arm-mcp-poc-catalog

Deterministic procedure to watch an ARM deployment, evaluate a health gate, and automatically cancel + redeploy the last-known-good template on breach.

Deterministic procedure to find tag-non-compliant Azure resources, emit a fixed-format report, and (on explicit authorisation) deploy ARM patches to apply missing tags.

Deterministic procedure to inspect an ARM template, cross-reference affected resources via ARG, categorize each change, flag policy violations and dependency fan-out, and emit a fixed-format risk report.

Deterministic procedure to surface top cost-driving resources by querying ARG for new/resized resources in a time window, joined with owner tags, and emit a fixed-format markdown report.

Deterministic procedure to provision, monitor, and cancel pre-approved ARM golden-path template deployments with naming guardrails, tag enforcement, and compliance checks.

Deterministic procedure to compare a checked-in ARM template with live Azure state and emit a property-level drift report in markdown + JSON patch (RFC 6902) format.

Deterministic procedure to answer blast-radius questions during incidents using ARG change feed, in-flight deployments, and RBAC audit — with a cancel path for running deployments.

Deterministic procedure to simulate the compliance impact of a draft Azure Policy definition by translating its if-block into ARG queries and counting would-be non-compliant resources.

Deterministic procedure to map an Azure estate across subscriptions, render a hierarchical Mermaid/Markdown diagram with a high-risk overlay, and emit a fixed-format report.

Deterministic procedure to deploy a broken ARM template, classify errors using a fixed error-code→fix-pattern rule pack, apply fixes, and redeploy in a bounded retry loop.

Deterministic procedure for the "First 60 Seconds" incident triage agent. Runs three fixed rules (change feed, in-flight deployments, RBAC changes), renders a ≤1-screen 80-char-wide report, and writes an audit trail.

Deterministic procedure to check whether a proposed ARM deployment is permitted under the current freeze schedule and emit a fixed-format decision report.

Deterministic procedure to evaluate ARG health preconditions before an ARM deployment and emit a fixed-format preflight-results report.

Deterministic procedure to evaluate Azure workloads against a fixed reliability rule pack and emit a fixed-format markdown report.

Deterministic procedure to evaluate SLO error budget for a target service and emit an ALLOW or BLOCK deployment gate decision.

Deterministic procedure to query Azure resource counts via ARG, compare against runbook quota limits, gate deploys, and suggest alternate regions. Uses generate_query → execute_query (no validate_query — see Determinism Deviation).

Deterministic procedure to parse an ARM template, project user-facing blast radius via ARG queries, and emit a fixed-format simulation report.

Deterministic procedure to scan Azure scopes for stuck ARM deployments, classify each by cause, and offer per-deployment cancel with confirmation.

Deterministic procedure to evaluate Azure resources against a fixed security rule pack and emit a severity-scored crown jewels report.

Deterministic procedure to scan Azure VMs for right-size opportunities, compute savings estimates, and (on explicit confirmation) deploy resize ARM templates.

Deterministic procedure to answer Azure resource questions via pre-canned ARG query categories, in read-only mode, with audit logging.

Deterministic procedure to walk a runbook DSL state machine, dispatch MCP tool calls per step type, persist state after every transition, and emit a full evidence pack.

Deterministic procedure to reconstruct a full change timeline (deployments + property changes + RBAC) from Azure Resource Graph over an incident time window and render a postmortem-ready report.

Deterministic procedure to find drift + orphaned resources in an Azure scope and compose a proposed PR with corrective ARM patches and savings estimates.