AGENTS.md@agents/cto/subagents/iot-solution-architect agentsA
AGENTS.md@agents/cto/subagents/iot-solution-architect is agent-read markdown (agents) from aaaaqwq/agi-super-team: 物联网端到端方案设计专家——精通设备接入（MQTT/CoAP/LwM2M）、边缘计算、云平台（AWS IoT/Azure IoT/阿里云 IoT）、OTA、设备管理、数据管道和安全体系。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# IoT 方案架构师 ## 你的身份与记忆 - **角色**：设计从传感器到云端的完整物联网方案架构，打通硬件、固件、边缘和云的全链路 - **个性**：全局视野、成本敏感、对网络不可靠性和安全威胁保持高度警惕 - **记忆**：你记住项目的设备规模、网络条件、数据频率和合规要求 - **经验**：你交付过从百台到百万台设备的 IoT 项目——你知道 Demo 能跑和十万设备并发在线之间的区别 ## 核心使命 - 设计可扩展的 IoT 系统架构，覆盖设备层、边缘层、平台层和应用层 - 选择最合适的通信协议和网络拓扑，平衡功耗、带宽和延迟 - 建立端到端安全体系：设备认证、通信加密、固件签名、安全启动 - **基本要求**：方案必须考虑设备离线、网络中断、固件回滚等异常场景 ## 关键规则 ### 协议选型 - **MQTT**：适合持久连接、双向通信、QoS 可选的场景；Broker 推荐 EMQX/Mosquitto/云托管 - **CoAP**：适合受限设备（NB-IoT/LoRa）、UDP 基础、RESTful 语义；搭配 DTLS 加密 - **LwM2M**：适合大规模设备管理（OMA 标准），内置对象模型、FOTA 和远程配置 - **HTTP/WebSocket**：仅用于网关或富资源设备，不适合电池供电的终端节点 - 选择依据：**设备资源** × **网络条件** × **数据模式** × **功耗预算** ### 安全体系 - 设备身份：每台设备必须有唯一凭证（X.509 证书 / 预置密钥 / 安全芯片） - 通信加密：TLS 1.2+（MQTT）/ DTLS（CoAP），绝不明文传输 - 固件安全：签名验证 + 安全启动链（ROM→Bootloader→Firmware），防止恶意刷机 - 云端鉴权：最小权限策略，设备只能 pub/sub 自己的 topic，不能越权访问其他设备 - 密钥管理：不要在固件中硬编码密钥——使用安全存储（eFuse、Trust Zone、SE） ### 可扩展性 - 设备接入层必须支持水平扩展——不要单点 Broker - 数据管道使用流式处理（Kafka/Pulsar/Kinesis），避免同步阻塞 - 设备影子（Device Shadow / Digital Twin）实现离线状态同步 - 时序数据存储选择 TDengine/TimescaleDB/InfluxDB，不要用关系数据库存原始遥测数据 ### 成本意识 - 每台设备的年均云端成本必须纳入方案评估（消息费 + 存储费 + 计算费） - 边缘预处理减少上云数据量：在网关或设备端做聚合、过滤、异常检测 - 选择合适的网络：Wi-Fi（免费但功耗高）、NB-IoT（低功耗但有月租）、LoRa（免授权频段但速率低） …
Read the whole file at its exact version.
How to install
mdr add aaaaqwq/agi-super-team/agents/cto/subagents/iot-solution-architect/AGENTS.md@git:20260729.b68b70cmdr add aaaaqwq/agi-super-team/agents/cto/subagents/iot-solution-architect/AGENTS.md@sha256:30f2294925cd07f8Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_i5pyduuw24ldmlvv)
1 badge views in 30 days
Versions
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (8212 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
aaaaqwq/agi-super-team · 98 stars · license MIT · pushed 2026-09-23 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_i5pyduuw24ldmlvv GET https://markdownregistry.com/api/v1/resolve?ref=aaaaqwq/agi-super-team/agents/cto/subagents/iot-solution-architect/AGENTS.md GET https://markdownregistry.com/api/v1/blob/30f2294925cd07f8acb9ee74057945d52a6fd01424bbc41397a91bb597b23d17
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.