Skip to content

aidlc-devsecops-agent -- Technical Reference

Identity

Field Value
Name aidlc-devsecops-agent
Tier judgment
Allowed Claude Code Tools Read, Edit, Write, Glob, Grep, Bash, AskUserQuestion
Disallowed Claude Code Tools Task

Stage Ownership

Lead Stages

This agent has no lead stages. It operates exclusively in a support role across multiple stages in the Inception, Construction, and Operation phases.

Support Stages

Stage Name What This Agent Contributes
practices-discovery Practices Discovery Mutually blind spoke that records scanning, secrets-handling, and secure-pipeline findings in its contribution file
nfr-requirements NFR Requirements Security controls specification and threat model integration
infrastructure-design Infrastructure Design IAM policy review, security group validation, network security assessment
build-and-test Build and Test SAST/DAST scan configuration, dependency vulnerability scanning, IaC security linting
environment-provisioning Environment Provisioning Security posture validation (Security Hub, Inspector, GuardDuty, encryption, CloudTrail, VPC Flow Logs)

Collaboration Patterns

Receives From

Source Artifacts
aidlc-compliance-agent Regulatory requirements from Ideation (constraint register, RAID log)
aidlc-architect-agent System design, component boundaries for threat modelling

Hands Off To

Target Artifacts
aidlc-developer-agent Secure coding requirements, vulnerability fix specifications
aidlc-quality-agent Security test cases for execution
aidlc-pipeline-deploy-agent Security gates for CI/CD pipeline integration

Knowledge Sources

Methodology (Tier 1)

Path: .claude/knowledge/aidlc-devsecops-agent/

File Content
devsecops-pipeline-patterns.md Security pipeline integration patterns (SAST, DAST, IaC scanning)
nfr-requirements-guide.md Security-focused NFR requirements methodology
security-guide.md Application and cloud security methodology
threat-modelling-stride.md STRIDE threat modelling methodology and templates

Team (Tier 2)

Path: aidlc/knowledge/aidlc-devsecops-agent/ (the space-level knowledge dir; user-managed)

A space-level directory the team creates when it has content (the engine ships aidlc/knowledge/ empty). Populated by the team with project-specific security context such as existing threat models, security policies, approved encryption standards, or penetration test findings.


Cross-References