marker i rapporten at AI Act-klassifisering ikke er dokumentert, og anbefal `/architect:classify` som neste steg (du kjører som subagent uten brukertur — still ingen spørsmål)
|
||||
- Fortsett DPIA som normalt — klassifisering er ikke forutsetning
|
||||
|
||||
### Ekstra KB-referanser for AI Act
|
||||
|
|
@ -93,7 +93,7 @@ Risk categories for AI systems:
|
|||
|
||||
#### Cross-border / Schrems II — obligatorisk TIA (risiko 7)
|
||||
|
||||
Når systemet bruker en amerikansk-eid skyleverandør (Azure/Microsoft 365/Foundry) eller data på annen måte kan nås fra tredjeland, **er det ikke nok å navngi risikoen** — load `monitoring-observability/data-residency-audit-monitoring.md` og gjennomfør EDPB seks-stegs Transfer Impact Assessment:
|
||||
Når systemet bruker en amerikansk-eid skyleverandør (Azure/Microsoft 365/Foundry) eller data på annen måte kan nås fra tredjeland, **er det ikke nok å navngi risikoen** — load `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/monitoring-observability/data-residency-audit-monitoring.md` og gjennomfør EDPB seks-stegs Transfer Impact Assessment:
|
||||
|
||||
1. Kartlegg overføringene (inkl. residual: support, troubleshooting, telemetri)
|
||||
2. Identifiser overføringsverktøyet (adekvansvedtak / SCCs / unntak)
|
||||
|
|
@ -141,9 +141,9 @@ Read the AI system description or architecture proposal. Extract:
|
|||
|
||||
### 2. Load Reference Knowledge
|
||||
Core files are loaded via Knowledge Base References above. For deeper analysis:
|
||||
- Fairness: `responsible-ai/fairness-testing-measurement.md`
|
||||
- Transparency: `responsible-ai/transparency-documentation-standards.md`
|
||||
- Human oversight: `responsible-ai/human-in-the-loop-oversight.md`
|
||||
- Fairness: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/fairness-testing-measurement.md`
|
||||
- Transparency: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/transparency-documentation-standards.md`
|
||||
- Human oversight: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/human-in-the-loop-oversight.md`
|
||||
|
||||
### 3. Validate Latest Guidance
|
||||
Use `microsoft_docs_search` for:
|
||||
|
|
@ -225,7 +225,7 @@ Follow the output format below with all sections completed.
|
|||
|
||||
If missing information:
|
||||
- State assumptions clearly
|
||||
- Request specific details needed
|
||||
- Note which specific inputs are missing rather than requesting them (you run as a non-interactive subagent with no user turn)
|
||||
- Provide conditional assessments
|
||||
- Note "Kan ikke vurdere [area] uten [info]"
|
||||
|
||||
|
|
|
|||
|
|
@ -34,8 +34,8 @@ Et kompakt sammendrag av virksomhetskonteksten injiseres ambient i hovedøkten v
|
|||
## Lokal KB-baseline (betinget — RAG / MLOps / engineering-temaer)
|
||||
|
||||
Når forskningstemaet er RAG, gjenfinning, MLOps eller GenAIOps, les den relevante engineering-kjernefilen **først** som hypotese-baseline — verifiser den deretter mot live Microsoft Learn. KB-en kan være utdatert; **MCP-resultatet er fasit**.
|
||||
- RAG/gjenfinning: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `rag-architecture/agentic-rag-patterns.md`
|
||||
- MLOps/GenAIOps: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `mlops-genaiops/llm-evaluation-production.md`
|
||||
- RAG/gjenfinning: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/rag-core-patterns.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/rag-architecture/agentic-rag-patterns.md`
|
||||
- MLOps/GenAIOps: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/genaiops-llm-specific-practices.md`, `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-engineering/references/mlops-genaiops/llm-evaluation-production.md`
|
||||
|
||||
Les maks 2 baseline-filer. **Flagg eksplisitt** hvis live docs avviker fra KB-baselinen (samme avviks-flagging som Fase 4).
|
||||
|
||||
|
|
|
|||
|
|
@ -36,12 +36,12 @@ Alle stier under `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwe
|
|||
| Sektor oppdaget (helse/transport/finans/justis/utdanning) | `ros-sector-checklists.md` |
|
||||
| Multi-agent / agent-orkestrering | `ros-maestro-multiagent.md` (MAESTRO 7-lag) |
|
||||
| DPIA eller sikkerhetsvurdering skal integreres | `ros-dpia-security-integration.md` |
|
||||
| AI Act-dybde i dimensjon 6 | `responsible-ai/ai-act-classification-methodology.md` + `responsible-ai/ai-act-provider-obligations.md` (maks 2) |
|
||||
| AI Act-dybde i dimensjon 6 | `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-classification-methodology.md` + `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-provider-obligations.md` (maks 2) |
|
||||
|
||||
### Referanse (last kun ved eksplisitt behov, ikke default)
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/security-scoring-rubrics-6x5.md` — scoringsmønster-referanse
|
||||
- `ros-analyse-ai-systems.md` — generell ROS-bakgrunn
|
||||
- `responsible-ai/ai-risk-taxonomy-classification.md` — risikotaksonomi
|
||||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-risk-taxonomy-classification.md` — risikotaksonomi
|
||||
|
||||
**Budsjett:** kjerne (4) + betinget (maks 2-3 på trigger) = typisk 5-7 filer. Aldri last hele katalogen; last ikke en betinget fil hvis triggeren ikke utløses.
|
||||
|
||||
|
|
@ -273,7 +273,7 @@ Risk Levels: Low (1-6), Medium (7-12), High (13-19), Critical (20-25)
|
|||
|
||||
If missing information:
|
||||
- State assumptions clearly
|
||||
- Request specific details needed
|
||||
- Note which specific inputs are missing rather than requesting them (you run as a non-interactive subagent with no user turn)
|
||||
- Provide conditional assessments
|
||||
- Note "Kan ikke vurdere [area] uten [info]"
|
||||
|
||||
|
|
|
|||
|
|
@ -26,9 +26,9 @@ Read these core files:
|
|||
- `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/ai-threat-modeling-stride.md` — STRIDE trusselmodellering
|
||||
|
||||
Load additional files only when assessment requires specific depth:
|
||||
- Prompt injection: `ai-security-engineering/prompt-injection-defense-patterns.md`
|
||||
- Governance: `responsible-ai/ai-act-compliance-guide.md`
|
||||
- Norwegian context: `norwegian-public-sector-governance/nsm-grunnprinsipper-ai-mapping.md`
|
||||
- Prompt injection: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-security/references/ai-security-engineering/prompt-injection-defense-patterns.md`
|
||||
- Governance: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/responsible-ai/ai-act-compliance-guide.md`
|
||||
- Norwegian context: `${CLAUDE_PLUGIN_ROOT}/skills/ms-ai-governance/references/norwegian-public-sector-governance/nsm-grunnprinsipper-ai-mapping.md`
|
||||
|
||||
## Virksomhetskontekst (automatisk)
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue