# Host Operator — supplier Role package
# See docs/forward-deployed-engagement-architecture.md §5.1
apiVersion: kaizen.agentic/v1
kind: Role
metadata:
  id: host-operator
  version: "0.1.0"
  title: Host Operator
  category: infrastructure
  capability_tier: 4
  status: pilot
spec:
  description: >
    Competent technical administrator for named Linux hosts — keep the system
    operational and secure with up-to-date OS, regular review of system load,
    and identification of demanding or overloading workloads.
  base_agent: sys-medic
  agent_definition_template: agent-definition.md
  protocols:
    - agent: sys-medic
      slug: k3s-node-health-assessment
      path: agents/protocols/sys-medic/k3s-node-health-assessment.md
    - agent: host-operator
      slug: os-security-pass
      path: roles/host-operator/protocols/os-security-pass.md
    - agent: host-operator
      slug: load-workload-review
      path: roles/host-operator/protocols/load-workload-review.md
    - agent: host-operator
      slug: ufw-admin-allowlist
      path: roles/host-operator/protocols/ufw-admin-allowlist.md
  memory_template: memory-template.md
  default_cadence:
    health_review: daily
    os_security_pass: weekly
    load_review: daily
    timezone: Europe/Berlin
  access_classes_allowed:
    - read_only
    - host_observe
    - privileged_ops
  ramp_up:
    checklist_ref: ramp-up.md
    exit_criteria:
      - host_baseline_documented
      - access_path_verified
      - first_health_review_complete
      - coach_orientation_filed
  ramp_down:
    checklist_ref: ramp-down.md
    exit_criteria:
      - handoff_pack_written
      - open_threads_triaged
      - access_revoked
      - vault_export_confirmed
  billing:
    seat_product: expert_seat_4x
    duty_weights:
      standard_review: 1.0
      deep_assessment: 1.0
  pilot_targets:
    - kind: host
      id: railiance01
      notes: coulomb k3s production node