platform-constitution

Author a versioned platform constitution defining Azure guardrails, compliance regimes, and agent authority boundaries.

Updated Jul 16, 2026
One-click install
npx skills add https://github.com/Cloud-Byte-Consulting/plugins --skill platform-constitution-cloud-byte-consulting
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: platform-constitution
Source: https://github.com/Cloud-Byte-Consulting/plugins/tree/main/azure-platform-engineering/skills/platform-constitution
Command: npx skills add https://github.com/Cloud-Byte-Consulting/plugins --skill platform-constitution-cloud-byte-consulting

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Platform teams and agents often make infrastructure decisions without a written, enforceable source of constraints, leading to inconsistent naming, ungoverned regions, unclear compliance obligations, and undefined agent permissions. This Skill produces a versioned constitution document that every downstream platform skill and agent treats as its governing contract. ## Core Features & Use Cases - Constraint capture: Records decided, enforceable rules across scope and sovereignty, compliance regimes (SOC 2, ISO 27001, NIS2, DORA), naming and tagging standards, approved stacks, IaC rules, agent authority boundaries, and observability defaults. - Rule-ID governance: Assigns each rule an ID (CON-xx) so specs, PRs, and verifier findings can cite specific constraints, with amendments following the same PR and approval path as code. - Use Case: When starting an Azure platform engagement, interview stakeholders about existing CAF alignment and landing zones, then draft a constitution with region allowlists, mandatory tags, Bicep-first IaC policy, and read-only agent credentials that downstream skills cite in every recommendation. ## Quick Start Draft a platform constitution for my Azure organization covering allowed regions, SOC 2 compliance evidence, naming and tagging standards, and what agents may do autonomously.

Frequently Asked Questions about platform-constitution

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a platform constitution for Azure governance?

Interview stakeholders for existing standards like CAF alignment and naming conventions, then draft versioned Markdown covering regions, compliance, tagging, approved stacks, IaC rules, and agent boundaries. Assign each rule an ID (CON-xx) and route amendments through PR review with recorded approvals.

What should a platform engineering constitution document contain?

Capture only decided, enforceable constraints: scope and sovereignty rules, compliance regimes like SOC 2 or DORA, naming and tagging standards, approved stacks such as Radius and Dapr, IaC rules, agent authority boundaries, and observability defaults. Aspirations belong in roadmaps, not the constitution.

How do I define what AI agents are allowed to do in a platform?

Define agent authority boundaries in the constitution: agents may read, propose PRs, and open issues autonomously, while deploys, deletes, and identity changes require human approval. Agents hold read-only, short-lived credentials with no standing secrets by default.

Does the platform constitution support data residency and sovereignty requirements?

Yes, sovereignty rules are encoded as enforceable constraints: persistence and messaging dependencies go through Dapr building blocks, and each residency boundary gets its own Radius environment with region-pinned Recipes, making relocation a deployment decision rather than a rewrite.

How are changes to a platform constitution governed?

Amendments follow the same PR and approval path as application code. The constitution is versioned Markdown in the platform repo with an approvals log and changelog, and security or compliance owners review changes before merge.