a0_software_orchestrator/help/management/tool-governance.md

---
name: tool-governance
description: Tool registry, capability checks, and fallback handling for the orchestrator agent.
tags: ['management', 'tools', 'registry']
---

# Tool Governance

## Purpose
Maintain a registry of available tools, verify capabilities before use, and define fallback behavior when a tool is unavailable.

## When to Use
- Before invoking any tool for the first time
- When a tool returns an unexpected error
- When the agent needs to discover what tools exist
- During phase transitions

## When Not to Use
- For well-known core tools (terminal, browser, code execution)
- For tools just confirmed working in this session

## Procedure: Tool Discovery
1. Use the `tool_registry` plugin tool to list available tools
2. Read tool documentation from help/<topic>/help.md
3. Note required inputs, expected outputs, error modes

## Procedure: Capability Check
1. Verify the tool exists in registry
2. Verify all required inputs are available
3. Verify the tool is enabled (not toggled off)
4. If any check fails: see Fallback

## Procedure: Fallback
- Tool not found: use `capability_check` to find closest alternative
- Tool disabled: ask user to enable or use alternative
- Tool errors persistently: delegate to test_debug_engineer for diagnosis
- UI design tool issues: delegate to ui_design_specialist for UI design workflow questions

## Available Specialist Profiles
- `requirements_analyst` – Requirements, acceptance criteria
- `solution_architect` – Architecture, design, task graph
- `ui_design_specialist` – UI design planning, mockup creation, design handoff support
- `implementation_engineer` – Code implementation
- `test_debug_engineer` – Tests, debugging, root cause
- `quality_reviewer` – Quality review at every phase gate
- `runtime_devops_engineer` – Runtime verification, deployment basics
- `security_data_engineer` – Security, data, migration risks
- `deploy_agent` – Coolify deployment
- `release_auditor` – Release audit, handoff
- `codebase_explorer` – Read-only codebase exploration

## See Also
- Plugin tool: `tool_registry`
- Plugin tool: `capability_check`