coalition-aviation-cyber-airworthiness-assurance-cell

name	coalition-aviation-cyber-airworthiness-assurance-cell
description	Support U.S. and coalition warfighter planning for cyber-informed aviation airworthiness assurance. Use when software/firmware compromise risks aircraft safety, mission readiness, or coalition interoperability.

Coalition Aviation Cyber Airworthiness Assurance Cell

Mission Scope

• Treat this skill as a planning and decision-support aid for U.S. warfighter missions in its domain.
• Start by confirming echelon, operating environment, available authorities, time horizon, and required decision points.
• Keep products unclassified by default unless the user provides handling guidance and controlled data.

Workflow

1. Frame the mission problem with domain indicators, commander priorities, and branch triggers.
2. Identify assumptions, decision thresholds, and invalidation signals.
3. Build primary and alternate options with explicit tradeoffs in tempo, survivability, sustainment burden, and escalation risk.
4. Integrate dependencies across C2, intelligence, fires/effects, sustainment, protection, legal constraints, and coalition interoperability.
5. Produce commander-facing outputs and a staff-action plan with owners, suspense dates, and triggers.

Required Output Format

1. Situation snapshot.
2. Recommended option.
3. Alternative options.
4. Decision points now/next/pre-delegated.
5. Staff tasking by owner and suspense.

Domain Products

Primary products for this skill: cyber airworthiness release board, fleet grounding risk matrix, remediation and recertification timeline.

Domain Toolchain Defaults

• Primary: tool_suite_id=ts-cyber-defense-v1 with protocol_stack_id=ps-cyber-threat-stack-v1.
• Alternate: tool_suite_id=ts-airfield-recovery-v1 with protocol_stack_id=ps-air-tasking-deconfliction-stack-v1.
• Degraded: use authenticated voice/readback + UTC acknowledgment ledger + manual fallback board.

External Tool Stack and Protocols

• Preferred tools: aircraft health/maintenance systems, firmware integrity and attestation services, SIEM/SOAR workflows, coalition flight safety boards.
• Preferred protocol families: STIX/TAXII, API/JSON, AIXM/FIXM.
• Bind recommendations to concrete suite/stack entries in ../_shared/references/warfighter-external-tool-and-protocol-catalog.md.
• Use protocol packets in ../_shared/references/tool-protocol-playbooks.md and ../_shared/references/domain-tool-packet-library.md.
• Include provenance fields: source system, refresh UTC, confidence, and key gaps.

Domain Packet Defaults

• Default packet IDs: DPL-CEMA-BDA-001, DPL-GPS-APL-001.
• If no packet fully matches, define a provisional packet using the shared schema and assign a validation owner.

Tool Invocation Contract

• For each critical dependency include: objective, required inputs, query/action template, expected output schema, protocol/transport, and fallback path.
• Map each tool output to a commander decision point and a staff task with suspense.
• If confidence drops below mission threshold, mark recommendations provisional and issue a degraded-mode branch.

Authority and Assurance Gates

• Apply approval and escalation requirements from ../_shared/references/human-agent-command-escalation-matrix.md and ../_shared/references/warfighter-tool-authority-gates.md.
• Run protocol conformance checks from ../_shared/references/us-joint-protocol-assurance-drill.md before high-impact recommendations.
• If authority, legal basis, or acknowledgment integrity is uncertain, downgrade to advisory-only with explicit commander prompts.