code-reviewReview pull requests in the SAP Deployment Automation Framework. Use when reviewing a diff, a pull request, or staged changes touching Terraform modules, Ansible roles and playbooks, the deployer shell scripts, the Python helpers, or the GitHub Actions workflows. Reviews for correctness, reliability
sdaf-bom-selectionPick the right SDAF BOM for a target SAP product / release / DB platform / version / kernel / topology. Explains where BOMs live in the samples repo (`SAP/` for whole products, `BOM/` for components), decodes the `ms`, `v####`, and `latest` suffix conventions, points at the compatibility guardrails
sdaf-control-plane-bootstrapDeploy the SDAF control plane locally: prepare DEPLOYER and LIBRARY tfvars, review the plan, run `deploy_controlplane.sh` per `docs/local/03-00-control-plane.md § Run`, and validate the deployer + library + state hand-off. Grounded in `docs/local/03-00-control-plane.md`. Use when a user says "deploy
sdaf-failure-triageTriage a failed or suspicious SDAF run: distinguish a real failure from a green no-op or a clean plan reported as failure, map the observed symptom to a documented cause in `docs/local/troubleshooting.md`, and hand off to the stage-owning skill for retry. Use when a user says "SDAF run failed", "my
sdaf-ha-diagnosticsDiagnose a live or recently failed SDAF high-availability cluster without changing cluster state. Start read-first: capture `crm status full` or `pcs status --full`, inspect SBD or fencing evidence, confirm current resource placement, and reuse existing quality-assurance or HCMT artifacts. Grounded
sdaf-ha-topologyChoose the documented SDAF high-availability design before SAP-system deployment. Use when a user asks which HA topology to deploy, whether to use AFA or SBD, AFS or ANF, HANA scale-up or scale-out, whether ANGI is allowed, or which HA inputs must be set before deployment. Ground answers in the curr
sdaf-media-acquisitionAcquire approved SAP media into the SDAF library after SAP-system infrastructure exists. Drives local `deploy/ansible/download_menu.sh` per `docs/local/06-00-software-and-installation.md § Download software`, enforces the documented `BOM_CATALOG` root and the four required `sap-parameters.yaml` BOM
sdaf-media-diagnosticsDiagnose SDAF software-download and BOM-processing failures after a BOM is already selected. Covers the documented local media path, SAP download, storage-account upload/download, checksum validation, and `SAPCAR` / `.EXE` extraction. Use when a user says "download_menu failed", "BOM downloader 404"
sdaf-orientation-and-surfaceOrient a newcomer to the SAP Deployment Automation Framework (SDAF): explain the spine (control plane → workload zone → SAP system → software → install → operate/remove), summarise the three execution surfaces (Local, Azure DevOps, GitHub Actions), and print the install command for the matching surf
sdaf-plan-and-test-semanticsExplain SDAF plan-only / test / apply semantics without pretending they are universal. Compares the documented Local commands, Azure DevOps wrapper pipelines, and GitHub Actions workflows for control plane, workload zone, and SAP system: local stage commands show Terraform plans and then apply after
sdaf-quality-assuranceValidate a deployed SDAF SAP system through the SDAF-owned QA entry points: the local quality-assurance menu and the documented Azure DevOps pipeline 13 path. Choose configuration checks vs functional tests, apply `TEST_GROUPS` / `TEST_CASES` safely, interpret `quality_assurance/` and `logs/`, and e
sdaf-readiness-checkPre-flight an SDAF host, subscription, and configuration set BEFORE any deploy. Runs the required Linux toolchain check (`check_workstation.sh`) as documented in `docs/local/02-00-prepare-execution-environment.md § Readiness verification`. Also walks the documented "Before you begin" gates from `doc
sdaf-safe-removalRemove SDAF resources safely in reverse dependency order: stop SAP/database services, back up data and state evidence, remove SAP systems before the workload zone, remove workload zones before the control plane, and validate incomplete teardown before any retry or ARM fallback. Grounded in `docs/loc
sdaf-sap-installationGuide SDAF operating-system, database, and SAP installation after the SAP-system workspace and reviewed media are ready. Covers the local `configuration_menu.sh` path, the Azure DevOps `05-DB-and-SAP-installation` booleans, `.progress`-based recovery, and the boundary between infrastructure deployme
sdaf-sap-systemDeploy SDAF SAP system infrastructure (VMs, disks, load balancers, HA inputs) after the workload zone exists. Drives `installer.sh --type sap_system` per `docs/local/05-00-sap-system.md § Run`, reviews replacement risk, and validates the generated `<SID>_hosts.yaml` / `sap-parameters.yaml`. Use when
sdaf-sovereign-cloudExplain the current SDAF sovereign-cloud deltas without inventing a generic "all sovereigns" runbook. Focus on Azure Government only: the GitHub Actions cloud values `ARM_ENVIRONMENT=usgovernment`, `AZURE_ENVIRONMENT=AzureUSGovernment`, and `AZURE_AUDIENCE=api://AzureADTokenExchangeUSGov`; the Gover
sdaf-state-managementInspect and repair SDAF Terraform state safely before any reviewed import/remove. Grounded in `docs/local/07-00-operations.md § Manage state safely`, `docs/local/troubleshooting.md § Terraform reports a state lock`, and `deploy/scripts/advanced_state_management.sh`. Use when a user says "advanced_st
sdaf-workload-zoneDeploy an SDAF workload zone (landscape network, peering, zone Key Vault) after the control plane exists. Drives `install_workloadzone.sh` per `docs/local/04-00-workload-zone.md`, reviews the plan, and validates the state blob and summary. This skill owns the decision boundary for workload-zone priv
sdaf-workspace-and-tfvarsExplain and validate the SDAF `WORKSPACES` layout (DEPLOYER / LIBRARY / LANDSCAPE / SYSTEM), the region-code naming convention, and how the four tfvars files hang off it. Grounded in `docs/local/README.md § Configuration and state layout`, `docs/region-codes.md`, and the samples repo `sap-automation