HerrenK_skill.md HerrenK (Digital Technology / Cloud Operations & Enterprise Automation) Audit-Ready, Production-Verified
Overview
HerrenK_skill.md HerrenK (Digital Technology / Cloud Operations & Enterprise Automation) Audit-Ready, Production-Verified [!CRITICAL] : Any AI assistant (Google Antigravity, Claude Code, Cursor, GitHub Copilot, OpenAgents) operating in this repository or utilizing its skills MUST automatically document all bugs, regressions, root cause analyses, and remediations into CHANGELOG.md following the FAANG Hybrid Two-Tier standard. This repository serves as the centralized, version-controlled distribution vault for autonomous AI pair-programming operating standards (rules/) and specialized engineering skills (skills/). It equips Google Antigravity agents to operate deterministically across AWS Cloud Infrastructure, DRY Terraform IaC, Enterprise Automation (Python RPA), and Vehicle Telematics Data Pipelines. See HerrenK_skill.md for full descriptions, installation guides, and workflow specifications.
README
HerrenK Enterprise Antigravity Skills & Operating Rules Repository
Repository: HerrenK_skill.md
Owner: HerrenK (Digital Technology / Cloud Operations & Enterprise Automation)
Status: Audit-Ready, Production-Verified
[!CRITICAL] 🚨 MANDATORY AI AGENT DIRECTIVE (Always-On Operational Invariant):
Any AI assistant (Google Antigravity, Claude Code, Cursor, GitHub Copilot, OpenAgents) operating in this repository or utilizing its skills MUST automatically document all bugs, regressions, root cause analyses, and remediations intoCHANGELOG.mdfollowing the FAANG Hybrid Two-Tier standard. Zero user prompt required.
1. Overview
This repository serves as the centralized, version-controlled distribution vault for autonomous AI pair-programming operating standards (rules/) and specialized engineering skills (skills/). It equips Google Antigravity agents to operate deterministically across AWS Cloud Infrastructure, DRY Terraform IaC, Enterprise Automation (Python RPA), and Vehicle Telematics Data Pipelines.
See HerrenK_skill.md for full descriptions, installation guides, and workflow specifications.
2. Operating Rules Catalog (rules/ & .agents/rules/)
Operating rules define non-negotiable runtime constraints, safety confirmation gates, platform shell standards, and execution cadences for AI agents.
| Rule File | Core Mandate & Domain Focus | Key Operational Invariants |
|---|---|---|
rules/bug_and_remediation_changelog_invariant.md |
**Automated Bug & Remediation Changelog (FAANG Standard)**Continuous incident tracking, root cause analysis, architecture diffs. | Zero Prompt Invariant: Mandates autonomous logging of all bugs/fixes directly to CHANGELOG.md without waiting for user commands.FAANG Hybrid Two-Tier: Executive Summary Canvas (Tier 1) + Google SRE RCA & Remediation Architecture Guardrails (Tier 2). |
rules/automation-engineering-standard.md |
Enterprise Automation & Telematics DataPython RPA, Windows Automation, Outlook COM (win32com), Tesseract OCR, Streamlit internal UIs, telemetry streaming. |
Anti-Drift Guard: Strictly prohibits defaulting to AWS/Terraform unless explicitly requested.Execution Safety: Mandatory dry-run/preview mode on first run for COM/email/batch file tasks.Non-Halting Prototyping: Immediate working scripts with # TODO: constants. |
rules/cloud-engineering-standard.md |
AWS Cloud Architecture & SREDRY Terraform IaC, AWS Bangkok (ap-southeast-7), FinOps cost governance, disaster recovery, high-availability ASG/ALB. |
Terraform Plan-Gating: Bare terraform apply is prohibited. Enforces terraform plan -out=tfplan.binary and human-readable terraform show -no-color review.Blast Radius Confirmation: Strict confirmation gate before any mutating infrastructure change.Parameter Guard: Halts on missing CIDRs, VPC IDs, or IAM roles. |
rules/tool_installation.md |
Autonomous Tool ResiliencePowerShell environment self-healing for missing CLI binaries (git, gh, terraform, aws, kubectl, python). |
Automatically fixes session $env:Path across standard Windows installation paths or installs missing packages via winget without abandoning execution. |
rules/personal-laptop-standard.md |
Personal Workstation & Laptop CopilotWindows 11 power-use, local scripting, personal software engineering, automation tooling, and system reliability. | Local-First Default: Strictly avoids unnecessary cloud/enterprise bloat; uses lightweight on-demand tooling.Workstation Blast Radius Protection: Mandatory confirmation gate and rollback plan for mass file deletion, process killing, or registry tweaks; OneDrive sync collision safeguards.Privacy Guard: Strict credential vault protection; scrubs personal PII. |
rules/ROLE_SPEC.md |
Architecture & Role SpecificationCanonical engineering profile brief, four technical pillars, and Architecture Review Board evaluation matrix. | Separates static documentation and justifications from runtime AI rules, maintaining a 78% reduction in system prompt token overhead. |
3. Engineering Skills Catalog (skills/)
3.1 Custom Enterprise & Cloud Skills
| Skill | Description & Competencies | Typical Application |
|---|---|---|
skills/auto-git-push |
Autonomous command-line Git and GitHub publishing workflow. Handles tool detection, PATH repair, authentication, repository initialization, conventional commits, and remote pushing with zero user friction. | CLI repository publishing & synchronizing |
skills/auto-streamlit-deploy |
End-to-end Streamlit application scaffolding, packaging, dependency pinning (requirements.txt, .python-version), and 1-click Streamlit Community Cloud launch generation. |
Rapid internal diagnostic UI deployment |
skills/aws-crawl |
Autonomous crawler and cataloger for AWS cloud resources and IAM permissions across active regions. | Cloud asset inventory & posture assessment |
skills/aws-optimization |
Optimization heuristics for compute, storage, and networking resources across multi-account AWS topologies. | AWS architecture & FinOps optimization |
skills/aws-terraform-iac |
Modular Terraform infrastructure design for self-healing Auto Scaling Groups, Application Load Balancers, CloudWatch alarms, and Valkey cutover in ap-southeast-7. |
Production cloud infrastructure deployments |
skills/cloud-directory-framework |
Comprehensive workspace hygiene, Terraform provider cache management, monthly evidence aggregation, skill distillation, and career reporting engine. | Workspace organization & portfolio management |
skills/cloud-finops-investigation |
Systematic multi-cloud cost reduction framework: GCP API key referrer/IP hardening, S3 Inventory cost triage, online gp2-to-gp3 conversion, and idle resource pruning. | Cloud cost optimization & security audits |
skills/evidence-backed-execution-summary |
Structured operations summary framework strictly backed by verifiable local on-disk evidence in WorkSpace. Synthesizes Routine Ops, Governance, On-demand Jobs, and C-Suite Decision Proposals into Markdown and 2-page A4 PDF deliverables with direct local artifact audit paths. | Evidence-backed executive work summaries & audit verification |
skills/git-list |
Single source of truth and dynamic catalog of all GitHub repositories under @PainWorry created or updated since October 2026. Automatically kept synchronized on every git push. | Dynamic project catalog & portfolio indexing |
skills/md-pdf-doc-generator |
Executive-grade dual-deliverable document generator: Obsidian-compatible Markdown (.md) and pixel-perfect corporate A4 PDFs (.pdf) with Sarabun typography and zero-overflow Visual QA. | Corporate memos, Obsidian notes, & executive PDF publication |
skills/monthly-repo-updater |
Automated crawler that indexes monthly project folders, extracts Jira deliverables, and generates monthly work reports. | Monthly performance & evidence tracking |
skills/onelink-cto-executive-summary |
Executive summary framework synthesizing 5 operational dimensions into an Obsidian Markdown dossier and pixel-perfect 2-page Sarabun A4 PDF. | OneLink CTO & C-Suite executive reporting |
skills/systems-troubleshooting |
Systems Reliability Engineering runbooks: AWS VPC routing, MySQL 3306 bind-address triage, zero-downtime online EBS volume resizing (xfs_growfs), and Windows kernel crash RCA. |
Enterprise SRE, Linux & Windows systems triage |
skills/telemetry-data-sync-pipeline |
Resilient vehicle telematics ingestion architecture, GPS data synchronization between cloud and on-premise replicas, and real-time Streamlit diagnostic feeds. | Fleet IoT & telematics data pipelines |
skills/well-document-playbook |
Universal software engineering, documentation, and knowledge management playbook modeled on Google Engineering Practices and SRE standards (RFCs, Zero-Code Rebuild Standards, 5-Whys post-mortems). | Enterprise documentation & disaster-recovery design |
3.2 Java 8 Telematics Optimization (skills/Java8Rerun_Optimized/)
| Skill | Description & Competencies | Typical Application |
|---|---|---|
skills/Java8Rerun_Optimized/java-jdbc-batching-refactor |
Production database refactoring guide to replace single-row JDBC inserts with 5,000-row PreparedStatement.addBatch chunks, eliminating N+1 query overhead. |
Telematics high-throughput ingestion optimization |
skills/Java8Rerun_Optimized/postgis-migration-guide |
Guide for offloading CPU-intensive geometric calculations (Haversine distance, radius filtering, polygon geofences) from application loops into PostGIS spatial SQL (ST_DWithin, ST_Contains). |
Vehicle telematics spatial query acceleration |
3.3 Downloaded AWS Official Skills (skills/aws/)
Modular AWS cloud skills organized under the skills/aws/ subfolder:
skills/aws/amazon-bedrock/SKILL.mdskills/aws/aws-ai-ml/SKILL.mdskills/aws/aws-auth/SKILL.mdskills/aws/aws-billing-and-cost-management/SKILL.mdskills/aws/aws-blocks/SKILL.mdskills/aws/aws-cdk/SKILL.mdskills/aws/aws-cloudformation/SKILL.mdskills/aws/aws-compute/SKILL.mdskills/aws/aws-containers/SKILL.mdskills/aws/aws-database/SKILL.mdskills/aws/aws-deployment/SKILL.mdskills/aws/aws-iam/SKILL.mdskills/aws/aws-messaging-and-streaming/SKILL.mdskills/aws/aws-networking/SKILL.mdskills/aws/aws-observability/SKILL.mdskills/aws/aws-sdk-js-v3-usage/SKILL.mdskills/aws/aws-sdk-python-usage/SKILL.mdskills/aws/aws-sdk-swift-usage/SKILL.mdskills/aws/aws-security/SKILL.mdskills/aws/aws-serverless/SKILL.mdskills/aws/aws-storage/SKILL.mdskills/aws/launch-with-aws/SKILL.mdskills/aws/signing-in-to-aws/SKILL.md
4. Security & Hygiene Standards
- Zero Credentials Tracked: Strictly excludes
.env,*.pem,*.key,*id_rsa*, and credential stores via.gitignore. - Zero Terraform State Tracked: All
terraform.tfstate*,.terraform/plugins, and*tfplan*review binaries are strictly barred from source control. - Audit Trail Compliance: All state-mutating engineering actions append entries to
CHANGELOG.mdfollowing Google SRE accountability standards.
Recommended Tools
Try a different keyword or remove a filter.
Install
npx skillfish add painworry/herrenk_skill.md