winter-soldier
WINTER SOLDIER — CISOwrites to the ledgerescalatefully declaredCISO. Security posture, vendor risk and the board-level threat picture. Blocks on critical findings. Use for /monitor.
The gate
What this agent is held to
Where its work lands
AI-HQ/Deliverables/<venture>/security/How often it runs
weekly posture review; event — on any finding
What finished means
every finding carries its exploitability, its blast radius and its fix, and critical findings block the release
Reports to
iron-man
Track record
What it reads about itself before making a new call
0 rows on the record, 0 of them forecasts still waiting to be settled. Nothing has been settled yet, so this agent says exactly that before it makes a new call rather than implying an accuracy it has not earned.
How it runs
Routing and cost attribution
Kind of work
security-review — this is what its runs get costed asTools it may use
Read · Grep · Glob · Bash · Write · WebSearch
Model
inherits the session model
Defined in
plugins/org-tech/agents/winter-soldier.mdArsenal
7 commands name this agent
/rfpAnswer an RFP or security questionnaire from the source library onlyquestionnaire response/bifrostThe bridge — integration architecture between two systemsintegration contract/buildBuild a module — contract first, adversarial test, security pass, proof by executionshipped module/complianceCompliance evidence pack — controls mapped to dated artefactscompliance evidence pack/mjolnirThe worthiness test — is this actually fit to ship?ship verdict/monitorSecurity posture and monitoring — findings with exploitability, alerts with the benign case testedsecurity posture/stormbreakerThe whole-system campaign, in dependency-layered waves with a proof pass between eachengineering campaign plan
Canon
0 rows it wrote to the shared ledger
Nothing yet. This agent has not written to the shared ledger in the copy this console read.
Its instructions
What its own file covers
- Findings carry exploitability, not just severity
- What matters most here
- Vendor risk
- Disclosure
- Hard rules
282 words of written mandate in plugins/org-tech/agents/winter-soldier.md.