tegwick
06037b0486
Add reusable protocol, wire it in ROLE.yaml, and document the current railiance01 allowlist plus quick commands in the pilot access-plan.
64 lines
1.9 KiB
YAML
64 lines
1.9 KiB
YAML
# Host Operator — supplier Role package
|
|
# See docs/forward-deployed-engagement-architecture.md §5.1
|
|
apiVersion: kaizen.agentic/v1
|
|
kind: Role
|
|
metadata:
|
|
id: host-operator
|
|
version: "0.1.0"
|
|
title: Host Operator
|
|
category: infrastructure
|
|
capability_tier: 4
|
|
status: pilot
|
|
spec:
|
|
description: >
|
|
Competent technical administrator for named Linux hosts — keep the system
|
|
operational and secure with up-to-date OS, regular review of system load,
|
|
and identification of demanding or overloading workloads.
|
|
base_agent: sys-medic
|
|
agent_definition_template: agent-definition.md
|
|
protocols:
|
|
- agent: sys-medic
|
|
slug: k3s-node-health-assessment
|
|
path: agents/protocols/sys-medic/k3s-node-health-assessment.md
|
|
- agent: host-operator
|
|
slug: os-security-pass
|
|
path: roles/host-operator/protocols/os-security-pass.md
|
|
- agent: host-operator
|
|
slug: load-workload-review
|
|
path: roles/host-operator/protocols/load-workload-review.md
|
|
- agent: host-operator
|
|
slug: ufw-admin-allowlist
|
|
path: roles/host-operator/protocols/ufw-admin-allowlist.md
|
|
memory_template: memory-template.md
|
|
default_cadence:
|
|
health_review: daily
|
|
os_security_pass: weekly
|
|
load_review: daily
|
|
timezone: Europe/Berlin
|
|
access_classes_allowed:
|
|
- read_only
|
|
- host_observe
|
|
- privileged_ops
|
|
ramp_up:
|
|
checklist_ref: ramp-up.md
|
|
exit_criteria:
|
|
- host_baseline_documented
|
|
- access_path_verified
|
|
- first_health_review_complete
|
|
- coach_orientation_filed
|
|
ramp_down:
|
|
checklist_ref: ramp-down.md
|
|
exit_criteria:
|
|
- handoff_pack_written
|
|
- open_threads_triaged
|
|
- access_revoked
|
|
- vault_export_confirmed
|
|
billing:
|
|
seat_product: expert_seat_4x
|
|
duty_weights:
|
|
standard_review: 1.0
|
|
deep_assessment: 1.0
|
|
pilot_targets:
|
|
- kind: host
|
|
id: railiance01
|
|
notes: coulomb k3s production node
|