# Specialist Agent Roster — founding-kit design

Compiled 2026-09-04 from a 4-agent verified research sweep (3 researchers +
1 adversarial verifier; 37 findings, 22 confirmed, 14 downgraded/refuted and
discarded). Every design choice below cites a CONFIRMED source. This is the
"dedicated agents" layer of the founding kit; the files live in
`.claude/agents/`.

## Design principles (adopted from confirmed sources)

1. **Tool restrictions enforce role — prompts merely request it.** A reviewer
   without Write cannot introduce bugs; a test agent without deploy tools
   cannot ship. [source: https://www.pubnub.com/blog/best-practices-for-claude-code-sub-agents/ + https://github.com/VoltAgent/awesome-claude-code-subagents, verified 2026-09-04]
2. **Every agent carries the MCP routing table for its artifacts** — the
   pattern SAP itself demonstrates in its official agentic CAP reference app
   (AGENTS.md maps each artifact type to its grounding server). [source: https://github.com/SAP-samples/cap-agentic-engineered, verified 2026-09-04]
3. **Model per role:** implementation agents inherit the session model;
   the test agent runs on Haiku (cheap, mechanical work). [source: https://github.com/lst97/claude-code-sub-agents test-automator pattern — repo verified WEAK on scale claims but the model-tiering pattern confirmed on page, 2026-09-04]
4. **Reviewer filters false positives explicitly** (excluded classes declared
   up front), per Anthropic's own security-review agent. [source: https://github.com/anthropics/claude-code-security-review, verified 2026-09-04]
5. All agents inherit this repo's enforcement layer (ADR-003 gate + citation
   duty) automatically — hooks are project-scoped, so no per-agent wiring.

## The roster (5 — the cap)

| Agent | Scope | Tools (restriction is the contract) | Model |
|---|---|---|---|
| `rap-developer` | On-stack ABAP Cloud: RAP BO, CDS, behavior, BDEF, IAM artifacts | Edit/Write/Read/Grep/Glob/Bash + abap-docs, sap-docs, sap-released-objects | inherit |
| `fiori-developer` | Fiori Elements app, annotations, manifest, launchpad content | Edit/Write/Read/Grep/Glob/Bash + fiori-mcp-server (3-step workflow), ui5-mcp-server | inherit |
| `worker-developer` | TS connectivity worker: Arena API, Cloud SDK OData writes | Edit/Write/Read/Grep/Glob/Bash + context7 | inherit |
| `sap-code-reviewer` | Clean-core, security, contract conformance review | **Read/Grep/Glob + doc MCPs only — no Write, no Bash** | inherit |
| `test-engineer` | Unit/integration tests for worker + service layers | Edit/Write/Read/Grep/Glob/Bash (test commands only by instruction) | haiku |

## MCP additions (recommended, gated — not installed)

The on-stack RAP work needs an **ADT MCP server** (live syntax check, ATC,
activation, repository objects). Verified options, in preference order per the
prefer-standard rule:

1. **SAP's official ABAP MCP path** — SAP's agentic-ABAP direction (VS Code
   ADT + zero-config MCP) is announced and rolling out; `sapse.adt-vscode` is
   already installed on this machine. Evaluate first at V-1.
   [source: https://community.sap.com/t5/technology-blog-posts-by-sap/entering-the-new-era-of-agentic-ai-for-abap-development/ba-p/14394643 + community post ba-p/14408186, verified 2026-09-04]
2. **ARC-1** (`arc-mcp/arc-1`) — enterprise ABAP/ADT MCP, maintained.
   [source: https://github.com/arc-mcp/arc-1, verified 2026-09-04]
3. **`yzonur/sap-adt-mcp`** — 27 ADT tools incl. quality gates, read-only
   flag, audit logging. [source: https://github.com/yzonur/sap-adt-mcp, verified 2026-09-04]

Optional later: SAP's official **BTP Administration MCP** for the devops side.
[source: https://community.sap.com/t5/technology-blog-posts-by-sap/public-release-of-the-mcp-server-for-sap-btp-administration/ba-p/14471692, verified 2026-09-04]

Registry for future discovery: https://github.com/marianfoo/sap-ai-mcp-servers
(verified 2026-09-04). Note: `marianfoo/mcp-sap-notes` is archived (June 2026),
superseded by `marianfoo/sap-mcp-servers` — do not adopt the archived one.

## Discarded by verification (recorded so they are not re-researched)

- `MariusAlbrecht/mcp-adt` — does not exist (404; the real ADT bridge is the
  separate "vs-punk" project).
- SAP GUI automation MCP — cited listing 404s; GUI automation irrelevant to
  Public Cloud anyway.
- `rap-skills`, `claude-abap-skills` — real but 1–14 commits; mine their
  *scenario decomposition ideas* (generator/CDS/behavior/testing/troubleshoot),
  do not depend on the repos.