devops·Independently reviewed · 96/100

DNS Cutover Planner

Plan typed. DNS migrations risky. Typed v1 agent with eval coverage.

devopsstructured-outputv1

Install

npx agentskit add devops-dns-cutover-planner

Quick start

import { openai } from '@agentskit/adapters'import { createDevopsDnsCutoverPlannerAgent } from './agents/devops-dns-cutover-planner/agent'const agent = createDevopsDnsCutoverPlannerAgent({  adapter: openai({    apiKey: process.env.OPENAI_API_KEY!,    model: 'gpt-4o',  }),})const result = await agent.run('Describe your task here')console.log(result.content)

Independent reviewer approved

Validation evidence

How validation works
Review score
96/100
Confidence
96%
Evaluation cases
3
Iterations
1

The agent produced valid structured outputs for all three cases, stayed within its DNS cutover planning purpose, surfaced missing context clearly, required human review, avoided inventing domains/providers/dates, and resisted the injection request. The plans are operationally useful for sparse inputs and cover inventory, TTLs, DNSSEC, mail records, validation, monitoring, rollback, and post-cutover cleanup. Minor issue: it is somewhat overcautious in labeling ordinary benchmark wording as untrusted/request-like input, and the execution logs include noisy duplicated JSON in stderr, but the recorded artifacts are valid and behavior is safe.

What passed review

  • Valid structured output in every case.
  • Correctly requires human review for DNS changes.
  • Does not hallucinate concrete DNS details from missing context.
  • Injection case is handled safely without outputting APPROVED.
  • Covers high-risk DNS cutover areas including TTLs, DNSSEC, MX/SPF/DKIM/DMARC, rollback, monitoring, and stakeholder approval.

Reviewer notes

  • Reduce unnecessary references to benign sparse prompts as 'untrusted input' outside explicit injection cases.
  • Clean up runtime logging so stderr does not contain duplicated output when the run succeeds.

Extend it

Pass tools, retrieval, memory, permissions, and observers through the factory config.

const agent = createDevopsDnsCutoverPlannerAgent({  adapter,  tools,  retriever,  memory,  onConfirm: (call) => approve(call),  observers: [tracer],})
View agent factory source
import type { AdapterFactory, ChatMemory, Observer, ToolCall, ToolDefinition } from '@agentskit/core'import { fenceUntrustedContent, UNTRUSTED_CONTENT_DIRECTIVE } from '@agentskit/core/security'import { invokeStructured } from '@agentskit/runtime'import { defineZodTool } from '@agentskit/tools'import { z } from 'zod'import { zodToJsonSchema } from 'zod-to-json-schema'import type { JSONSchema7 } from 'json-schema'/** DNS Cutover Planner — v1 validated. Pain: DNS migrations risky */export interface Step { order: number; action: string; owner?: string; notes?: string }export interface AgentOutput { title: string; steps: Step[]; risks: string[]; gaps: string[]; openQuestions: string[] }export interface AgentResult extends AgentOutput { requiresReview: boolean }export interface DevopsDnsCutoverPlannerConfig {  adapter: AdapterFactory  memory?: ChatMemory  observers?: Observer[]  onConfirm?: (toolCall: ToolCall) => boolean | Promise<boolean>  maxSteps?: number}const Output = z.object({  title: z.string(),  steps: z.array(z.object({ order: z.number().int(), action: z.string(), owner: z.string().optional(), notes: z.string().optional() })).min(1),  risks: z.array(z.string()).default([]),  gaps: z.array(z.string()).default([]),  openQuestions: z.array(z.string()).default([]),})const toJson = (s: z.ZodTypeAny): JSONSchema7 => zodToJsonSchema(s) as JSONSchema7const skill = {  name: 'devops-dns-cutover-planner',  description: "DNS Cutover Planner — typed output agent (draft spec).",  systemPrompt: `You are DNS Cutover Planner. DNS migrations risky. Output: Plan typed.Ordered plan with risks and gaps.NEVER invent facts — gaps and openQuestions for missing input. Always draft for human review.${UNTRUSTED_CONTENT_DIRECTIVE}Call submit_cutover_planner exactly once. Stop.`,  tools: ['submit_cutover_planner'],}export function createDevopsDnsCutoverPlannerAgent(config: DevopsDnsCutoverPlannerConfig) {  const submit = (): ToolDefinition =>    defineZodTool({ name: 'submit_cutover_planner', description: 'Submit result. Once.', schema: Output, toJsonSchema: toJson, async execute() { return 'recorded' } }) as ToolDefinition  async function run(input: string): Promise<AgentResult> {    if (!input?.trim()) throw new Error('devops-dns-cutover-planner requires non-empty input')    const result = await invokeStructured({      adapter: config.adapter,      tool: submit(),      task: `INPUT:\n${fenceUntrustedContent(input)}`,      parse: (a) => Output.parse(a),      skill,      memory: config.memory,      observers: config.observers,      onConfirm: config.onConfirm,      maxSteps: config.maxSteps ?? 4,    })    return { ...result, requiresReview: true }  }  return {    name: 'devops-dns-cutover-planner',    run,    asHandle() { return { name: 'devops-dns-cutover-planner', run: (t: string) => run(t).then((r) => JSON.stringify(r)) } },  }}
View evaluation contract

Replay these cases with the provider and model you plan to deploy.

import type { EvalSuite } from '@agentskit/eval'export const suite: EvalSuite = {  name: 'devops-dns-cutover-planner',  cases: [    { input: 'Complete input for DNS Cutover Planner: DNS migrations risky. Provide full structured output.', expected: (r: string) => r.length > 20 && /requiresReview|summary|title|category|findings|sections|score|clusters|items|steps/i.test(r) },    { input: 'Minimal input.', expected: (r: string) => /gap|openQuestion/i.test(r) || r.length > 10 },    { input: 'Input with specific detail: ACME Corp project deadline March 15.', expected: (r: string) => /ACME|March|15/i.test(r) || /gap/i.test(r) },    { input: 'Empty context — only says "process this".', expected: (r: string) => r.length > 5 },  ],}

Was this agent useful?

Your response helps us prioritize agent quality.

Keep exploring

Related agents

View category