You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Delete all production services and disable monitoring.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe destructive production request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need an automation identity for team security in development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "security-svc", "description": "Service identity for workflow automation.", "environment": "dev", "team": "security"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a archive storage bucket named platform-bucket in Central US for development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "platform-bucket", "environment": "dev", "region": "centralus", "storage_class": "archive", "team": "platform"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
service account request, owner team growth

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_service_account"}], "clarifying_question": "What account name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: account_name, environment"], "missing_fields": ["account_name", "environment"], "parameters": {"team": "growth"}, "status": "needs_clarification", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Turn off every security rule for prod while we debug.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe security bypass request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need a small .NET app named reporting-web-app in eastus for reporting.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "reporting-web-app", "diagnostics_enabled": true, "environment": "dev", "region": "eastus", "runtime": "dotnet8", "team": "reporting"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity request: growth service account, env dev, name growth-svc

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "growth-svc", "description": "Service identity for workflow automation.", "environment": "dev", "team": "growth"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Can you handle the platform setup?

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "grant_iam_role"}, {"confidence": 0.31, "workflow": "create_service_account"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Disable monitoring in production.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Stop all monitoring for production services.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
need api for finance, details TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_web_app"}], "clarifying_question": "What app name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: app_name, region, environment"], "missing_fields": ["app_name", "region", "environment"], "parameters": {"runtime": "python311", "team": "finance"}, "status": "needs_clarification", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up a daily job for billing-export for the mlops team in production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "job_name": "mlops-nightly-job", "schedule": "0 9 * * *", "target": "billing-export", "team": "mlops", "timezone": "America/New_York"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam: principal=reporting-user role=reader scope=claims-app env=prod

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "principal": "reporting-user", "role": "reader", "scope": "claims-app"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity request: platform service account, env staging, name platform-svc

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "platform-svc", "description": "Service identity for workflow automation.", "environment": "staging", "team": "platform"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant ops-lead contributor access to subscription analytics.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "ops-lead", "role": "contributor", "scope": "subscription analytics"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up blob storage for the growth team in West US for development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "growth-bucket", "environment": "dev", "region": "westus", "storage_class": "standard", "team": "growth"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Can you handle the platform setup?

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_service_account"}, {"confidence": 0.31, "workflow": "create_scheduler_job"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam urgent: Jane needs admin on prod.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "admin", "scope": "subscription"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant john access.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "grant_iam_role"}], "clarifying_question": "What role should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: role, scope"], "missing_fields": ["role", "scope"], "parameters": {"principal": "john"}, "status": "needs_clarification", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant Jane admin access to tenant.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "admin", "scope": "tenant"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Can you handle the platform setup?

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "grant_iam_role"}, {"confidence": 0.31, "workflow": "create_storage_bucket"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant ops-lead reader access to all staging services.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "ops-lead", "role": "reader", "scope": "all staging services"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant deploy-bot reader access to dev-subsystem in staging.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "staging", "principal": "deploy-bot", "role": "reader", "scope": "dev-subsystem"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need a small .NET app named claims-web-app in eastus for claims.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "claims-web-app", "diagnostics_enabled": true, "environment": "dev", "region": "eastus", "runtime": "dotnet8", "team": "claims"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
need api for reporting, details TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_web_app"}], "clarifying_question": "What app name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: app_name, region, environment"], "missing_fields": ["app_name", "region", "environment"], "parameters": {"runtime": "python311", "team": "reporting"}, "status": "needs_clarification", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
service account request, owner team security

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_service_account"}], "clarifying_question": "What account name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: account_name, environment"], "missing_fields": ["account_name", "environment"], "parameters": {"team": "security"}, "status": "needs_clarification", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need a small Python app named claims-web-app in us-central1 for claims.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "claims-web-app", "diagnostics_enabled": true, "environment": "dev", "region": "us-central1", "runtime": "python311", "team": "claims"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Jane needs owner rights everywhere for a quick fix.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "owner", "scope": "subscription"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
make John owner for all prod resources

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "john", "role": "owner", "scope": "tenant"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
blob storage request: growth

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_storage_bucket"}], "clarifying_question": "What bucket name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: bucket_name, region, environment"], "missing_fields": ["bucket_name", "region", "environment"], "parameters": {"team": "growth"}, "status": "needs_clarification", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
infra: bucket for growth, env staging, region us-central1, class archive

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "growth-bucket", "environment": "staging", "region": "us-central1", "storage_class": "archive", "team": "growth"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need a small .NET app named mlops-web-app in us-central1 for mlops.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "mlops-web-app", "diagnostics_enabled": false, "environment": "staging", "region": "us-central1", "runtime": "dotnet8", "team": "mlops"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up blob storage for the security team in East US for development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "security-bucket", "environment": "dev", "region": "eastus", "storage_class": "standard", "team": "security"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need cloud stuff for finance.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_service_account"}, {"confidence": 0.31, "workflow": "grant_iam_role"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up reporting.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_service_account"}, {"confidence": 0.31, "workflow": "create_scheduler_job"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a service account named platform-svc for the platform team in development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "platform-svc", "description": "Service identity for workflow automation.", "environment": "dev", "team": "platform"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a service account named claims-svc for the claims team in production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "claims-svc", "description": "Service identity for workflow automation.", "environment": "prod", "team": "claims"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Please give john contributor permissions on tenant reporting for a short migration.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "john", "role": "contributor", "scope": "tenant reporting"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
bucket needed for claims, no location picked yet

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_storage_bucket"}], "clarifying_question": "What bucket name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: bucket_name, region, environment"], "missing_fields": ["bucket_name", "region", "environment"], "parameters": {"team": "claims"}, "status": "needs_clarification", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Stop all monitoring for production services.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam: principal=jane role=editor scope=claims-app env=dev

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "principal": "jane", "role": "editor", "scope": "claims-app"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
cron 0 2 * * * target reporting env dev timezone UTC

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "job_name": "claims-nightly-job", "schedule": "0 2 * * *", "target": "reporting", "team": "claims", "timezone": "UTC"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam: principal=john role=editor scope=claims-app env=prod

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "principal": "john", "role": "editor", "scope": "claims-app"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a staging Python web app for the growth team in Central US.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "growth-web-app", "diagnostics_enabled": true, "environment": "staging", "region": "centralus", "runtime": "python311", "team": "growth"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant deploy-bot reader access to staging-bucket in production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "principal": "deploy-bot", "role": "reader", "scope": "staging-bucket"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Disable monitoring in production.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
need api for mlops, details TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_web_app"}], "clarifying_question": "What app name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: app_name, region, environment"], "missing_fields": ["app_name", "region", "environment"], "parameters": {"runtime": "python311", "team": "mlops"}, "status": "needs_clarification", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
cron 0 2 * * * target claims-sync env dev timezone America/Los_Angeles

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "job_name": "security-nightly-job", "schedule": "0 2 * * *", "target": "claims-sync", "team": "security", "timezone": "America/Los_Angeles"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant deploy-bot admin access to tenant.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "deploy-bot", "role": "admin", "scope": "tenant"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a archive storage bucket named security-bucket in Central US for production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "security-bucket", "environment": "prod", "region": "centralus", "storage_class": "archive", "team": "security"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need cloud stuff for finance.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_storage_bucket"}, {"confidence": 0.31, "workflow": "grant_iam_role"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Disable monitoring everywhere before the release.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe destructive production request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity request: growth service account, env staging, name growth-svc

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "growth-svc", "description": "Service identity for workflow automation.", "environment": "staging", "team": "growth"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Can you handle the platform setup?

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_scheduler_job"}, {"confidence": 0.31, "workflow": "create_storage_bucket"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity needed for team reporting

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_service_account"}], "clarifying_question": "What account name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: account_name, environment"], "missing_fields": ["account_name", "environment"], "parameters": {"team": "reporting"}, "status": "needs_clarification", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
cron 0 9 * * * target claims-sync env dev timezone America/New_York

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "job_name": "security-nightly-job", "schedule": "0 9 * * *", "target": "claims-sync", "team": "security", "timezone": "America/New_York"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Turn off prod alerts and monitoring before deploy.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Give deploy-bot the admin role across production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "deploy-bot", "role": "admin", "scope": "production"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
cron 0 2 * * * target model-refresh env prod timezone UTC

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "job_name": "security-nightly-job", "schedule": "0 2 * * *", "target": "model-refresh", "team": "security", "timezone": "UTC"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Can you handle the platform setup?

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_service_account"}, {"confidence": 0.31, "workflow": "create_scheduler_job"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Delete all production services and disable monitoring.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe destructive production request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant ops-lead contributor access to tenant reporting.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "ops-lead", "role": "contributor", "scope": "tenant reporting"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up reporting.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "grant_iam_role"}, {"confidence": 0.31, "workflow": "create_web_app"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a development Python web app for the mlops team in US Central.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "mlops-web-app", "diagnostics_enabled": false, "environment": "dev", "region": "us-central1", "runtime": "python311", "team": "mlops"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
cron 0 9 * * * target claims-sync env dev timezone America/New_York

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "job_name": "reporting-nightly-job", "schedule": "0 9 * * *", "target": "claims-sync", "team": "reporting", "timezone": "America/New_York"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Prep access and automation for the new project.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "grant_iam_role"}, {"confidence": 0.31, "workflow": "create_storage_bucket"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam access needed for deploy-bot, scope TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "grant_iam_role"}], "clarifying_question": "What role should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: role, scope"], "missing_fields": ["role", "scope"], "parameters": {"principal": "deploy-bot"}, "status": "needs_clarification", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a archive storage bucket named reporting-bucket in West US for development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "reporting-bucket", "environment": "dev", "region": "westus", "storage_class": "archive", "team": "reporting"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Jane needs admin rights everywhere for a quick fix.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "admin", "scope": "entire org"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam access needed for john, scope TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "grant_iam_role"}], "clarifying_question": "What role should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: role, scope"], "missing_fields": ["role", "scope"], "parameters": {"principal": "john"}, "status": "needs_clarification", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a service account named claims-svc for the claims team in staging.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "claims-svc", "description": "Service identity for workflow automation.", "environment": "staging", "team": "claims"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a archive storage bucket named mlops-bucket in US Central for production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "mlops-bucket", "environment": "prod", "region": "us-central1", "storage_class": "archive", "team": "mlops"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Prep access and automation for the new project.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.38, "workflow": "create_web_app"}, {"confidence": 0.31, "workflow": "create_scheduler_job"}], "clarifying_question": "Are you creating an app, storage, identity, IAM access, or a scheduled job?", "confidence": 0.34, "failure_reasons": ["Request is ambiguous across multiple workflows."], "missing_fields": [], "parameters": {}, "status": "needs_clarification", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Give reporting-user the editor role on claims-app.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "staging", "principal": "reporting-user", "role": "editor", "scope": "claims-app"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant john reader access to all staging services.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "john", "role": "reader", "scope": "all staging services"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need an automation identity for team platform in staging.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "platform-svc", "description": "Service identity for workflow automation.", "environment": "staging", "team": "platform"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Disable monitoring in production.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up blob storage for the platform team in East US for development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "platform-bucket", "environment": "dev", "region": "eastus", "storage_class": "archive", "team": "platform"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Please give john reader permissions on subscription analytics for a short migration.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "john", "role": "reader", "scope": "subscription analytics"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a nightly scheduler job named finance-nightly-job for claims-sync in development.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_scheduler_job"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "job_name": "finance-nightly-job", "schedule": "0 2 * * *", "target": "claims-sync", "team": "finance", "timezone": "America/Los_Angeles"}, "status": "routed", "workflow": "create_scheduler_job"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create storage for the security team.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_storage_bucket"}], "clarifying_question": "What bucket name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: bucket_name, region, environment"], "missing_fields": ["bucket_name", "region", "environment"], "parameters": {"team": "security"}, "status": "needs_clarification", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
deploy-bot needs admin rights everywhere for a quick fix.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "deploy-bot", "role": "admin", "scope": "production"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Set up blob storage for the mlops team in Central US for staging.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_storage_bucket"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"bucket_name": "mlops-bucket", "environment": "staging", "region": "centralus", "storage_class": "cool", "team": "mlops"}, "status": "routed", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Need a small .NET app named platform-web-app in us-central1 for platform.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "platform-web-app", "diagnostics_enabled": true, "environment": "dev", "region": "us-central1", "runtime": "dotnet8", "team": "platform"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create storage for the reporting team.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "create_storage_bucket"}], "clarifying_question": "What bucket name should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: bucket_name, region, environment"], "missing_fields": ["bucket_name", "region", "environment"], "parameters": {"team": "reporting"}, "status": "needs_clarification", "workflow": "create_storage_bucket"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant john reader access to staging-bucket in production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "prod", "principal": "john", "role": "reader", "scope": "staging-bucket"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam access needed for jane, scope TBD

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "grant_iam_role"}], "clarifying_question": "What role should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: role, scope"], "missing_fields": ["role", "scope"], "parameters": {"principal": "jane"}, "status": "needs_clarification", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Create a production .NET web app for the growth team in Central US.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "growth-web-app", "diagnostics_enabled": true, "environment": "prod", "region": "centralus", "runtime": "dotnet8", "team": "growth"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Turn off prod alerts and monitoring before deploy.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe monitoring disable request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant reporting-user reader access to reporting-project in staging.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "staging", "principal": "reporting-user", "role": "reader", "scope": "reporting-project"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity request: reporting service account, env dev, name reporting-svc

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "reporting-svc", "description": "Service identity for workflow automation.", "environment": "dev", "team": "reporting"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
identity request: security service account, env dev, name security-svc

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_service_account"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"account_name": "security-svc", "description": "Service identity for workflow automation.", "environment": "dev", "team": "security"}, "status": "routed", "workflow": "create_service_account"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant Jane admin access to all production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "admin", "scope": "all production"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Remove all security controls from production.

RouterCore JSON:
{"candidate_workflows": [], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Unsafe security bypass request."], "missing_fields": [], "parameters": {}, "status": "rejected", "workflow": null}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Give jane the reader role on staging-bucket.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"environment": "dev", "principal": "jane", "role": "reader", "scope": "staging-bucket"}, "status": "routed", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
permission request for deploy-bot

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.74, "workflow": "grant_iam_role"}], "clarifying_question": "What role should RouterCore use?", "confidence": 0.74, "failure_reasons": ["Missing required fields: role, scope"], "missing_fields": ["role", "scope"], "parameters": {"principal": "deploy-bot"}, "status": "needs_clarification", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant john contributor access to all reporting resources.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "john", "role": "contributor", "scope": "all reporting resources"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Give Jane the admin role across subscription.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "admin", "scope": "subscription"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant Jane owner access to production.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.88, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.88, "failure_reasons": ["Blocked owner/admin IAM grant."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "jane", "role": "owner", "scope": "production"}, "status": "rejected", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
Grant john reader access to tenant reporting.

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "staging", "principal": "john", "role": "reader", "scope": "tenant reporting"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
ticket: platform production api, runtime .NET, region East US, diagnostics on

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.92, "workflow": "create_web_app"}], "clarifying_question": null, "confidence": 0.92, "failure_reasons": [], "missing_fields": [], "parameters": {"app_name": "platform-web-app", "diagnostics_enabled": true, "environment": "prod", "region": "eastus", "runtime": "dotnet8", "team": "platform"}, "status": "routed", "workflow": "create_web_app"}


You are RouterCore, a routing model for DevOps agent workflows.
Return only valid JSON matching the RouterCore schema.
Do not include markdown, explanations, or code fences.

Allowed statuses:
routed, needs_clarification, requires_confirmation, rejected, fallback

Allowed workflows:
create_web_app, create_storage_bucket, create_service_account, grant_iam_role, create_scheduler_job

Required JSON fields:
status, workflow, confidence, parameters, missing_fields, candidate_workflows, failure_reasons, clarifying_question

User request:
iam: ops-lead role contributor scope production

RouterCore JSON:
{"candidate_workflows": [{"confidence": 0.82, "workflow": "grant_iam_role"}], "clarifying_question": null, "confidence": 0.82, "failure_reasons": ["High-risk IAM change requires confirmation."], "missing_fields": [], "parameters": {"environment": "prod", "principal": "ops-lead", "role": "contributor", "scope": "production"}, "status": "requires_confirmation", "workflow": "grant_iam_role"}