Vanguard Frontier Agentic

The vanguard frontier of the agentic world — an enterprise-grade ecosystem for AI agents at scale.

Agentic coordination, routing, protocol, and escalation for high-stakes environments. Battle-hardened. Audit-ready by design.

Why Vanguard Frontier  ·  What's Inside  ·  Get Started  ·  Install Reference  ·  Skills  ·  Agents  ·  Issues  ·  FAQ  ·  Feedback  ·  Contributing  ·  Security  ·  Code of Conduct

This is the edge of agentic intelligence — an enterprise-grade ecosystem for running AI agents at scale in environments where a wrong move is a board-level incident. It collects reusable skills, agents, rules, MCP references, and supporting assets for AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform — plus cross-functional Legal, HR, Marketing, Salesforce, .NET, Java, Kotlin, PHP, Python, FinOps, Accounting, Finance, Oracle NetSuite ERP, SAP S/4HANA + BTP ERP, Microsoft 365 / Dynamics 365, and Azure-ecosystem Databricks and Snowflake data-platform agentic ecosystems.

This is not just cloud infrastructure tooling. It is agentic coordination: maestro routing, escalation-aware protocol, structured handoff between specialists, and refusal-by-default safety on every irreversible action. Cloud is one domain it operates in. Coordination, governance, and escalation are the product.

📊 Catalog at a glance

• 🧠 Skills = step-by-step workflows an AI assistant can follow.
• 🤖 Agents = reusable expert roles for review, architecture, and operations.
• 📏 Rules = durable instructions for a specific AI harness.
• 🔌 MCP references = trusted notes for connecting tools to real systems.
• 🗂️ Catalogs = machine-readable indexes so tools can discover everything.

Works with: Claude Code  ·  Codex  ·  GitHub Copilot  ·  Cursor  ·  Gemini CLI  ·  Kiro  ·  and any other coding agent.

📦 Available on npm: @raishin/vanguard-frontier-agentic is published on the public npm registry.

[!IMPORTANT] 🔁 The GitHub owner changed — the npm package name did not. Both are true at once: this repository moved from Raishin/vanguard-frontier-agentic to VincentChuWaiChow/vanguard-frontier-agentic when the account was renamed, but the npm scope did not move with it.

What changed	What did NOT change
GitHub owner → VincentChuWaiChow	npm package name → still @raishin/vanguard-frontier-agentic

GitHub redirects the old URLs, so existing clones and links keep working, but update your git remote and any pinned marketplace source when convenient.

The npm package is still @raishin/vanguard-frontier-agentic — npm install @raishin/vanguard-frontier-agentic@latest is unchanged, and no republish under a new name is planned. An npm scope is a separate namespace from a GitHub account: renaming the account does not rename the scope, and renaming the scope would break every existing install. Treat @raishin/… in install commands, .npmrc registry config, and packed tarball names as correct, not as a leftover.

⚠️ ALPHA FINOPS BUNDLE: As of v1.8.0, this package includes 4 new experimental FinOps agents and 7 skills for cloud cost optimization, AI economics modeling, Kubernetes rightsizing, and FOCUS-spec normalization. All are marked lifecycle: experimental. See the board readiness memo for known limitations, risk mitigation, and 30-day diligence closure requirements. Use at your own risk in pre-production environments. Production deployment requires signed design-partner SOWs, Big 4 accounting validation, and SOC 2 Type II observation (≥150 days).

🛰️ Why Vanguard Frontier?

"Vanguard frontier" is not branding — it is an operating posture. This ecosystem is built for the front line of agentic deployment, where AI agents touch real production systems, real regulated data, and real legal exposure.

• 🏛️ Built for Fortune 50 / high-stakes environments. Every agent assumes the blast radius is enterprise-scale: regulated data, audited controls, and decisions that survive legal discovery. Refusal-by-default beats a fast path to a board-level incident.
• ⚖️ The Legal + HR ecosystem is proof of cross-functional agentic coordination. 28 specialist agents (Legal maestro + 12 specialists, HR maestro + 14 specialists) and 3 cross-functional protocol skills demonstrate that agents can hand off, escalate, and coordinate across organizational boundaries — not just answer in isolation.
• 🧾 Audit-ready, privacy-preserving, escalation-aware by design. Every review and live-guard agent emits a structured verdict (verdict, evidence_level, blockers, safe_next_actions, open_questions) that maps directly to SOC 2, PCI DSS, NIS2, NIST CSF, and ISO 27001 — no post-processing.
• 🛡️ Battle-tested against real compliance, governance, and risk workflows. These patterns are exercised against live IAM mutations, KMS destruction, litigation holds, RIF planning, and privacy reviews — the workflows where a generic agent gets an organization sued.

The bar: an auditor, a regulator, or opposing counsel should be able to read the agent's output and trace exactly who decided what, on what evidence, and who approved the risk.

🧱 What's Inside — the three-layer agentic architecture

Vanguard Frontier is not a flat bag of prompts. It is a deliberate three-layer system, and every domain — cloud providers, Kubernetes, marketing, Legal, HR — follows the same shape.

How it flows: a request enters at the maestro, which routes to a specialist. When a matter crosses a boundary — an HR investigation that needs privileged Legal review, or a Legal hold that triggers an HR data freeze — the cross-functional protocol carries a structured case capsule between agents, preserving privilege, minimizing data, and recording the escalation path.

This is what "agentic coordination" means here: routing, protocol, and escalation are first-class, not improvised.

🚀 Get Started

Pick the install path for your coding agent. Each dropdown is crystal-clear, step-by-step, and one-click plug-and-play where the harness supports it; the npm/export path works for everything else.

At a glance — which path is yours:

Expand the matching dropdown below for the full step-by-step.

/plugin marketplace add VincentChuWaiChow/vanguard-frontier-agentic
/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic

{
  "extraKnownMarketplaces": {
    "vanguard-frontier-agentic": {
      "source": { "source": "github", "repo": "VincentChuWaiChow/vanguard-frontier-agentic" }
    }
  },
  "enabledPlugins": {
    "vanguard-frontier-agentic@vanguard-frontier-agentic": true
  }
}

# Add the marketplace, then install
copilot plugin marketplace add VincentChuWaiChow/vanguard-frontier-agentic
/plugin install vanguard-frontier-agentic

{
  "extraKnownMarketplaces": [
    "https://raw.githubusercontent.com/VincentChuWaiChow/vanguard-frontier-agentic/master/.github/plugin/marketplace.json"
  ]
}

# Clone the repo, then register it as a plugin directory in Cursor:
git clone https://github.com/VincentChuWaiChow/vanguard-frontier-agentic

vscode.cursor.plugins.registerPath("/absolute/path/to/vanguard-frontier-agentic");

# 1. Clone this repo
git clone https://github.com/VincentChuWaiChow/vanguard-frontier-agentic
cd vanguard-frontier-agentic

# 2. In Kiro:
#    Open the Powers panel → "Add Custom Power" → "Local Directory"
#    Paste the absolute path to the Power(s) you need, one at a time:
#       /absolute/path/to/vanguard-frontier-agentic/powers/vanguard-aws
#       /absolute/path/to/vanguard-frontier-agentic/powers/vanguard-kubernetes
#       /absolute/path/to/vanguard-frontier-agentic/powers/vanguard-terraform

# Install the package
npm install @raishin/vanguard-frontier-agentic@latest

# Export agents + companion skills for Gemini Antigravity
npx vfa-export-agents --platform gemini --all --repo .

npx vfa-export-agents --platform gemini --provider aws --repo .

# Add the marketplace, then enable the bundled plugin
codex plugin marketplace add VincentChuWaiChow/vanguard-frontier-agentic
/plugin install vanguard-frontier-agentic@vanguard-frontier-agentic

[marketplaces.vanguard-frontier-agentic]
last_updated = "2026-05-11T06:46:00Z"
last_revision = "<sha>"
source_type = "git"
source = "https://github.com/VincentChuWaiChow/vanguard-frontier-agentic.git"

[plugins."vanguard-frontier-agentic@vanguard-frontier-agentic"]
enabled = true

# 1️⃣ Install the package
npm install @raishin/vanguard-frontier-agentic@latest

# 2️⃣ Export agents for your role into your repo (claude-code shown — swap platform)
npx vfa-export-agents --platform claude-code --role cloud-security-engineer --repo .

# 3️⃣ Open your coding agent and reference the exported agent
#    "Use kubernetes-rbac-review-agent to audit this RBAC change."

Install paths

There are now eight supported install paths — Claude Code plugin marketplace, GitHub Copilot CLI marketplace, Cursor plugin, Codex plugin marketplace, Kiro Powers, Gemini Antigravity skills, npm package + vfa-export-agents CLI, and the third-party skills CLI — each with different versioning, trust, and scope characteristics. See docs/integrations/skills-cli.md for the full trust matrix, verified flag syntax, pinning guidance, and pre-install inspection steps.

npm install @raishin/vanguard-frontier-agentic@latest

🖥️ Terminal UI (vfa-tui)

⚠️ Alpha — the TUI is functional but under active development.

An enterprise-grade terminal interface for interactive catalog browsing, validation gate execution, and export command building — built in Rust for speed and security by construction. Distributed as the vfa-tui crate.

Install (recommended — from crates.io):

cargo install vfa-tui

Or download a prebuilt binary (Linux / macOS / Windows, x86-64 + arm64) — each release attaches the binaries alongside their SBOM and checksums.sha256 — from the latest vfa-tui release.

Build from source (alternative):

cd tools/vfa-tui && cargo build --release

Run (from the repo root — auto-detects workspace):

vfa-tui                                      # installed via cargo or prebuilt binary
./tools/vfa-tui/target/release/vfa-tui       # from a source build

Key features:

• 🗂️ Catalog browsing with fuzzy search across all agents, skills, and providers
• ✅ Validation gate execution with real-time progress and structured output
• 📦 Export command builder with platform/role/provider selection
• 🔐 Security by construction — no shell injection, no credential handling, no network access

Full documentation

🧠 Skills

689 skills across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, CNCF ecosystem, Terraform, marketing governance, and more.

🛡️ Live Guard skills — stop before you break prod

Live-guard skills enforce approval gates and rollback posture for irreversible operations:

🟧 AWS (5):

• aws-live-deployment-guarded-operator — approval-gated generic live deployment actions with account/region confirmation
• aws-live-iac-change-guard — CloudFormation/SAM/CDK/Terraform change set + drift + rollback posture enforcement
• aws-live-pipeline-approval-operator — CodePipeline approval gating with exact stage and approver scope
• aws-live-serverless-release-guard — Lambda alias/canary/linear rollout with alarm + rollback required
• aws-live-ecs-rollout-guard — ECS/Fargate deployment circuit breaker, health check evidence, rollback path

🟩 GCP (6):

• gcp-live-gke-rollout-guard — GKE deployment and node pool mutations, control-plane version gating
• gcp-live-iam-policy-change-guard — IAM binding mutations, org policy changes, SA key creation — org-wide blast radius
• gcp-live-kms-key-destruction-guard — Cloud KMS key version destruction — CMEK data permanently unrecoverable
• gcp-live-cost-budget-action-guard — budget thresholds, CUD commitments, quota increases — financial authority gate
• gcp-live-bigquery-dataset-deletion-guard — dataset deletion, table truncation, authorized view changes — irreversible data loss
• gcp-live-cloud-run-traffic-migration-guard — Cloud Run revision traffic shifts, min-instances changes — production traffic blast radius

🟠 Alibaba Cloud (6):

• alibaba-live-ack-rollout-guard — ACK deployment mutations, node pool scaling, cluster version upgrades
• alibaba-live-ram-policy-change-guard — RAM policy/role mutations — account-wide blast radius, privilege escalation risk
• alibaba-live-kms-key-mutation-guard — KMS key deletion/disable — encrypted data permanently inaccessible
• alibaba-live-cost-budget-action-guard — budget threshold changes, Savings Plan purchases, RI commitments — financial authority gate
• alibaba-live-oss-bucket-policy-guard — OSS bucket ACL/policy changes — public exposure or China data-residency violation
• alibaba-live-rds-polardb-mutation-guard — RDS/PolarDB instance deletion, spec downgrade, backup policy removal — data loss risk

🔴 Huawei Cloud (6):

• huawei-live-cce-rollout-guard — CCE deployment mutations, node pool upgrades, cluster version changes
• huawei-live-iam-policy-change-guard — IAM policy/SCP mutations — account-wide blast radius, privilege escalation
• huawei-live-kms-key-destruction-guard — DEW/KMS key deletion — CSMS secrets and DBSS-encrypted data permanently lost
• huawei-live-cost-budget-action-guard — budget threshold changes, RI purchases, CUD commitments — financial authority gate
• huawei-live-obs-bucket-policy-guard — OBS bucket ACL/policy changes — public exposure or data residency violation
• huawei-live-gaussdb-mutation-guard — GaussDB/RDS instance deletion, spec downgrade, backup policy changes — data loss

🟦 Azure (7):

• azure-live-aks-rollout-guard — PDB audit, rollout pause/undo, post-rollout health
• azure-live-arm-deployment-stack-guard — what-if evidence, denySettings, PIM-gated delete
• azure-live-app-service-slot-swap-guard — sticky-setting audit, traffic shifting, swap-back path
• azure-live-keyvault-rotation-purge-guard — rotation policy, soft-delete/purge-protection, PIM gate
• azure-live-pim-jit-activation-guard — eligible assignment audit, MFA gate, JIT revocation
• azure-live-cost-budget-action-guard — budget mutation, GPU SKU policy, quota read-only
• azure-live-entra-role-assignment-guard — permanent role assignment scope/principal audit, PIM-preference enforcement, Guest principal blocking

🟥 OCI (7):

• oci-live-autonomous-db-lifecycle-guard — ADB scale/stop/clone/terminate with tag enforcement
• oci-live-oke-rollout-guard — DevOps pipeline approval, PDB audit, rollout pause/undo
• oci-live-resource-manager-stack-guard — plan-before-apply, drift detection, job-lock enforcement
• oci-live-vault-key-destruction-guard — rotation vs. destruction separation, 7–30 day deletion window
• oci-live-iam-policy-compartment-guard — MFA break-glass, dual-approval for tenancy-root changes
• oci-live-cost-budget-runaway-guard — 3-tier budget management, GPU shape gate, ONS alert routing
• oci-live-network-security-rule-guard — Security List/NSG rule capture, 0.0.0.0/0 detection, DB-subnet criticality, Path Analyzer gate

☸️ Kubernetes (5):

• kubernetes-live-rbac-mutation-guard — escalate/bind/impersonate verb detection, wildcard blocking, pre-mutation state capture, rollback via YAML backup
• kubernetes-live-admission-policy-guard — Kyverno/VAP mutation blast-radius, failureAction enforcement, PolicyException scope validation
• kubernetes-live-mesh-policy-guard — Istio AuthorizationPolicy/PeerAuthentication traffic impact, PERMISSIVE→STRICT migration gating
• kubernetes-live-network-policy-guard — CiliumNetworkPolicy/NetworkPolicy connectivity impact, metadata service egress blocking
• kubernetes-live-argocd-sync-guard — AppProject blast-radius, sync impersonation identity review, sync-window change gating

Sample skills

• 🔐 skills/aws/aws-iam-least-privilege-review — Review AWS IAM policies and reduce unnecessary access.
• 🟦 skills/azure/azure-rbac-review — Review Azure RBAC assignments, scopes, and custom roles.
• 🟥 skills/oci/oci-autonomous-database-architect — Design and review Oracle Autonomous Database across OCI and multicloud options.
• 🟩 skills/gcp/gcp-gke-platform-operator — GKE Standard/Autopilot design with Day-0/Day-1 decisions, Workload Identity, and AI inference quickstart.
• 🟠 skills/alibaba/alibaba-china-compliance — MLPS 2.0, DSL, PIPL, and ICP filing compliance review for workloads in Alibaba Cloud China regions.
• 🔴 skills/huawei/huawei-secmaster-security-operations — Huawei SecMaster SIEM/SOAR, HSS, CFW, WAF posture hardening and incident triage.
• 💰 skills/finops/finops-cloud-price-advisor — Fetch live prices from AWS, Azure, and OCI public pricing APIs; estimate costs for live environments or prototypes.
• 📣 skills/marketing/marketing-pixel-data-leakage-review — Review advertising pixels and event tracking for PII/PHI leakage to ad networks.

Rule of thumb: if the asset teaches how to do a repeatable task, it is a skill.

🤖 Agents

666 agents matching the skill catalog — agents ship harness adapters and a hardened permission model.

⚖️ The Legal + HR cross-functional agentic ecosystem

Beyond cloud and platform agents, Vanguard Frontier ships a 28-agent cross-functional Legal + HR ecosystem plus 3 cross-functional protocol skills — proof that agentic coordination works across organizational boundaries, not just inside one cloud account.

Every Legal and HR agent is escalation-aware (knows when a matter must go to privileged counsel or a human owner), privacy-preserving (minimizes personal and sensitive data in every handoff), and audit-ready (emits the same structured verdict shape as the cloud live-guard agents). These agents advise on process and risk posture — they do not replace licensed legal counsel or qualified HR professionals, and they say so.

🐘 The PHP application review board

PHP is a widely used open-source, general-purpose scripting language built for the web — it powers a large share of the internet, including WordPress, and ships its own dependency manager, Composer. The board is a php-maestro router plus four static-review specialists covering application security (session fixation, insecure deserialization, and file-upload exploits), runtime end-of-life/OPcache/PHP-FPM configuration hardening, Composer supply-chain dependency audit, and WordPress REST API / block-editor security — every agent reads source, sanitized configuration, and dependency manifests only and never executes payloads, installs packages, or mutates a live runtime. These agents declare their own provider: php catalog value with a mix of ID prefixes (php-, composer-, wordpress-) reflecting the specific ecosystem tool each one reviews.

🟣 The .NET application review board

.NET is a free, cross-platform, open-source developer platform — runtime, libraries, and languages (C# is the most popular) — with ASP.NET Core as its lean, modular framework for modern cloud-based web services and EF Core as its lightweight, extensible data-access layer. The board is a dotnet-maestro router plus nine static-review specialists covering C#/runtime correctness, ASP.NET Core API architecture, identity and authorization, EF Core data access, test quality, CI/NuGet supply chain, performance/AOT/trimming, in-app OpenTelemetry wiring, and .NET Aspire cloud-native readiness — every agent reads source and sanitized configuration only and never builds, runs, migrates, or contacts a live system. These agents use provider: generic with a dotnet- ID prefix because .NET is a language/runtime, not a cloud provider — mirroring the existing non-cloud boards.

☕ The Java application review board

Java and the JVM run a large share of the enterprise back end — Spring Boot, Jakarta EE, Quarkus, and Micronaut services over Hibernate/JPA, Kafka, and relational databases, on JDKs whose support and licensing boundaries move. The board is a java-maestro router plus fourteen static-review specialists, each owning one distinct, evidence-gated decision: JDK-estate lifecycle and upgrade risk, virtual-thread adoption correctness, JVM performance and GC, containerized-JVM sizing, Spring/Quarkus/Micronaut production readiness, Spring Security authorization and Actuator exposure, untrusted-deserialization/parser RCE surface, JPA/Hibernate fetch performance, transaction and cross-resource consistency (dual-write → outbox), schema-migration deploy safety, Kafka delivery semantics, resilience-pattern composition, JVM test architecture, and the application-server license-exit portfolio decision. Every agent reads source and sanitized configuration only and never builds, runs, invokes a JDK, opens a database or broker connection, or contacts a live system. Two hardened refusal contracts anchor the board's honesty: the JDK agent never states a vendor lifecycle date from memory (it cites a verified, refreshable reference or returns unknown), and the performance and application-server-exit agents refuse to issue a GC recommendation or a payback number without supplied evidence — no hardcoded pricing or tenant data. These agents use provider: java with a java- ID prefix, mirroring the other non-cloud topical boards.

🟧 The Kotlin application review board

…view the full README on GitHub.