azure-ai-foundry-ops-governor SKILL.md skillA

azure-ai-foundry-ops-governor from vincentchuwaichow/vanguard-frontier-agentic is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add vincentchuwaichow/vanguard-frontier-agentic/azure-ai-foundry-ops-governor@v0.1.3

Pins v0.1.3 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
vincentchuwaichow/vanguard-frontier-agentic
Path
skills/azure/azure-ai-foundry-ops-governor/SKILL.md
Versions recorded
5
Latest version
v0.1.3, committed Jul 31, 2026
First version recorded
May 5, 2026
Size
3,425 bytes
Repository stars
24
License
Apache-2.0

Use this skill for Microsoft Foundry and Azure AI Foundry operations governance: resource-versus-project boundary design, RBAC review, quota planning, network isolation, logging, and safe MCP-backed read or write execution. Trigger when the user asks how to run Foundry safely across teams without access sprawl, quota surprises, or unsafe production mutations.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Azure AI Foundry Ops Governor

## Role Charter

Act as a ruthless Azure AI Foundry operations governor. Prevent access sprawl, quota collisions, weak isolation, and unsafe MCP mutations.

Default posture:
- Prefer Microsoft Learn documentation through the user's configured documentation MCP, and use sampled read-only Azure evidence only when the active client exposes it.
- Treat the **Foundry resource** as the top-level governance, security, networking, monitoring, and deployment boundary.
- Treat the **project** as the development boundary for teams, agents, files, evaluations, and project-scoped workflows.
- Do not assume every API or feature works at project scope. Verify whether the workload requires parent resource scope.
- Never request secrets, tokens, keys, connection strings, or customer data in chat.

## Trigger Situations

Use this skill when the user asks to:
- design or review Foundry resource vs project boundaries,
- grant team access or review Foundry RBAC safely,
- plan Foundry model quota or deployment capacity across teams,
- harden Foundry networking with private access or isolation,
- verify diagnostics, audit logs, metrics, or operational monitoring,
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add vincentchuwaichow/vanguard-frontier-agentic/azure-ai-foundry-ops-governor@sha256:9c001db5184da84d

The line at the top of this page pins the label v0.1.3, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_s64gontqvj6w33tc.svg)](https://markdownregistry.com/a/art_s64gontqvj6w33tc)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between May 5, 2026 and Jul 31, 2026, about one every 22 days.

versioncommittedcommitsizeaudit
v0.1.3 latest2026-07-31 e5f8521 3,425 BA view · diff
v0.1.32026-06-05 61ea33c 3,415 BA view · diff
v0.1.22026-06-04 2ab8696 3,415 BA view · diff
v0.1.02026-05-05 d429f6f 2,997 BA view · diff
v0.1.02026-05-05 8361fc7 2,958 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3425 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

vincentchuwaichow/vanguard-frontier-agentic · 24 stars · license Apache-2.0 · pushed 2026-10-20 · branch master

API

GET https://markdownregistry.com/api/v1/artifacts/art_s64gontqvj6w33tc
GET https://markdownregistry.com/api/v1/resolve?ref=vincentchuwaichow/vanguard-frontier-agentic/azure-ai-foundry-ops-governor
GET https://markdownregistry.com/api/v1/blob/9c001db5184da84d6f5ae262fe5cc6779f52d8820720d4414c1b44466e77db9c

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from vincentchuwaichow/vanguard-frontier-agentic

agentic-delegation SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/agentic-delegation/SKILL.md · Plan who does each step of a task in this repo, on which model, at which effort: Haiku or Sonnet subagents for search…
git:20260925.af5b40a · audit A · 24 stars
definition-of-done SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/definition-of-done/SKILL.md · The ordered finish-line runner for any change in this repo — generators, then the asset-integrity refresh last on its…
git:20260710.3fcd452 · audit A · 24 stars
model-registry-refresh SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/model-registry-refresh/SKILL.md · Re-verify and extend catalog/model-registry.json — the fail-closed model-name and reasoning-effort matrix…
git:20260925.a3c9ee6 · audit A · 24 stars
pr-babysit SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/pr-babysit/SKILL.md · The repeatable loop for watching a pull request until it is merged or closed, pairing webhook subscription with a…
git:20260925.a3c9ee6 · audit A · 24 stars
AGENTS.md AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · AGENTS.md
git:20260710.f38e17d · audit A · 24 stars
CLAUDE.md CLAUDE.md file
vincentchuwaichow/vanguard-frontier-agentic · CLAUDE.md
git:20261014.e1018a9 · audit A · 24 stars
AGENTS.md@agents AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/AGENTS.md
git:20260911.d3b0693 · audit A · 24 stars
AGENTS.md@agents/accounting AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/accounting/AGENTS.md
git:20260601.86f3237 · audit A · 24 stars
AGENTS.md@agents/alibaba AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/alibaba/AGENTS.md
git:20260509.dc88dab · audit A · 24 stars
AGENTS.md@agents/aws AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/aws/AGENTS.md
git:20260429.e2e667e · audit A · 24 stars
AGENTS.md@agents/azure AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/azure/AGENTS.md
git:20260430.b3a1abb · audit A · 24 stars
AGENTS.md@agents/finance AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/finance/AGENTS.md
git:20260601.86f3237 · audit A · 24 stars

Every file in vincentchuwaichow/vanguard-frontier-agentic

Browse by kind, by grade A, or by owner.