Catalog specimen

Pick a name in the index. Disk is a shipped graph you can read in graphs/ec2-disk-pressure.l1.yaml. EC2, RDS, and IAM-read are named specialists on the same license with declared envelopes — no extra YAML on disk in v0. Kubernetes and Network are later, still not SKUs.

Disk

Reference graph. Identity ec2-readonly. Classifier has tools: [].

classify
Router only. No tools, no identities, no connectors. It names Disk when the page is disk pressure.
edge when category is disk_pressure
ec2-investigate
Reads DescribeInstances, DescribeVolumes, CloudWatch GetMetricData, the PagerDuty incident, and New Relic NRQL. Does not construct ModifyVolume.
then synthesize a structured recommendation
annotate-incident
PagerDuty note on your incident. You ack.
annotate-alert
New Relic alert annotation. You keep the alert.
draft-pr
GitLab draft MR for volume-expansion Terraform. You review, then merge. The graph cannot.

EC2

Catalog envelope. Same annual license. No shipped graph in v0.

ec2:DescribeInstances
ec2:DescribeInstanceStatus
ec2:DescribeTags

ec2:TerminateInstances — not a tool object
ec2:RunInstances — not a tool object
ec2:AuthorizeSecurityGroupIngress — not a tool object

RDS

Catalog envelope. Same annual license. No shipped graph in v0.

rds:DescribeDBInstances
cloudwatch:GetMetricData

rds:DeleteDBInstance — not a tool object
rds:ModifyDBInstance — not a tool object

IAM-read

Catalog envelope. Same annual license. No shipped graph in v0.

iam:GetRole
iam:ListAttachedRolePolicies

iam:* — wildcards are rejected
sts:AssumeRole — not in this specialist's tool list
sts:GetFederationToken — AWS_DENY

Kubernetes

Not a graph. Not a SKU. Same invoice when it lands.

v0 does not ship a kube specialist. Do not treat this name as an installer checkbox.

Network

Not a graph. Not a SKU. Same invoice when it lands.

v0 does not ship a network specialist. The license already covers the connectors you would point at it.