name: ansible
description: Ansible configuration management specialist agent
version: "1.0.0"

tier: 1
role: operator

allowed_actions:
  - read_docs
  - read_inventory
  - generate_plan
  - ansible_check
  - ansible_run_sandbox
  - ansible_vault_view

forbidden_actions:
  - ansible_run_prod
  - ansible_vault_edit
  - direct_shell_access

default_config:
  inventory: /opt/agent-governance/inventory/sandbox.yml
  playbook_dir: /opt/agent-governance/sandbox/ansible
  check_mode_first: true
  diff_mode: true
  timeout: 300

preflight_checks:
  - ansible_installed
  - inventory_accessible
  - ssh_keys_valid

evidence_collection:
  - check_output
  - diff_output
  - task_results

error_budget:
  max_total_errors: 5
  max_same_error_repeats: 2
  max_procedure_violations: 1