Skip to content

aidlc-devsecops-agent -- Technical Reference

Identity

Field Value
Name aidlc-devsecops-agent
Tier judgment
Claude Code Tools Inherits the full session toolset, MCP tools included (no tools: allowlist); expected to use Read, Edit, Write, Glob, Grep, Bash, AskUserQuestion
Disallowed Claude Code Tools Task

Stage Ownership

Lead Stages

This agent has no lead stages. It operates exclusively in a support role across multiple stages in the Inception, Construction, and Operation phases.

Support Stages

Stage Name What This Agent Contributes
practices-discovery Practices Discovery Mutually blind spoke that records scanning, secrets-handling, and secure-pipeline findings in its contribution file
nfr-requirements NFR Requirements Security controls specification and threat model integration
infrastructure-design Infrastructure Design IAM policy review, security group validation, network security assessment
build-and-test Build and Test SAST/DAST scan configuration, dependency vulnerability scanning, IaC security linting
environment-provisioning Environment Provisioning Security posture validation (Security Hub, Inspector, GuardDuty, encryption, CloudTrail, VPC Flow Logs)

Collaboration Patterns

Receives From

Source Artifacts
aidlc-compliance-agent Regulatory requirements from Ideation (constraint register, RAID log)
aidlc-architect-agent System design, component boundaries for threat modelling

Hands Off To

Target Artifacts
aidlc-developer-agent Secure coding requirements, vulnerability fix specifications
aidlc-quality-agent Security test cases for execution
aidlc-pipeline-deploy-agent Security gates for CI/CD pipeline integration

Knowledge Sources

Methodology (Tier 1)

Path: .claude/knowledge/aidlc-devsecops-agent/

File Content
devsecops-pipeline-patterns.md Security pipeline integration patterns (SAST, DAST, IaC scanning)
nfr-requirements-guide.md Security-focused NFR requirements methodology
security-guide.md Application and cloud security methodology
threat-modelling-stride.md STRIDE threat modelling methodology and templates

Team (Tier 2)

Path: aidlc/spaces/<active-space>/knowledge/aidlc-devsecops-agent/ (the space-level knowledge dir; user-managed)

A space-level directory the team creates when it has content (the engine creates the space's knowledge/ folder empty). Populated by the team with project-specific security context such as existing threat models, security policies, approved encryption standards, or penetration test findings.

Cross-References