{
"canonical_url": "mom.achromat.ai/devsecops.md",
"capabilities": [
"CalibratePolicy",
"RecallCompliantArguments"
],
"category": null,
"classification": {
"matched": {
"business": [
"operations"
],
"regulatory": [
"compliance",
"policy"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": null,
"compliance": [],
"deployment": null,
"description": "Expected tool shapes and environment and authorization placeholders for DevSecOps agents: commands, deployments and access grants. Recall verified compliant arguments before running a pipeline or operations action, and calibrate against live policy when nothing is recalled. Builds on the core protocol at /skill.md.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": null,
"docs": 10.0,
"domain_fit": 34.0,
"ecosystem": 5.5,
"governance": null,
"health": null,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.5,
"governance_credited": {},
"profile": "general",
"rank": null,
"score": 33.0,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health",
"governance"
]
},
"regulatory": {
"components": {
"adoption": null,
"docs": 10.0,
"domain_fit": 56.4,
"ecosystem": 5.5,
"governance": null,
"health": null,
"trust": 22.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 0.6,
"governance_credited": {},
"profile": "regulated",
"rank": null,
"score": 41.9,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health",
"governance"
]
}
},
"external_ids": {
"ard": "urn:air:mom.achromat.ai:skill:achromat-mom-devsecops"
},
"first_seen": "2026-10-26T12:23:28Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_44608b469902c640",
"identity": {
"evidence": [
"ard_trust_manifest_binding"
],
"rules_version": "identity-1.1",
"tier": 1
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:23:28Z",
"license": null,
"merged_ids": [
"res_b8fcb5793e38554b"
],
"name": "Achromat Machine Operational Memory for DevSecOps",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"status": "unknown"
},
"ard": {
"identifier": "urn:air:mom.achromat.ai:skill:achromat-mom-devsecops",
"manifest_url": "https://mom.achromat.ai/.well-known/ard.json",
"media_type": "application/agent-skills+md",
"parser_version": "ard-0.91",
"status": "verified",
"trust_manifest": "present-binding-ok"
},
"mcp": {
"status": "unknown"
}
},
"publisher_domain": "mom.achromat.ai",
"representative_queries": [
"check a production deployment call against policy before running it",
"find the compliant version of a blocked shell command in a pipeline",
"what approval evidence does an access grant need to pass policy"
],
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:45:02Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {},
"slug": "mom-achromat-ai-achromat-machine-operational-memory-for-devsecops",
"sources": [
{
"payload_hash": "a53287c49e1bf21ab0fe85ca2aa5fc393ac0bbaa58074208dff9bcde807eb8ce",
"retrieved_at": "2026-10-26T12:23:28Z",
"system": "ard",
"url": "https://mom.achromat.ai/.well-known/ard.json"
}
],
"tags": [
"agent-memory",
"ci-cd",
"compliance",
"devsecops",
"policy"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_44608b469902c640_30c34cc4",
"checked_on": null,
"date": "2026-10-25",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_44608b469902c640_30c34cc4",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agentic Resource Discovery (ARD) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "ARD verified",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:d00c7adb58b5ba6102ed3f25018769e83385e8129cfe3a3a3d1a56ff01b0d50b",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of Achromat Machine Operational Memory for DevSecOps's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_44608b469902c640_30c34cc4/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 1,
"issues": 1,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": null
},
"url": "https://mom.achromat.ai/devsecops.md",
"vendor": "mom.achromat.ai"
}