redhat-cop

Orchestrate full epic development end-to-end. Use when the user says 'dev this epic' or 'implement epic [number]'.

Creates a dedicated story file with all the context the agent will need to implement it later. Use when the user says "create the next story" or "create story [story identifier]"

Creates a dedicated story file with all the context the agent will need to implement it later. Use when the user says "create the next story" or "create story [story identifier]"

Execute story implementation following a context filled story spec file. Use when the user says "dev this story [story file]" or "implement the next story in the sprint plan"

Triage the deferred-work ledger for the bmad-loop orchestrator: verify every open entry against the actual codebase and return a machine-readable partition (bundles, already-resolved, blocked, skip, human decisions). Also migrates legacy pre-DW-format ledgers…

Review test quality using best practices validation. Use when user says "lets review tests" or "I want to evaluate test quality"

Sets up BMAD Loop Skills module in a project. Use when the user requests to 'install bmad-loop module', 'configure BMAD Loop Skills', or 'setup BMAD Loop Skills'.

Triage the deferred-work ledger for the bmad-loop orchestrator: verify every open entry against the actual codebase and return a machine-readable partition (bundles, already-resolved, blocked, skip, human decisions). Also migrates legacy pre-DW-format ledgers…

Maintains the ansible/roles/accounts_local Ansible role that creates/deletes local users and groups, sets passwords, sudoers entries, supplementary groups, and SSH authorized keys, as part of the Linux SOE. Use when checking or fixing local (non-domain)…

Maintains the ansible/roles/accounts_policy Ansible role that deploys local account, login, PAM, and password-quality configuration (login.defs, pwquality.conf, faillock.conf, limits.conf, authselect profile) on RHEL-family systems as part of the Linux SOE.…

Maintains the ansible/roles/audit_setup Ansible role that installs auditd, deploys an auditd.conf and rules file from role-provided templates, and manages the locked-rules reload/reboot behavior on RHEL-family systems as part of the Linux SOE. Use when…

Maintains the ansible/roles/boot_parameters Ansible role that enables/disables GRUB kernel command-line parameters via grubby, sets the boot timeout and optional bootloader password, and can reboot the host to apply changes, on RHEL-family systems as part of…

Maintains the ansible/roles/certificates Ansible role that manages the system CA trust store (anchors, blocklist, extended-format files) via update-ca-trust, as part of the Linux SOE. Use when checking or fixing trusted/blocked CA certificates.

Maintains the ansible/roles/cron_setup Ansible role that installs cronie, manages /etc/cron.allow and /etc/cron.deny, and declaratively manages crontab entries via ansible.builtin.cron on RHEL-family systems as part of the Linux SOE. Use when checking or…

Maintains the ansible/roles/dns_cache Ansible role that enables or disables local DNS caching via dnsmasq, systemd-resolved, or nscd, as part of the Linux SOE. Use when checking or fixing DNS caching configuration.

Maintains the ansible/roles/domain_ad Ansible role that joins or leaves an Active Directory domain via realmd/adcli and configures sssd/authselect, as part of the Linux SOE. Use when checking or fixing AD domain membership.

Write and run tests for the network.compliance collection using Molecule from ansible-dev-tools. Use when creating scenarios for STIG rules, running lint checks, testing idempotency, or validating compliance workflows end-to-end.

Add support for a new network OS platform to the network.compliance collection. Use when extending STIG compliance coverage to a device type not yet supported. Currently supports Cisco IOS/IOS-XE. Covers scan, evaluate, remediate, and report roles.

Implement a new STIG rule in the network.compliance collection. Use when adding evaluation, remediation, or reporting for a specific STIG V-key across supported network platforms. Covers the full lifecycle from rule metadata to integration test.

Review pull requests and code changes for the network.compliance collection. Use when reviewing PRs, checking code quality, validating STIG rule implementations, or ensuring validated content standards are met.

Set up a local development environment for the network.compliance collection. Use when cloning the repo for the first time, onboarding a new contributor, or troubleshooting environment issues. Covers ade, ansible-dev-tools, and virtual environment setup.

Run a full filetree import → export → import roundtrip against AAP using test_filetree_read.yaml and test_filetree_create.yaml. Use when validating filetree_create/filetree_read changes, issue fixes, or when the user asks for a complete roundtrip test. Never…

Add a new Controller, Gateway, Hub, or EDA object to infra.aap_configuration_extended filetree_create and filetree_read roles. Use when exporting or importing CaC YAML, adding filetree_create output, filetree_read loaders, or fixing missing entity support.

Export a Job Template or Workflow Job Template and related Controller objects from PRE and import into PRO using filetree_create/filetree_read. Use when migrating JT/WFJT between AAP environments, export_related_objects, env_variables stubs, or PRE→PRO CaC.

Create semantic conventional commits from the working tree, grouped by purpose. Use when committing changes, organizing git history, or the user invokes autocommit.