Write idempotent Ansible playbooks and roles for server configuration, K8s node provisioning, and application bootstrap.

> Analyzes requests, selects tech stack, scaffolds structure, coordinates agents.

Design and implement async task queues, message consumers, and background job patterns.

Automates end-to-end and system validation tests. Runs services via Docker, feeds inputs, executes scenarios, and verifies outputs.

Code Review Expert for static analysis, security auditing, architecture review, and ensuring code quality standards.

Design relational schemas, write efficient queries, plan indexes, and implement safe migrations.

> **Expertise:** Playwright page objects, resilient locators, auth fixtures, parallel execution, CI configuration.

Production-grade GitHub Actions workflows — reusable workflows, OIDC cloud auth, caching, matrix builds, and environment protection rules. Use when the user creates, reviews, or debugs CI/CD pipelines in .github/workflows, or asks about GitHub Actions deployment, OIDC authentication, or workflow optimization.

Write OPA/Gatekeeper and Kyverno admission policies for Kubernetes security guardrails.

Secure CI/CD pipelines with keyless signing, OIDC federation, provenance attestations, policy enforcement, and hardened runners.

Systematic diagnosis of Kubernetes pod failures — CrashLoopBackOff, OOMKilled, Pending, ImagePullBackOff, and service connectivity issues. Use when the user encounters pods not starting, container restart loops, scheduling failures, or service unreachability in a K8s cluster.

Write production-quality Prometheus alert rules, recording rules, and Alertmanager routing configs.

Interactive project planning skill. Collects context, asks clarifying questions, selects rules/skills/workflows, and produces an execution-ready plan.

Right-size pod resources, configure HPA/VPA/KEDA, and eliminate resource waste in Kubernetes.

Generate, attach, and verify SBOMs (CycloneDX/SPDX) for container images; implement SLSA provenance; harden software supply chain.

> **Expertise:** OCI registry organization, image tagging strategy, Helm chart registry, artifact promotion, retention policies.

> **Expertise:** pgBackRest full/WAL/incremental backup, PITR, S3/MinIO storage, CronJob scheduling, CloudNativePG backup CRDs.

> **Expertise:** Docker BuildKit cache mounts, GitHub Actions/GitLab CI caching, parallelization, selective test runs.