Capability targeting (new feature): - loop --capability <SET|ALL> scopes which capability library the loop reasons against. data/capability_sets/<name>.json (same schema as capabilities.json) holds one-off targeted products; drop a file in and pass its name, no code changes. First set: agentminder (Broadcom AgentMinder, agentic-AI identity). - capabilities.set_active_set() swaps the active library; keyword pre-filter is bypassed for small targeted sets so every signal is evaluated. New 'capability-sets' command lists them; run banner shows the active set. LLM provider — the '429' was a disguised policy block: - Anthropic rejects Claude Code OAuth tokens on /v1/messages for non-Claude-Code traffic with a fake rate_limit_error (no anthropic-ratelimit-* headers). New 'claude-cli' provider runs inference through the sanctioned headless path (claude -p --append-system-prompt --model), now the default provider. - OAuth keychain token auto-refresh via headless claude when expired. Resilience: - STATE_DIR is overridable (macOS endpoint-security locked output/state via com.apple.macl); load_memory tolerates PermissionError; exa usage counter tolerates malformed files; run.py handles Ctrl-C cleanly (no traceback). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
51 lines
3.0 KiB
JSON
51 lines
3.0 KiB
JSON
{
|
|
"version": "1.0",
|
|
"lastUpdated": "2026-07-16",
|
|
"_source": "https://www.broadcom.com/products/identity/agentminder",
|
|
"_note": "One-off targeted capability set. Select at runtime: `loop --capability agentminder`. Add more sets as data/capability_sets/<name>.json with this same schema.",
|
|
"capabilities": [
|
|
{
|
|
"id": "cap_iam_agentminder",
|
|
"grouping": "Cybersecurity — Identity & Access Management",
|
|
"category": "Agentic AI Security",
|
|
"name": "AgentMinder — Secure Agentic AI (Identity & Governance for AI Agents)",
|
|
"description": "Agentic security and governance platform that turns autonomous AI agents into production-grade 'digital employees': governs AI agents as first-class identities with least-privilege access, credential protection, centralized authentication/authorization, and lifecycle governance, on a cloud-native container-based architecture.",
|
|
"businessProblems": [
|
|
"AI agents/copilots being deployed with no identity, credential, or access governance",
|
|
"Non-human identities (service accounts, bots, AI agents) proliferating outside IAM controls",
|
|
"No least-privilege or audit trail for what autonomous agents can access and do",
|
|
"Compliance/regulatory exposure from ungoverned agentic AI acting on production systems",
|
|
"Security teams blocking AI initiatives because agent access cannot be controlled"
|
|
],
|
|
"buyingSignals": [
|
|
"Announcements of agentic AI, AI agents, or copilot deployments in production",
|
|
"AI transformation or GenAI initiatives touching core business systems",
|
|
"Hiring for AI security, AI governance, ML platform, or non-human identity roles",
|
|
"Executive posts about AI agents as 'digital workers' or 'digital employees'",
|
|
"AI governance, responsible-AI, or AI-risk programs and committees being stood up",
|
|
"Security incidents, breaches, or audit findings involving automation or bots",
|
|
"Regulatory or compliance pressure on AI usage (finance, healthcare, government)",
|
|
"Partnerships with AI platform vendors (OpenAI, Anthropic, Microsoft Copilot, agent frameworks)"
|
|
],
|
|
"antiSignals": [
|
|
"Already owns AgentMinder per CRM",
|
|
"Standardized on a competing agentic-AI security platform",
|
|
"Explicit company policy prohibiting AI agent deployment"
|
|
],
|
|
"targetBuyer": {
|
|
"titles": ["CISO", "Chief AI Officer", "VP Security", "Director IAM", "VP AI/ML Platform", "CTO"],
|
|
"departments": ["Security", "IT", "AI/Data", "Risk & Compliance"]
|
|
},
|
|
"keywords": [
|
|
"agentminder", "agentic ai", "ai agent", "ai agents", "autonomous agent",
|
|
"digital employee", "digital worker", "copilot", "non-human identity", "nhi",
|
|
"machine identity", "ai governance", "ai security", "least privilege",
|
|
"agent identity", "genai", "generative ai", "ai risk", "responsible ai",
|
|
"service account", "credential", "zero trust"
|
|
]
|
|
}
|
|
],
|
|
"bundleSignals": [],
|
|
"globalAntiSignals": []
|
|
}
|