aidlc-devsecops-agent -- Technical Reference
September 8, 2026 ยท View on GitHub
Identity
| Field | Value |
|---|---|
| Name | aidlc-devsecops-agent |
| Tier | judgment |
| Allowed Claude Code Tools | Read, Edit, Write, Glob, Grep, Bash, AskUserQuestion |
| Disallowed Claude Code Tools | Task |
Stage Ownership
Lead Stages
This agent has no lead stages. It operates exclusively in a support role across multiple stages in the Inception, Construction, and Operation phases.
Support Stages
| Stage | Name | What This Agent Contributes |
|---|---|---|
| practices-discovery | Practices Discovery | Mutually blind spoke that records scanning, secrets-handling, and secure-pipeline findings in its contribution file |
| nfr-requirements | NFR Requirements | Security controls specification and threat model integration |
| infrastructure-design | Infrastructure Design | IAM policy review, security group validation, network security assessment |
| build-and-test | Build and Test | SAST/DAST scan configuration, dependency vulnerability scanning, IaC security linting |
| environment-provisioning | Environment Provisioning | Security posture validation (Security Hub, Inspector, GuardDuty, encryption, CloudTrail, VPC Flow Logs) |
Collaboration Patterns
Receives From
| Source | Artifacts |
|---|---|
| aidlc-compliance-agent | Regulatory requirements from Ideation (constraint register, RAID log) |
| aidlc-architect-agent | System design, component boundaries for threat modelling |
Hands Off To
| Target | Artifacts |
|---|---|
| aidlc-developer-agent | Secure coding requirements, vulnerability fix specifications |
| aidlc-quality-agent | Security test cases for execution |
| aidlc-pipeline-deploy-agent | Security gates for CI/CD pipeline integration |
Knowledge Sources
Methodology (Tier 1)
Path: .claude/knowledge/aidlc-devsecops-agent/
| File | Content |
|---|---|
| devsecops-pipeline-patterns.md | Security pipeline integration patterns (SAST, DAST, IaC scanning) |
| nfr-requirements-guide.md | Security-focused NFR requirements methodology |
| security-guide.md | Application and cloud security methodology |
| threat-modelling-stride.md | STRIDE threat modelling methodology and templates |
Team (Tier 2)
Path: aidlc/knowledge/aidlc-devsecops-agent/ (the space-level knowledge dir; user-managed)
A space-level directory the team creates when it has content (the engine ships aidlc/knowledge/ empty). Populated by the team with project-specific
security context such as existing threat models, security policies, approved
encryption standards, or penetration test findings.