a2a cloud
production blueprint · engineering

Database migration readiness agent blueprint.

Review a migration for lock, data, rollback, and rollout risks before an operator schedules it.

Search intent: AI agent for database migration review

Published by a2a cloudProduct-source methodology →
01 · the contract

Start from a bounded job, not a blank chat box.

trigger

A database migration enters release review.

owner

engineering owner

agent stops at

A database owner approves execution, timing, and the rollback threshold.

KPI · decrease

migration-caused incidents (incidents). Count production incidents attributable to reviewed migrations.

inputs

Evidence the run may read

  • Migration statements
  • Schema and table-size snapshot
  • Deployment and rollback procedure
outputs

Artifacts the run must produce

  • Migration risk report
  • Preflight query checklist
  • Staged rollout plan
02 · topology

Small specialists. Named handoffs. One accountable decision.

Each stage produces an artifact another stage can inspect. The final node is a person, not an autonomous write to an external system.

  1. 01

    intake

    Validate and normalize the database migration readiness inputs.

  2. 02

    schema analyst

    Produce the migration risk report.

  3. 03

    operational risk analyst

    Produce the preflight query checklist.

  4. 04

    migration reviewer

    Challenge the database migration readiness result and prepare an approval packet.

  5. 05

    engineering owner

    A database owner approves execution, timing, and the rollback threshold.

intakevalidated input packetschema-analyst
schema-analystMigration risk reportoperational-risk-analyst
operational-risk-analystPreflight query checklistmigration-reviewer
migration-reviewerapproval packet with evidence referenceshuman-approver
03 · authority

Grant the run only what this case needs.

Source material is read-only. Drafts land in a case-specific output path. Tools may read or propose; the human gate owns the external write.

read

case inputs

workspace/engineering/database-migration-readiness/inputs/**

Read only the evidence attached to this workflow instance.

write-output

case outputs

workspace/engineering/database-migration-readiness/outputs/**

Write drafts and evidence artifacts without modifying source records.

invoke-scoped-tool

approved tools

engineering:database-migration-readiness:read-or-propose

Invoke only tools explicitly granted for this run; external writes remain gated.

required human decision

A database owner approves execution, timing, and the rollback threshold.

Decision owner: engineering owner.

04 · implementation

A private, bounded starting manifest.

The blueprint starts private, caps its DAG, disables replanning, and exposes no public endpoint. Add only the tools and data adapters this workflow has approved.

a2a.yamlsafe starting point
name: engineering-database-migration-readiness
version: 0.1.0
entrypoint: agent:BlueprintAgent
expose:
  public: false
composition:
  planning: deterministic_dag
  max_nodes: 6
  max_parallel: 1
  max_replans: 0
05 · acceptance test

Pass only with evidence.

  1. 01

    Evidence traceability

    Every material conclusion cites an input artifact or a scoped tool result from this run.

  2. 02

    The review covers forward compatibility, lock exposure, data backfill, and rollback feasibility.

    The review covers forward compatibility, lock exposure, data backfill, and rollback feasibility.

  3. 03

    Approval boundary

    The run stops at a proposal and records the human decision before any external side effect.

failure containment

Stop small. Preserve the evidence.

Table size, traffic shape, or database-version evidence is absent.

Containment: Return a partial result with unresolved items; do not broaden scope or perform an external write.

Operator: Attach the missing evidence, narrow the brief, or explicitly approve a new scoped run.

A required input or tool grant is unavailable.

Containment: Stop the affected branch and preserve completed artifacts in the case output workspace.

Operator: Grant only the missing resource or continue with that branch marked out of scope.

06 · proof

Sign the run facts. Keep money in the billing ledger.

Current platform receipts sign caller identity or classification, skill, bounded input evidence, verified grant IDs when present, outcome or result preview, and timing. Optional file, tool, artifact, handoff, evaluation, and review fields require separate instrumentation and are not populated by default. Price, fees, payouts, and later human approvals remain separate platform records.

The example uses only fields populated by the current platform sealing paths. It is illustrative, not a record of a real customer run.

ExecutionReceipt · selected fieldsEd25519 token
{
  "receipt_id": "rcpt_01J...",
  "schema_version": 1,
  "agent_name": "engineering-database-migration-readiness",
  "caller": "user:workflow-owner",
  "task_id": "case_database_migration_readiness",
  "skill_name": "database_migration_readiness",
  "input_hash": "4d7c...9a2f",
  "grant_ids": [
    "grt_case_inputs",
    "grt_tool_propose"
  ],
  "status": "ok",
  "result_preview": "Output prepared: Migration risk report. Human decision remains separate.",
  "elapsed_ms": 4218
}
put the pattern to work

Start private. Scope the authority. Require the decision.

Deploy the workflow as a bounded internal agent, verify its outputs and the receipt fields actually emitted, then expand only the scopes your acceptance test proves it needs.