PaloAltoNetworks

Stand up or rebuild an AWS Shifter tenant end to end (teardown, bootstrap, secrets, image bakes, deploy via the real deploy.yml dispatch, health check, base-range smoke, and a POLARIS range walkthrough). AWS only. Use when asked to rebuild, redeploy, or stand up an AWS tenant such as proof or aws-dev from a clean state.

Ship current branch — CI, SonarCloud, code review, security review, fix all issues, merge. Assumes code is already committed and pushed.

Run ADR conformance checks, explain failures, and identify required ADR/doc updates for the current change.

Review a change for architectural drift, guardrail weakening, and ADR impact before shipping.

Scan prompts, AI responses, and code for security threats using Prisma AIRS. Auto-invoke when: checking content for prompt injection, detecting sensitive data (PII, credentials, secrets), identifying malicious URLs, filtering toxic or harmful content, or validating AI-generated responses. Auto-invoke when: user asks to "scan this", "check for sensitive data", "is this safe", "check for injection", "review for security", or mentions DLP, PII, or credentials. Auto-invoke when: generating code that handles user input or authentication.