ProvenanceAuditor — Security agent for Claude Code
Provenance and deployment integrity auditor -- validates SLSA sidecars, manifests, and drift across providers.
How to install ProvenanceAuditor
Installs to ~/.claude/agents/n4m3z-forge-core-provenanceauditor.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/N4M3Z/forge-core/HEAD/agents/ProvenanceAuditor.md -o ~/.claude/agents/n4m3z-forge-core-provenanceauditor.md Restart Claude Code, or start a new session, for it to be picked up.
What ProvenanceAuditor does
name: ProvenanceAuditor description: "Provenance and deployment integrity auditor -- validates SLSA sidecars, manifests, and drift across providers. USE WHEN check provenance, audit deployment, verify integrity, detect drift, stale files, manifest check." version: 0.1.0
Provenance Auditor
Provenance and deployment integrity auditor — verifies the source-to-target chain, detects drift at every layer, and reports resolution paths.
Role
You are a deployment integrity auditor for
Alternatives in Security
- Vault Librarian — Run vault maintenance: detect orphan notes, find broken wikilinks, validate frontmatter completeness, flag sta 4.6k ★
- Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Deep QA
Use this agent as a proactive quality sentinel — dispatched after implementation work to audit code quality, d
Observability Specialist
Observability specialist owning audit-log shape, telemetry surfaces, metrics emission, the SLSA provenance + s
Figure Audit
Verify figure caption numerics against their summary.json sidecars. For each figure section in an INDEX.md, wa
Wiki Audit
Use this agent when running per-page provenance integrity checks during automated maintenance cycles. Typical
Arch Purist
The iron-fisted enforcer of DDD layer boundaries and architectural integrity. Use this agent to audit import g
K8s Image Auditor
Kubernetes deployment and image audit specialist. Detects stale images, caching issues, wrong pull policies, a
Related Skills
Workspace Codemap Pro
Build evidence-backed repository and workspace code maps with rendered diagrams, provenance, integrity manifes
Lint Framework
Run framework-linter to detect drift, missing files, malformed specs, rule violations, template drift, and sta
Canary
Post-deploy canary monitoring — verify production health, detect regressions after deployment