feat: new agents names and resources

.github/CHANGELOG.md

@@ -6,7 +6,15 @@ Use this format for new updates:
 - One bullet per meaningful change.
 - Include file/path scope when useful.
 
+## 2026-04-19
+- Renamed the root `Makefile` target from `catalog-validation` to `github-catalog-validation` for nomenclature consistency with the `_github-catalog-validation` workflow and refreshed `.github/README.md` plus `.github/agents/README.md` to remove remaining live `internal-router` wording in favor of the direct-entry operational model.
+- Renamed the canonical execution and challenge agents from `.github/agents/internal-fast-executor.agent.md` and `.github/agents/internal-critical-challenger.agent.md` to `.github/agents/internal-delivery-operator.agent.md` and `.github/agents/internal-critical-master.agent.md`, then realigned the live operational contracts, prompt references, shared boundary skills, and tests to the new canonical names.
+- Renamed `.github/workflows/catalog-validation.yml` to `.github/workflows/_github-catalog-validation.yml`, replaced the old Bash-only `catalog_validation` entrypoint with the new `.github/scripts/github_catalog_validation.py` plus matching Bash wrappers, and realigned `Makefile`, script coverage tests, and security-baseline references to the new workflow and script names.
+- Codified the pending retained-learning lessons into `.github/skills/internal-agent-sync-global-copilot-configs-into-repo/references/sync-contract.md`, `.github/skills/internal-agent-development/SKILL.md`, and `.github/skills/internal-agent-development/references/subagent-patterns.md`, added contract tests for the new guidance, and cleared the now-codified rows from `LESSONS_LEARNED.md`.
+
 ## 2026-04-18
+- Centralized lane-mismatch handling into the new repository-owned skill `.github/skills/internal-agent-boundary-recommendation-engine/`, realigned the four canonical operational agents plus the two sync command centers to stop and recommend the right owner through one shared protocol, removed the unused `agent` tool from the sync agents, and retired the orphaned `internal-agent-routing-engine` bundle from the live catalog.
+- Removed `internal-router` and the paired `internal-agent-routing-engine` from the live canonical operational model, left the four direct owners as the only canonical lanes, defaulted ambiguous entry to `internal-planning-leader`, platform-enforced no hidden peer dispatch by setting the canonical owners to `disable-model-invocation: true`, and realigned the active contracts, references, and tests away from router-centric dispatch.
 - Narrowed `.github/workflows/catalog-validation.yml` so it no longer repeats `_pre-commit` coverage: the workflow now runs the new `make catalog-lint` target for Bash syntax plus Python bytecode compilation, skips the duplicate YAML lint step, and leaves Markdown lint available as a manual target instead of failing the catalog-specific gate on long-standing repo-wide style debt.
 - Expanded `.github/scripts/requirements.txt` so the locked `PyYAML==6.0.2` hashes cover the published CPython 3.13 source and wheel artifacts used by GitHub Actions Linux and local macOS installs, preventing `.github/scripts/run.sh` from failing on valid platform-specific downloads.
 - Consolidated the repository pre-commit baseline onto `.github/workflows/_pre-commit.yml`, removed the duplicate `_terraform-pre-commit.yml` and `terraform-pre-commit.yml` workflows, and realigned the sync baseline, deprecation log, README, and sync tests to the single canonical workflow.
@@ -39,7 +47,7 @@ Use this format for new updates:
 - Closed the remaining behavior gap between `internal-critical-challenger` and the imported `awesome-copilot-critical-thinking` / `awesome-copilot-devils-advocate` agents by making non-assumption about user expertise explicit, enforcing one narrow objection or probing move per turn, and allowing the user to end the challenge flow directly into synthesis.
 - Expanded `internal-critical-challenger` so it may persist its analysis when asked, defaulting retained challenge artifacts to `tmp/superpowers/` unless the user requests another path, and so implementation requests now explicitly redirect back to `internal-router` after first asking whether the current analysis should be saved.
 - Added a narrow second-lane exception to the canonical operating model: `internal-critical-challenger` may now invoke `internal-router` as a parallel lane only when the user explicitly asks to keep the challenge lane active while opening an operational lane, with the router remaining the sole downstream routing authority.
-- Removed `.github/instructions/awesome-copilot-copilot-sdk-python.instructions.md` from the live catalog and realigned `.github/INVENTORY.md`, `.github/README.md`, `.github/agents/internal-sync-control-center.agent.md`, and `tmp/superpowers/2026-04-10-audit-catalogo-copilot.md` so the imported Python SDK instruction is no longer treated as active.
+- Removed `.github/instructions/awesome-copilot-copilot-sdk-python.instructions.md` from the live catalog and realigned `.github/INVENTORY.md`, `.github/README.md`, `.github/agents/internal-sync-external-resources.agent.md`, and `tmp/superpowers/2026-04-10-audit-catalogo-copilot.md` so the imported Python SDK instruction is no longer treated as active.
 
 ## 2026-04-10
 - Added the provider skill rollout beyond AWS by creating repository-owned Azure, GCP, and GitHub skill families under `.github/skills/internal-{azure,gcp,github}-*`, keeping the AWS boundary model as the baseline with short adaptive strategic skills, separate organization/governance/operations lanes where justified, minimal `references/`, and `agents/openai.yaml` metadata for every new skill.
@@ -73,7 +81,7 @@ Use this format for new updates:
 ## 2026-04-04
 - Added a mandatory end-of-operation completion report contract to `.github/copilot-instructions.md`, documented the same emoji-based `Outcome` / `Agents` / `Instructions` / `Skills` structure in `.github/README.md`, and kept root `AGENTS.md` on a thin bridge pointer to the detailed policy.
 - Extended `INTERNAL_CONTRACT.md`, `tests/test_contract_runner.py`, `tests/test_validate_copilot_customizations.py`, and `.github/scripts/validate-copilot-customizations.py` so the completion-report contract is now source-governed and strict-validator enforced.
-- Updated `internal-sync-control-center`, `internal-sync-global-copilot-configs-into-repo`, and the sync skill workflow so completed sync runs must also end with the same completion-report categories and explicit unused-category explanations.
+- Updated `internal-sync-external-resources`, `internal-sync-global-copilot-configs-into-repo`, and the sync skill workflow so completed sync runs must also end with the same completion-report categories and explicit unused-category explanations.
 - Updated sync governance and `.github/scripts/internal-sync-copilot-configs.py` so retained sync plans now live under repository-root `tmp/` instead of `.github/`, and the tracking-plan flow creates `tmp/` automatically when it is missing.
 - Updated `.github/copilot-instructions.md`, `.github/instructions/internal-python.instructions.md`, and `.github/skills/internal-script-python/SKILL.md` so new Python scripts must make an explicit stdlib-vs-library decision, prefer mature third-party packages when they clearly simplify the final code, and record that choice in a short dependency decision note before implementation.
 

.github/INVENTORY.md

@@ -40,10 +40,10 @@ This file is the exact path inventory for the live GitHub Copilot catalog in thi
 - `.github/skills/awesome-copilot-codeql/SKILL.md`
 - `.github/skills/awesome-copilot-dependabot/SKILL.md`
 - `.github/skills/awesome-copilot-secret-scanning/SKILL.md`
+- `.github/skills/internal-agent-boundary-recommendation-engine/SKILL.md`
+- `.github/skills/internal-agent-cross-lane-engine/SKILL.md`
 - `.github/skills/internal-agent-development/SKILL.md`
-- `.github/skills/internal-agent-operating-model-engine/SKILL.md`
-- `.github/skills/internal-agent-routing-engine/SKILL.md`
-- `.github/skills/internal-agent-sync-control-center/SKILL.md`
+- `.github/skills/internal-agent-sync-external-resources/SKILL.md`
 - `.github/skills/internal-agent-sync-global-copilot-configs-into-repo/SKILL.md`
 - `.github/skills/internal-aws-governance/SKILL.md`
 - `.github/skills/internal-aws-mcp-research/SKILL.md`
@@ -118,10 +118,9 @@ These imported `openai-*` office skills remain support-only depth for repositori
 
 ## Agents
 
-- `.github/agents/internal-critical-challenger.agent.md`
-- `.github/agents/internal-fast-executor.agent.md`
+- `.github/agents/internal-critical-master.agent.md`
+- `.github/agents/internal-delivery-operator.agent.md`
 - `.github/agents/internal-planning-leader.agent.md`
 - `.github/agents/internal-review-guard.agent.md`
-- `.github/agents/internal-router.agent.md`
-- `.github/agents/internal-sync-control-center.agent.md`
+- `.github/agents/internal-sync-external-resources.agent.md`
 - `.github/agents/internal-sync-global-copilot-configs-into-repo.agent.md`

.github/README.md

@@ -3,7 +3,7 @@
 This directory is the source-side catalog for reusable GitHub Copilot customization assets maintained in `cloud-strategy.github`.
 
 - `.github/copilot-instructions.md` is the primary detailed policy layer.
-- Root [`AGENTS.md`](../AGENTS.md) is the strategic entrypoint, precedence anchor, and bridge for routing, naming, discovery, and the pointer to exact path inventory.
+- Root [`AGENTS.md`](../AGENTS.md) is the strategic entrypoint, precedence anchor, and bridge for operational ownership, naming, discovery, and the pointer to exact path inventory.
 - [`INVENTORY.md`](INVENTORY.md) is the exact path inventory for the live catalog.
 - This README is an orientation guide for maintainers of the source catalog. It should describe the live on-disk catalog only.
 
@@ -21,7 +21,7 @@ This directory is the source-side catalog for reusable GitHub Copilot customizat
 
 | Path | Purpose |
 | --- | --- |
-| `copilot-instructions.md` | Primary detailed policy, validation baseline, routing model, and completion-report contract. |
+| `copilot-instructions.md` | Primary detailed policy, validation baseline, direct-entry operating model, and completion-report contract. |
 | `INVENTORY.md` | Exact path inventory for live instructions, skills, and agents. |
 | `copilot-code-review-instructions.md` | Review-specific severity and defect-first guidance. |
 | `copilot-commit-message-instructions.md` | Commit message conventions. |
@@ -45,7 +45,7 @@ Use instructions as automatic file-path guidance. Do not restate path-driven beh
 
 Skills are grouped into three functional lanes plus imported support families.
 
-- `internal-*`: repository-owned governance, routing, review, execution, project, sync, platform, and provider skill families for AWS, Azure, GCP, and GitHub
+- `internal-*`: repository-owned governance, ownership, review, execution, project, sync, platform, and provider skill families for AWS, Azure, GCP, and GitHub
 - `obra-*`: strategic workflow support for brainstorming, planning, debugging, verification, worktree usage, and skill authoring
 - Imported support families:
   - `awesome-copilot-*`
@@ -66,12 +66,11 @@ Use [`INVENTORY.md`](INVENTORY.md) for the exact path inventory. Use root [`AGEN
 
 See [`agents/README.md`](agents/README.md) for the selection guide.
 
-- Canonical repository-owned operational agents: `internal-router`, `internal-fast-executor`, `internal-planning-leader`, `internal-review-guard`, `internal-critical-challenger`
-- Repository-owned source-side sync and governance agents: `internal-sync-control-center`, `internal-sync-global-copilot-configs-into-repo`
+- Canonical repository-owned operational agents: `internal-delivery-operator`, `internal-planning-leader`, `internal-review-guard`, `internal-critical-master`
+- Repository-owned source-side sync and governance agents: `internal-sync-external-resources`, `internal-sync-global-copilot-configs-into-repo`
 - No imported support agents currently ship in the live catalog.
 
-The current repository-owned operating model is the internal router plus the four canonical internal owners. Do not document retired operational routes here.
-Only `internal-router` actively routes between canonical owners; the four canonical owners stay boundary-driven and user-directed.
+The current repository-owned operating model uses direct entry to the four canonical internal owners. When the right owner is unclear, default to `internal-planning-leader`. Do not document retired operational routes here.
 
 ### Scripts and workflow
 

.github/agents/README.md

@@ -1,38 +1,37 @@
 # Agents Catalog
 
-This folder contains deliberate custom agents for repository-owned operational routing plus repo-only sync workflows.
+This folder contains deliberate custom agents for repository-owned direct-owner operations plus repo-only sync workflows.
 
 ## Resolution order
 1. Apply repository non-negotiables from `copilot-instructions.md`.
 2. Apply explicit user request and selected agent behavior (agent-first).
 3. Apply matching `instructions/*.instructions.md` (`applyTo` by path).
 4. Apply referenced skill details.
 
-## Recommended routing
-- Default operational front door: `internal-router` (routes only; it does not edit files or implement changes).
-- Direct canonical owners: `internal-fast-executor`, `internal-planning-leader`, `internal-review-guard`, `internal-critical-challenger`.
-- Source-side catalog sync, rationalization, overlap cleanup, and governance drift correction in this repository: `internal-sync-control-center`.
+## Recommended owner selection
+- Safe fallback when the right operational lane is still ambiguous: `internal-planning-leader`.
+- Direct canonical owners: `internal-delivery-operator`, `internal-planning-leader`, `internal-review-guard`, `internal-critical-master`.
+- Source-side catalog sync, rationalization, overlap cleanup, and governance drift correction in this repository: `internal-sync-external-resources`.
 - Cross-repository baseline propagation: `internal-sync-global-copilot-configs-into-repo`.
 - PR-focused work should use the `internal-pr-editor` skill because this repository does not currently ship a dedicated PR editor agent.
 
 ## Repo-only agents (not synced to consumers)
-- `internal-sync-control-center`
+- `internal-sync-external-resources`
 - `internal-sync-global-copilot-configs-into-repo`
 
 ## Why this catalog stays deliberate
 - This repository keeps a deliberate set of source-side command-center agents under `.github/agents/`.
 - Prefer one cohesive agent per recurring operational or governance workflow.
-- Keep the operational front door explicit, keep the four canonical owners non-overlapping, and keep reusable logic in skills instead of bloating agent bodies.
-- Keep downstream owner selection in `internal-router` only; canonical owners define boundaries and recommend a better owner instead of handing off automatically unless a scoped contract explicitly allows invoking `internal-router` as a second parallel lane.
+- Keep the four canonical owners explicit and non-overlapping, and keep reusable logic in skills instead of bloating agent bodies.
+- Keep the direct-entry model explicit; canonical owners define boundaries and recommend a better owner instead of handing off automatically.
 - Technology is resolved from file paths and prompt inputs (for example, `**/*.py` -> Python instructions).
 - Prefer skills for detailed task procedures unless a dedicated agent file is present.
 
 ## Selection guide
-1. Use `internal-router` when the user has not yet chosen the right owner or the request could plausibly be execution, planning, review, or challenge. Treat it as dispatch-only.
-2. Use `internal-fast-executor` for clear, local execution work with concrete verification and no non-trivial strategic tradeoffs.
-3. Use `internal-planning-leader` for ambiguity resolution, non-trivial repository-owned authoring, design decisions, and rollout or governance planning.
-4. Use `internal-review-guard` for defect-first review, merge readiness, regression analysis, and evidence-based validation.
-5. Use `internal-critical-challenger` for pre-mortems, objection-first pressure tests, lateral reframing, and failure-mode analysis.
-6. Use `internal-sync-control-center` when governing the live `.github/` catalog in this repository: refresh approved external assets, align naming, consolidate overlap, retire obsolete entries, and clean up downstream governance references. Unless the user explicitly asks for an audit or plan first, treat `sync` as a full apply request.
-7. Use `internal-sync-global-copilot-configs-into-repo` when aligning a consumer repository with the managed Copilot baseline from this standards repository.
-8. Use skills from `.github/skills/` for work that does not need a dedicated agent file.
+1. Use `internal-planning-leader` when the user has not yet chosen the right owner or the request could plausibly be execution, planning, review, or challenge.
+2. Use `internal-delivery-operator` for clear, local execution work with concrete verification and no non-trivial strategic tradeoffs.
+3. Use `internal-review-guard` for defect-first review, merge readiness, regression analysis, and evidence-based validation.
+4. Use `internal-critical-master` for pre-mortems, objection-first pressure tests, lateral reframing, and failure-mode analysis.
+5. Use `internal-sync-external-resources` when governing the live `.github/` catalog in this repository: refresh approved external assets, align naming, consolidate overlap, retire obsolete entries, and clean up downstream governance references. Unless the user explicitly asks for an audit or plan first, treat `sync` as a full apply request.
+6. Use `internal-sync-global-copilot-configs-into-repo` when aligning a consumer repository with the managed Copilot baseline from this standards repository.
+7. Use skills from `.github/skills/` for work that does not need a dedicated agent file.