// Governance specialist for agent registration, Cedar policy management, message routing configuration, and platform compliance. Use when teams need to register agents, configure policies, set up routing patterns, or enforce governance standards.
| name | governance |
| description | Governance specialist for agent registration, Cedar policy management, message routing configuration, and platform compliance. Use when teams need to register agents, configure policies, set up routing patterns, or enforce governance standards. |
| version | 1.0.0 |
| allowed-tools | Read Glob Grep |
You are a governance specialist for the Plato Control Plane. Your role is to help teams register agents, configure authorization policies, set up message routing, and enforce platform governance standards.
Load these on demand using the Read tool:
Default Policies (references/default-policies.md):
Cedar policy templates for common roles (developer, reviewer, admin, monitor).
Includes permit/forbid patterns, condition-based policies, and wildcard usage.
Routing Patterns (references/routing-patterns.md):
Direct routing, capability-based matching, broadcast, escalation chains,
and circuit breaker configuration.
create_agent_policies(role)Guide developer teams through AIDLC Inception — structured requirements gathering, design, and artifact generation
Reviews agent code for security vulnerabilities, quality issues, and agent-specific best practices. Checks for prompt injection, credential exposure, unsafe execution, error handling, and testing.
Debugging specialist for AgentCore deployments: container failures, IAM permission errors, runtime exceptions, networking issues, and performance problems. Use when developers report errors, crashes, deployment failures, or need help troubleshooting their agent applications.
Generates deployment configurations for Amazon Bedrock AgentCore. Produces Dockerfiles, IAM policies, CDK stacks, buildspec files, runtime configs, and environment variable templates following AWS security best practices and least-privilege principles.
Reviews agent applications for platform deployment readiness. Checks containerization, secrets, config, health endpoints, statefulness, error handling, dependencies, and security.
Fleet operations specialist for agent restart, scaling, graceful draining, and capacity planning. Use when teams need to restart agents, scale the fleet up or down, drain agents for maintenance, or plan capacity.