AgentTeams — Feature Inventory¶
Version baseline: 1.1.0.dev0 · counts last reconciled by hand: 2026-07-29
Features below are grouped by capability area. This inventory may include capabilities currently present on
main that are not yet part of a tagged release. Release-specific availability should be verified against
CHANGELOG.md and repository tags.
The per-category counts are hand-maintained; the baseline is not
The counts are not derived from the code and will drift between
reconciliations. Treat them as indicative and the category descriptions as
authoritative; verify any specific capability against CHANGELOG.md or the
CLI's own --help.
Deriving the counts requires a machine-readable feature set, which the module does not yet carry. Until it does, this note is the honest alternative to a number that looks computed and is not.
Three things here are checked, because they never required judgment — they were only ever hand-copied:
- the version baseline above equals
agentteams.__version__(tests/test_api_doc_signatures.py::test_inventory_version_baseline_matches_the_installed_version). It had read0.1.0 (2026-04-15)while the module was at1.0.0rc6— four months and a major version stale, so a reader checking whether a capability had shipped was reading a document describing a different release; - the Governance Agents row's members equal
analyze.GOVERNANCE_AGENTS; - the Total equals the sum of its own column.
Summary¶
| Category | Features | Description |
|---|---|---|
| Core Pipeline | 39 | Project ingestion, team generation, framework adapters, CLI, templates, schemas |
| Enrichment | 11 | Auto-enrichment, notebook scanning, tool catalog, live PyPI metadata |
| Section Fencing & Safe Merges | 5 | AGENTTEAMS:BEGIN/END markers, non-destructive merge mode |
| Security Intelligence | 6 | Live CVE/CISA-KEV/EPSS data, credential scanning, security reference files |
| Migration & Update | 8 | --migrate, --revert-migration, --enrich, --auto-correct, --scan-security, security flags, multi-workspace fleet update (--fleet) |
| Safety & Backups | 6 | Automatic backups, restore capability, --no-backup, --list-backups, public backup API |
| Governance Agents | 11 | navigator, security, code-hygiene, adversarial, conflict-auditor, conflict-resolution, cleanup, agent-updater, agent-refactor, repo-liaison, git-operations |
| Workflows | 14 | Workflows 1–12 with constitutional rules, guards, and final-check termination |
| Governance Infrastructure | 12 | @agent-updater auto-triggers, @adversarial guards, truth check, drift-as-trigger, deployment protocol |
| Interoperability | 8 | convert, interop, bridge modules; handoff manifest; CI flags |
| Bridge Automation | 7 | Daily maintenance script, CI workflows, staleness watchdog, deduplication |
| Cross-Repository Support | 7 | @repo-liaison agent, adjacent-repo tracking, impact/update/coordination protocols |
| Drift Trust & Delivery Gating | 9 | Structural drift diff, delivery receipts, behavioural-drift detection, trust gating |
| Retrieval & Review-Time Utilities | 3 | Memory index, code & API index, session scan |
| Feature Audit | 5 | Machine-readable feature registry, per-tier proof enforcement, reachability classification, end-to-end CLI probes |
Total: 151 documented features across 15 capability areas — generated from references/feature-registry.csv, which is itself derived from the body of feature-inventory.md. Checked by tests/test_feature_registry.py::test_the_summary_table_is_generated_from_the_registry. It read 125 across 12 until 2026-08-07, having silently omitted two whole capability areas and undercounted the rest by nine: the only check compared the total to its own column, so a table that agreed with itself and with nothing else passed.
Artifact Selection Matrix¶
Use this matrix when deciding which module/artifact to rely on for a specific operational goal.
| Goal | Primary Module | Primary Artifact | Typical Trigger | Notes |
|---|---|---|---|---|
| Detect template/structure drift | drift |
references/build-log.json |
--check, --update |
Structural + template fingerprint analysis |
| Update many workspaces at once | fleet |
<DIR>/.agentteams-fleet/<run-id>/report.json |
--fleet DIR --update --merge |
Git-commit snapshot per workspace + git diff content audit; non-destructive (merge-only); dry-run by default, --yes to apply |
| Verify behavioral conformance | eval_suite + behavioral_drift |
references/eval-suite.json + trajectory payload |
Post-run behavioral validation | Neutral suite + runtime trajectory comparison |
| Fast historical retrieval | memory_index |
references/memory-index.json |
--refresh-index, --query-index |
Use lexical first, vector when thematic recall is needed |
| Cost/capability routing policy | model_routing |
references/model-routing.json |
--cost-routing |
Tier-role contract, concrete models resolved downstream |
| Cross-framework eval execution | eval_adapters |
Generated adapter output (Inspect module / OpenAI Evals JSON) | Adapter export step | Converts neutral eval-suite into framework-specific eval assets |
| Security intelligence refresh | security_refs |
references/security-vulnerability-watch.reference.md + .json |
Normal generate/update path (unless offline) | Live-data artifacts; intentionally non-deterministic |
| Rollback-ready update safety | emit backup APIs |
.agentteams-backups/<timestamp>/ + _manifest.json |
--update, --merge, --overwrite |
Supports restoration and backup integrity checks |
Core Pipeline¶
Team Generation¶
- Agent Teams Module — Generate a complete, coordinated AI agent team from a single project description file
- Four-Tier Agent Architecture — Orchestrator → Governance Agents → Domain Agents → Workstream Experts
- Project Description Ingestion — Load project briefs from
.jsonor.mdformat - Project Directory Scanning — Scan an existing project directory to supplement missing brief fields
- Project Type Classification — Infer the deliverable type from the project goal
- Agent Archetype Selection — Select the appropriate archetype set from the schema-supported archetype catalog, including contextual post-production auto-selection
- Team Manifest Generation — Build complete team composition metadata
- Template Placeholder Resolution — Resolve
{AUTO:token}and{MANUAL:token}placeholders
Core Pipeline Modules¶
ingestModule — Load and normalize project descriptions; parse JSON/Markdown; scan directoriesanalyzeModule — Classify project type; select archetypes (including contextual post-production auto-selection for any task domain and manualselected_archetypesoverride support); detect operational tool docs; build manifestrenderModule — Resolve placeholders in templates; compute template hashes for drift detectionemitModule — Write rendered files to disk with dry-run and overwrite-protectiondriftModule — Detect content drift (template hash comparison) and structural drift (team composition)scanModule — Proactive security scan for PII paths, credentials, unresolved placeholdersauditModule — Static post-generation audit; optional AI-powered review via Copilot CLIremediateModule — Auto-correction support via Copilot CLI after audit findings
Visualization & Graph¶
graphModule — Directed graph inference for team topology- Mermaid Output — Team topology diagram in Mermaid format
- DOT Output — GraphViz format for advanced visualization
- JSON Output — Machine-readable team topology
- Markdown Output — Human-readable topology; auto-generated in
references/pipeline-graph.md
Framework Adapters¶
copilot-vscodeAdapter —.agent.mdfiles with YAML front matter; outputs to.github/agents/copilot-cliAdapter — Plain.mdsystem prompts; outputs to.github/copilot/claudeAdapter — Claude Code front matter.md+CLAUDE.md; outputs to.claude/agents/- Framework-Agnostic Interface — Extensible adapter base class for adding new frameworks
Two additional first-class adapters extend this set:
gooseAdapter (beta) — Block / AAIF Goose recipe YAML (.goose/recipes/*.yaml, schema1.0.0); orchestrator delegation encoded natively assub_recipes(deeper edges becomesummonload(...)); team brief written to the repo-rootAGENTS.mdplus a.goosehintsintegrator. Also a valid--convert-fromand--bridge-fromtarget (not an interop target). Beta — generate/convert/bridge supported, interop planned; adapter API not yet under the stability contract. Seeframeworks.agents-mdAdapter — Cross-tool AGENTS.md standard (AAIF / Linux Foundation); emits a single framework-neutral repo-rootAGENTS.md(read by ~10 AI coding tools) plus per-specialist detail under.agents/. Generate-only (not a convert/interop/bridge target).
A thinner prep-scoped adapter also ships:
codexAdapter — OpenAI Codex target (registry frameworkcodex): emits each agent as a Codex custom agent.codex/agents/<slug>.toml(native generation and interop source/target), writes the repo-rootAGENTS.mdonly when absent or Codex-generated, and splices operator-specified MCP servers into.codex/config.toml(seecodex_mcp_emit). Generate-only — a valid--frameworktarget; not a convert/interop/bridge target (codexis absent from the--bridge-source-frameworkchoice list, so it is rejected at argument-parse time). Seeframeworks.
CLI¶
agentteams/build_team.pyCLI — Command-line interface wiring all pipeline stages--description— Path to project brief (.jsonor.md)--project— Target project directory--framework— Output framework:copilot-vscode,copilot-cli,claude,goose,agents-md, orcodex--dry-run— Preview output without writing files--overwrite— Allow overwriting existing agent files--self— Self-maintenance: regenerate the module's own agent team--post-audit— Run static + AI-powered conflict and presupposition review
Templates & Schemas¶
- 11 Universal Governance Templates — One tier-2 template per governance agent archetype
- 20 Domain Templates — 14 project-type archetype templates (incl.
content-enricherandwork-summarizer) plus 6 tool templates - 3 Builder Templates — Team Builder agent variants
- 6 Workstream Expert Templates — Component-scoped expertise patterns
project-description.schema.json— JSON Schema for brief validationteam-manifest.schema.json— JSON Schema for team manifest validation
The universal/ template library includes the tier-1 Orchestrator template and all 11 always-included tier-2 governance templates.
Enrichment¶
enrichPackage — Context-aware auto-enrichment pipeline- Rule-Based Fill Generation — Pattern-matched placeholder completion
- Jupyter Notebook Scanning — Extract evidence and examples from
.ipynbsources - Tool Catalog Integration — Reference available tools and frameworks for auto-fill
- LLM Model Detection — Identify referenced models and optimize prompts
- Enrichment Coverage Audit — Enumerate unresolved defaults; export
references/defaults-audit.csv - Dynamic Tool Detection — Automatic framework/tool identification from project structure
- Auto-PyPI Metadata Fetch — Fetch package metadata for tool catalog enrichment
- Agent Integration Audit — Verify all agents have required integration details
- Agent Knowledge Updates — Incorporate discovered tool knowledge into agent content
--enrichFlag — Run enrichment pass after generation
Section Fencing & Safe Merges¶
AGENTTEAMS:BEGIN/ENDFence Markers — Delineate managed regions in agent filesFENCE-CONVENTIONS.md— Specification for fence marker usage and authoring rules- Non-Destructive Merge Mode (
--merge) — Update fenced regions only; preserve all user content outside fences --update --mergeSafety Fix —--updatenow honors--merge; no longer silently overwrites user content- 11 Instrumented Templates — All governance and domain templates ship with fence markers
Security Intelligence¶
security_refsModule — Render live threat intelligence into generated security reference files- Live CVE/CISA-KEV/EPSS Data — Pull current threat data on every pipeline run
--security-offlineFlag — Disable live intelligence fetching for air-gapped or offline runs--security-max-itemsFlag — Cap the number of live threat items rendered--security-no-nvdFlag — Skip NVD fetching while retaining CISA-KEV and EPSS data- Non-Deterministic Snapshot Exclusion —
test_snapshot_comparisonskips live-data files
Migration & Update¶
--migrateFlag — One-step fencing migration: tags HEAD aspre-fencing-snapshot, then regenerates all files with fenced templates--revert-migrationFlag — Undo a migration by resetting topre-fencing-snapshotgit tag--update --mergeCanonical Mode — Incremental re-render that preserves manual placeholder values, preserves user-authored content outside fences, and restores expected standard outputs missing on disk--pruneMode — Remove stale agent components from an existing team--auto-correctFlag — Invoke Copilot CLI to repair post-audit findings; reruns audit to confirm--scan-securityFlag — Proactive scan for PII paths, credential patterns, unresolved placeholdersavailable_workflowsFenced Section — Workflow documentation fenced so--update --mergepropagates future changes while preserving project-specific rules- Update Deployment Protocol & Fleet Update (
--fleet DIR) — A documented multi-step update procedure (dry-run, backup verify, git diff capture, outside-fence analysis (OK/WARN/ERROR), WARN review gate), now productized as the--fleetcommand that runs it across every workspace under a directory: discovers.github/agents/and.claude/targets, snapshots each git workspace via a commit, applies--update --mergein-process, then classifies thegit diffby content signals (shrink Notices, USER-EDITABLE deletions). Non-destructive (merge-only); dry-run by default,--yesto apply; report under<DIR>/.agentteams-fleet/<run-id>/. Seefleet.
Safety & Backups¶
- Automatic Backup Before Writes — Timestamped backup of all agent files before any
--overwrite,--merge, or--updaterun - Backup Storage —
.agentteams-backups/YYYYMMDD-HHMMSS/(excluded from git) --no-backupFlag — Suppress backup creation for CI environments--list-backupsFlag — List available backup timestamps--restore-backup [TIMESTAMP|latest]Flag — Restore a specific backupemit.backup_output_dir()/emit.list_backups()/emit.restore_backup()— Public backup API
Governance Agents¶
The following eleven agents are included in every generated team, regardless of project type.
@navigator— Project structure mapping, file location queries, dependency tracking (read-only)@security— Highest-priority sentinel; clears destructive operations, credential exposure, and external writes (read-only)@code-hygiene— Architecture auditor; file hygiene, duplication, script lifecycle, agent doc quality — invariant CH-01 through CH-20 plus project extension rules CH-21–CH-24 (Testing, Type Safety, Defensive Programming; CH-24:try/except/finallyis a last resort — encode expected conditions in dictionaries/guards and fail hard, reinforcing CH-23 Fail Fast) (read-only)@adversarial— Presupposition critic; challenges plans and hidden assumptions before execution (read-only)@conflict-auditor— Detects logical inconsistencies across all output files; logs findings (read + log)@conflict-resolution— Makes ACCEPT/REJECT/REVISE decisions on flagged conflicts (read + edit)@cleanup— Removes stale artifacts; requires@securityclearance; applies four safety checks before deletion (edit)@agent-updater— Synchronizes agent documentation when project structure or content changes (edit)@agent-refactor— Extracts shared data to reference files; enforces spec compliance (edit)@repo-liaison— Manages cross-repository impact assessment, adjacent-repo updates, and orchestrator coordination (edit)@git-operations— Handles commit/push, pull/merge/rebase, recovery, and conflict-resolution git workflows (edit)
Workflows¶
Workflows are step sequences embedded in the generated Orchestrator agent. Every built-in workflow terminates with an unconditional call to Workflow 11 (Final Check). Optional user-added workflow extensions must explicitly include the same terminal handoff.
- Workflow 1 — Produce Deliverable — Source review → Component Brief → production → quality audit → style audit → consistency check
- Workflow 2 — Revise Deliverable — Revision → adversarial review → quality audit → consistency check →
@agent-updatersync - Workflow 3 — Technical Accuracy Audit — Validate claims against source files; conditionally correct and re-audit
- Workflow 4 — Compile Final Output — Format conversion → reference verification → final assembly → cleanup
- Workflow 5 — Consistency Review —
@adversarialchallenge → cross-file consistency audit → technical validation →@agent-updater - Workflow 6 — Documentation Maintenance — Sync agent docs → refactor check → consistency audit
- Workflow 7 — Cleanup — Identify stale artifacts →
@adversarialreview →@securityclearance → delete → update docs - Workflow 8 — Code Hygiene Audit — CH-01–CH-24 audit (CH-01–CH-20 invariant + CH-21–CH-24 project extensions) →
@adversarialguard before deletion plan → conditional cleanup/refactor - Workflow 9 — Cross-Repository Coordination — Impact assessment → approved updates → adjacent-repo writes (security-cleared) → consistency audit
- Workflow 10 — Plan Documentation & Review — Plan status scan → pre-execution truth check via
@technical-validator→ surface blocked steps - Workflow 10B — Work Summary Reporting — Generate daily/weekly/monthly summaries from plan artifacts and git history, then audit them
- Workflow 10C — Post-Production Audit Verification (Optional) — User-editable extension workflow for outcome verification after implementation claims; runs
@post-production-auditor+ adversarial/conflict checks; blocks closeout onFAIL/INCONCLUSIVE - Workflow 11 — Final Check (Part A) — Scan current plan's
steps.csvforpending/blockedrows; create audited sub-plans for each - Workflow 11 — Final Check (Part B) — Scan
CHANGELOG.mdKnown Issues,tmp/by-week/YYYY-Www/plan CSVs (legacy:tmp/root), andgit statusfor at-large open issues; subject summaries to@adversarial+@conflict-auditor
Governance Infrastructure¶
- Constitutional Rules — Immutable rules encoded in the Orchestrator template: security clearance gates, code-hygiene before merge, conflict audit after multi-file sessions, adversarial review before irreversible changes
- Authority Hierarchy — Explicit precedence ordering encoded in every generated Orchestrator (template library → schemas → pipeline source → placeholder conventions → implementation plan)
- Automatic
@agent-updaterRouting in Documentation-Impact Workflows — Routed in Workflows 1, 2, 3, 5, 6, 7, 8, and 9 when knowledge-mutating or coordination changes occur @adversarialGuards in Audit Workflows —@adversarialruns as step 1 of Workflow 5 and step 2 of Workflow 8 to prevent stale-assumption conclusions- Pre-Execution Truth Check —
@technical-validatormust verify factual claims in each plan step before it is markedin_progress - Drift-as-Trigger — An explicit trigger in
@agent-updatertrigger tables: drift detected by--checkrequires re-render and re-verify before the next workflow - Initialization-as-Trigger — First successful team generation is an explicit lifecycle trigger: it establishes the baseline inventory and trigger corpus used by future update and drift logic
- Update Lifecycle Trigger Contract — Canonical
--update --mergeruns must reconcile drift, emit newly required files, preserve manual values, and preserve user-authored content outside fenced regions - Missing Expected Output Recovery Trigger — During update, absent expected standard outputs are treated as drift and must be restored even if template hashes are unchanged
- Cross-Repository Security Rule — Any write outside this project's configured primary output directory must be assessed by
@repo-liaisonand cleared by@security - User-Editable Gap Safety Pattern — Optional routing rows and optional workflow extensions (such as 10C) must be added outside FENCED sections so
--update --mergedoes not force-propagate them to teams that do not include the required agent - Post-Production Closure Gate Artifacts — Optional post-production audits can emit
closure_gate_status.json,capability_check.json, anddecision_replay_packet.jsonto support fail-closed closeout decisions and replay-auditability
Interoperability¶
convertModule — Direct format migration between framework outputs (copilot-vscode↔copilot-cli↔claude), and togoose(emits recipes + repo-rootAGENTS.md+.goosehints; delegation wired fromcopilot-vscodesources, flat fromclaude/copilot-cli)--convert-fromFlag — Convert an existing agent team to a different framework format (targets:copilot-vscode,copilot-cli,claude,goose)- File Classification — Auto-detect file role (agent, instruction, reference) for correct translation
interopModule — Canonical Agent Interface (CAI) normalization and compatibility pipeline (copilot-vscode/copilot-cli/claudetargets;gooseis refused — the CAI does not carry the handoff graph Goose needs, so use--convert-frominstead)--interop-fromFlag — Run the CAI interop pipeline against an existing teambridgeModule — Lightweight runtime compatibility bridge; generate bridge artifacts without regenerating sources (targets includegoose— writes fencedAGENTS.md/.goosehints/.goose/README.mdpointers)--bridge-fromFlag — Generate bridge artifacts from a source canonical team- Runtime Handoff Manifest —
references/runtime-handoffs.json; emitted when handoffs are extracted from non-VS Code adapters, consumed by bridge layers and external tooling
Bridge Automation¶
run_daily_bridge_maintenance.sh— Daily bridge refresh/check script that halts the run when the security-maintenance preflight fails and continues with warnings only for non-critical bridge refresh/check subtasksbridge-maintenance.ymlCI Workflow — GitHub Actions workflow for daily automated bridge maintenancebridge-watchdog.ymlCI Workflow — Staleness monitoring; creates deduplicated GitHub issues when drift is detected- Bridge Staleness Detection — Compare bridge artifacts against source team; surface divergence
- Deduplicated Issue Creation — Watchdog suppresses duplicate GitHub issues for the same staleness event
- CI Fallback Mechanism — Bridge refresh/check subtasks continue with warnings, but security-maintenance preflight failures abort the workflow
- Snapshot Archive — Pre-update snapshots stored in
references/plans/snapshots-*/for reversible rollback
Cross-Repository Support¶
@repo-liaisonAgent — Manages cross-repository impact assessment, updates, and orchestrator coordinationreferences/adjacent-repos.md— Living record of adjacent repositories with changelog entries- Protocol 1 — Impact Assessment — Evaluate which adjacent repos are affected by a proposed change; produce an Impact Report
- Protocol 2 — Adjacent Updates — Apply approved updates to neighboring project repos (requires
@securityclearance on each write) - Protocol 3 — Orchestrator Coordination — Formal coordination request between independent orchestrators managing different repositories
@repo-liaisonin Constitutional Rules — Any write outsidesrc/must be assessed by@repo-liaisonbefore@securityclearance can be grantedorchestrator-workflows.reference.md— Reference guide documenting the baseline workflow set plus optional extension workflows (for example 10C when configured); kept in sync by@agent-updater
Drift Trust & Delivery Gating¶
FINGERPRINT_ALGO_VERSIONConstant — Module-level integer inagentteams.driftrecording the version of the manifest-fingerprint algorithm; recorded intobuild-log.jsonon every write and consulted on--check/--updateto migrate existing teams when fingerprint semantics change- Algo-Bump Migration Mechanism —
compute_structural_diffdetectsfingerprint_algo_versionmismatch between the stored build-log and the current module value, setsmanifest_changed, and promotes affected files with_reason = "fingerprint algo version bumped"for a one-shot re-evaluation; legacy logs missing the field do not trigger promotion on their own - Observable Baseline Self-Heal on
--update— When an--updaterun finds no material drift but the recorded fingerprint or algo version is stale, the build-log baseline is refreshed and the run prints✓ Healed build-log baseline (no material drift; fingerprint refreshed).; heal occurs before delivery-receipt attestation refine_manifest_promotionRender-Faithful Reconciliation — Pure public function inagentteams.driftthat demotes fingerprint-only promotions whose rendered content matches disk byte-for-byte; caller supplies acontent_matches(path)closure; preservesmanifest_changedas telemetry--checkOption C Render-Faithful Mode — When the structural diff setsmanifest_changedwith a manifest-promotion reason,--checkruns the full render pipeline (render.render_all→ framework adapter → handoff/graph append) and appliesrefine_manifest_promotionagainst a content-match closure mirroring--update's, eliminating false-positive drift signals--check/--update --dry-runParity Contract —--checkand--update --dry-runreport the samehas_changesset for the same inputs; enforced bytests/test_integration.py::test_check_parity_with_update_dry_run- Delivery Receipt Artifact —
references/delivery-receipt.jsonwritten after every successful--update(non-dry-run) recordingartifact_type,receipt_schema_version,delivered_at,project_name,framework,manifest_fingerprint, andfingerprint_algo_version; heal-first-attest-second order ensures the receipt records the post-heal state; write failures warn on stderr but do not fail the run; receipt file is excluded from drift detection agentteams/schemas/delivery-receipt.schema.json— Draft-07 JSON Schema for the delivery receipt;additionalProperties: false; top-level discriminator isartifact_type(const"delivery-receipt");receipt_schema_versionconst"1.0"docs_src/delivery-procedure.mdOperator Guide — Documents the heal/attest order, receipt schema, and operator procedure for verifying a delivered update; registered under Guides inmkdocs.yml
Retrieval & Review-Time Utilities¶
- Confidence-Tiered Retrieval —
memory_index.query_index()andcode_index.query_partition()/query_partitions()hits carry aconfidencefield ("reliable"/"candidate"/"weak") computed fromscoreagainst per-strategy thresholds, printed alongsidescore=by--query-index/--query-code. Replaces threshold-interpretation prose duplicated across 6 templates (conflict-resolution,conflict-auditor,quality-auditor,research-analyst,retrieval-integrator,tool-doc-researcher). Seememory-index,code-index. agentteams.scanReview-Time Invocability —verdict_for_findings()(HALT/CONDITIONAL_PASS/PASS) and apython -m agentteams.scan <path>entrypoint let a shell-only runtime invoke the deterministic PII/credential scanner at review time, not only at generation time via--scan-security.security.template.mdRules S-1/S-8 cite it as the preferred check. Seescan.session_scanModule —scan_repo_issues()consolidates the orchestrator's Workflow 11 Part B closeout scan (CHANGELOG "Known Issues", plan-steps pending/blocked rows,git statusanomalies) into one call, with apython -m agentteams.session_scanentrypoint. Seesession_scan.
Feature Audit¶
- Machine-Readable Feature Registry —
references/feature-registry.csvbinds every documented feature to the test that proves it works and a distinct test that fails when it breaks. Derived from this document's own body, so the prose stays the single authored source. Seefeature-audit. - Per-Tier Proof Enforcement —
feature_audit.classify()reports a finding for any requested tier that executed zero proofs, so an empty tier cannot hide behind a populated one. A tier whose rows are all waived or not-provable is exempt. - Live-Tier Reachability Classification — transport failures, anti-bot challenges (
HTTP 403/202) and the research CLI's ownbackend=noneexhausted-backends signal classify asUNREACHABLE, which reports but never gates. A missing dependency classifies as harness-broken, not as a failed feature. - End-to-End CLI Probes —
tests/test_e2e_probes.pydrives the packaged entrypoint against a real tree (generate,--dry-run,--json), covering the gap where in-process tests pass but an installed package does not. - Live-Tier External Probes —
tests/test_live_probes.pyexercises theagentteams.researchegress path (search, scholar) against the real network, asserting positive content rather than absence of error, because the research CLI degrades rather than raising. Env-gated onFEATURE_AUDIT_LIVEso ordinary CI stays deterministic.
Getting Started¶
Essential Features¶
| Step | Feature | CLI / Entry Point |
|---|---|---|
| 1 | Create a project brief | Write brief.json or brief.md |
| 2 | Generate your team | agentteams --description brief.json --project /path --framework copilot-vscode |
| 3 | Review manual fills | Read the generated SETUP-REQUIRED.md |
| 4 | Enrich defaults | agentteams --enrich |
| 5 | Audit output | agentteams --post-audit |
Advanced Features¶
| Feature | When to Use |
|---|---|
--migrate |
Upgrading a pre-fencing team to use AGENTTEAMS:BEGIN/END markers |
--update --merge |
Re-rendering a team after template updates without losing user edits |
--convert-from |
Migrating a team to a different AI framework |
--bridge-from |
Creating lightweight runtime compatibility artifacts without regenerating sources |
--check (drift) |
Detecting whether template or team-composition changes require re-render |
--scan-security |
Auditing generated files for credentials, PII, and unresolved placeholders |
Governance Invocations¶
| Need | Invoke |
|---|---|
| Destructive operation (file delete, bulk edit, external write) | @security |
| Code change touching shared utilities or agent docs | @code-hygiene |
| Multi-file session closing | @conflict-auditor |
| Plan with irreversible steps | @adversarial |
| Cross-repository write | @repo-liaison → @security |