oracle · krisrice · Jun 16, 2026 · Jun 2, 2026 · Jun 8, 2026 · Jun 16, 2026
diff --git a/README.md b/README.md
@@ -10,6 +10,7 @@ Install a domain by appending the root-level domain directory to the repository
 
 ```bash
 npx skills add oracle/skills/db
+npx skills add oracle/skills/oci
 npx skills add oracle/skills/graal
 ...
 ```
@@ -47,7 +48,7 @@ Browse and toggle installed plugins anytime with `/plugin`. Enabled plugins are
 ## Domains
 
 - `db/` is the active Oracle Database domain and includes database, ORDS, SQLcl, framework, container, and agent workflow skills.
-- `oci/` contains Oracle Cloud Infrastructure skills, starting with OCI Kubernetes Engine cluster design, troubleshooting, Generic VNIC Attachment, and Multus pod networking.
+- `oci/` contains Oracle Cloud Infrastructure skills, including OCI Kubernetes Engine cluster design and troubleshooting plus Enterprise AI guidance for OCI Generative AI, agents, RAG, governance, model endpoints, Autonomous Database, APEX, and integrations.
 - `fusion/` is the root for future Oracle Fusion skills.
 - `apex/` is the root for future Oracle APEX skills.
 - `graal/` contains GraalVM skills, starting with Native Image.
@@ -94,6 +95,14 @@ Browse and toggle installed plugins anytime with `/plugin`. Enabled plugins are
 │       └── troubleshooting.md
 └── oci/
     ├── SKILL.md
+    ├── enterprise-ai/
+    │   ├── SKILL.md
+    │   ├── models/
+    │   ├── agent-workflows/
+    │   ├── governance/
+    │   ├── data/
+    │   ├── cost/
+    │   └── integrations/
     └── oke/
         ├── cluster-design.md
         ├── troubleshooting.md

diff --git a/SKILL_AUTHORING_GUIDE.md b/SKILL_AUTHORING_GUIDE.md
@@ -27,6 +27,8 @@ Each domain should own:
 - A `SKILL.md` file that explains the domain and how to navigate it.
 - Topic folders or markdown files that stay coherent within that domain.
 
+Domains can contain nested skills when a large OCI, APEX, Database, or Fusion capability needs its own router. For example, OCI Enterprise AI lives under `oci/enterprise-ai/` because it is a subset of OCI guidance.
+
 Each installable domain `SKILL.md` must start with YAML front matter containing
 `name` and `description` fields. Skill installers use these fields to discover
 and validate skills.

diff --git a/oci/SKILL.md b/oci/SKILL.md
@@ -1,52 +1,70 @@
 ---
 name: oci
-description: Oracle Cloud Infrastructure guidance for designing, operating, and troubleshooting OCI services, starting with OCI Kubernetes Engine (OKE). Use when the user asks about OKE cluster design, Terraform or Resource Manager planning, OKE incident troubleshooting, Generic VNIC Attachment, Multus, pod networking, node pools, add-ons, ingress, load balancers, OCIR image pulls, Workload Identity, or Kubernetes workloads on OCI.
+description: Oracle Cloud Infrastructure guidance for designing, operating, and troubleshooting OCI services, including OCI Kubernetes Engine (OKE) and Enterprise AI workflows for OCI Generative AI models, Responses API agents, RAG, cost estimation, governance, private endpoints, hosted agentic applications, and Oracle platform integrations. Use when the user asks about OKE cluster design, Terraform or Resource Manager planning, OKE incident troubleshooting, Generic VNIC Attachment, Multus, pod networking, node pools, add-ons, ingress, load balancers, OCIR image pulls, Workload Identity, Kubernetes workloads on OCI, OCI Generative AI, Enterprise AI Models, Enterprise AI Agents, governed GenAI applications, agentic workflows, RAG on Oracle Cloud, or OCI Generative AI pricing.
 ---
 
 # Oracle Cloud Infrastructure Skills
 
-Use this domain for practical Oracle Cloud Infrastructure guidance. The current content focuses on OCI Kubernetes Engine (OKE): cluster design, operational troubleshooting, Generic VNIC Attachment (GVA), and Multus multi-interface pod validation.
+Use this domain for practical Oracle Cloud Infrastructure guidance. Current content covers OCI Kubernetes Engine (OKE): cluster design, operational troubleshooting, Generic VNIC Attachment (GVA), and Multus multi-interface pod validation. It also covers Enterprise AI because that work is built around OCI Generative AI, OCI networking, IAM, cost estimation, hosted applications, and OCI platform integrations.
 
 ## How to Use This Domain
 
 1. Start with the routing table below.
-2. Read only the OKE file that matches the user's task.
+2. Read only the smallest service file or nested skill that matches the user's task.
 3. Prefer official Oracle documentation and live read-only discovery commands before making design or remediation recommendations.
 4. Ask before running commands that create, update, delete, restart, scale, drain, or otherwise mutate OCI or Kubernetes resources.
+5. Keep OCI-owned design decisions here, and route database-owned SQL, vector, and Select AI implementation details to `db/features/`.
 
 ## Directory Structure
 
 ```text
 oci/
-|-- SKILL.md
-`-- oke/
-    |-- cluster-design.md
-    |-- troubleshooting.md
-    |-- gva-node-pools.md
-    |-- multus-multihome.md
-    |-- skills/
-    |-- scripts/
-    |-- agents/
-    |-- shared/
-    |-- examples/
-    `-- tests/
+├── SKILL.md
+├── enterprise-ai/
+│   ├── SKILL.md
+│   ├── models/
+│   ├── agent-workflows/
+│   ├── governance/
+│   ├── data/
+│   ├── cost/
+│   └── integrations/
+└── oke/
+    ├── cluster-design.md
+    ├── troubleshooting.md
+    ├── gva-node-pools.md
+    ├── multus-multihome.md
+    ├── skills/
+    ├── scripts/
+    ├── agents/
+    ├── shared/
+    ├── examples/
+    └── tests/
 ```
 
 ## Category Routing
 
-| Topic | File |
-|-------|------|
+| Topic | Start With |
+|-------|------------|
 | Design or scaffold an OKE cluster, Terraform stack, or OCI Resource Manager stack | Start with `oci/oke/cluster-design.md`, then load `oci/oke/skills/oke-cluster-generator/SKILL.md` |
 | Troubleshoot OKE workloads, pods, services, DNS, add-ons, ingress, load balancers, image pulls, storage, Workload Identity, or cluster access | Start with `oci/oke/troubleshooting.md`, then load `oci/oke/skills/oke-troubleshooter/SKILL.md` |
 | Configure OKE managed node pools with Generic VNIC Attachment secondary VNIC profiles and Application Resources | Start with `oci/oke/gva-node-pools.md`, then load `oci/oke/skills/oke-gva-deployer/SKILL.md` |
 | Deploy or validate Multus NetworkAttachmentDefinitions and multi-interface pods on OKE | Start with `oci/oke/multus-multihome.md`, then load `oci/oke/skills/oke-multihome-deployer/SKILL.md` |
+| OCI Generative AI models, custom/imported models, endpoints, or private endpoints | `oci/enterprise-ai/SKILL.md` |
+| OCI Responses API agents, tools, memory, File Search, Code Interpreter, MCP, or SQL Search | `oci/enterprise-ai/SKILL.md` |
+| OCI Generative AI and OCI Generative AI Agents cost estimation | `oci/enterprise-ai/cost/cost-estimation.md` |
+| OCI Enterprise AI governance, IAM, API keys, OAuth, guardrails, or ZPR | `oci/enterprise-ai/governance/private-endpoints-and-governance.md` |
 
 ## Key Starting Points
 
 - `oci/oke/cluster-design.md`
 - `oci/oke/troubleshooting.md`
 - `oci/oke/gva-node-pools.md`
 - `oci/oke/multus-multihome.md`
+- `oci/enterprise-ai/SKILL.md`
+- `oci/enterprise-ai/models/enterprise-ai-models.md`
+- `oci/enterprise-ai/agent-workflows/responses-api-agents.md`
+- `oci/enterprise-ai/cost/cost-estimation.md`
+- `oci/enterprise-ai/governance/private-endpoints-and-governance.md`
 
 ## Operational Tools
 
@@ -67,10 +85,20 @@ The OKE operational skills include deterministic helper tools under `oci/oke/scr
 | Build a node pool with workload-specific secondary VNIC profiles | `oke/gva-node-pools.md` -> `oke/multus-multihome.md` if pods need multiple interfaces |
 | Validate Multus pod networking on GVA-enabled nodes | `oke/multus-multihome.md` -> `oke/troubleshooting.md` if symptoms remain |
 | Investigate OKE workload access to OCI APIs | `oke/troubleshooting.md` |
+| Build a governed enterprise assistant | `enterprise-ai/SKILL.md` -> `enterprise-ai/agent-workflows/agent-tools.md` -> `enterprise-ai/data/rag-and-search.md` -> `enterprise-ai/governance/private-endpoints-and-governance.md` |
+
+## Scope Boundaries
+
+- Keep OCI service, networking, IAM, agent hosting, and cost-estimation guidance in this domain.
+- Route Oracle Database-owned implementation details to `db/features/`.
+- Route APEX artifact generation to `apex/apexlang/`.
+- Prefer official Oracle documentation for OCI service limits, IAM verbs, endpoint formats, regions, and pricing inputs because these change frequently.
 
 ## Sources
 
 - https://docs.oracle.com/en-us/iaas/Content/ContEng/home.htm
 - https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengAttaching_Multiple_VNICs.htm
 - https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contenggrantingworkloadaccesstoresources.htm
 - https://github.com/oracle-terraform-modules/terraform-oci-oke
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/home.htm
diff --git a/oci/enterprise-ai/SKILL.md b/oci/enterprise-ai/SKILL.md
@@ -0,0 +1,86 @@
+---
+name: enterprise-ai
+description: Oracle Enterprise AI guidance for building, deploying, securing, estimating cost for, and integrating AI models, agents, RAG, Responses API workflows, custom or imported models, fine-tuning, model endpoints, private endpoints, vector stores, File Search, Code Interpreter, MCP tools, SQL Search, hosted agentic applications, and Oracle platform integrations. Use when the user asks for OCI Generative AI, Enterprise AI Models, Enterprise AI Agents, governed GenAI applications, agentic workflows, RAG on Oracle Cloud, OCI Generative AI pricing or cost estimator inputs, or a simplified path across OCI, Autonomous Database, APEX, and other Oracle services.
+---
+
+# OCI Enterprise AI Skills
+
+Use this OCI subdomain as the front door for Oracle Enterprise AI work. Start here when the user goal is about the AI outcome rather than a specific Oracle service name.
+
+## How to Use This Domain
+
+1. Start with the user journey table below.
+2. Read only the smallest topic file that matches the task.
+3. Route database-owned implementation details to `db/features/` instead of duplicating Select AI, vector search, or `DBMS_VECTOR` guidance.
+
+## Directory Structure
+
+```text
+oci/enterprise-ai/
+├── models/
+├── agent-workflows/
+├── governance/
+├── data/
+├── cost/
+├── integrations/
+└── agents/
+    └── openai.yaml
+```
+
+## User Journey Routing
+
+| User Goal | Start With |
+|-----------|------------|
+| Choose or invoke OCI-hosted models, embeddings, rerank, endpoints, or dedicated serving | `models/enterprise-ai-models.md` |
+| Import, fine-tune, host, or lifecycle-manage a custom model | `models/custom-and-imported-models.md` |
+| Build an API-first agent with OpenAI-compatible OCI APIs | `agent-workflows/responses-api-agents.md` |
+| Deploy a packaged agent runtime on OCI-managed infrastructure | `agent-workflows/hosted-applications.md` |
+| Choose the right tool pattern: File Search, Code Interpreter, Function Calling, MCP, or SQL Search | `agent-workflows/agent-tools.md` |
+| Ground answers in documents, vector stores, SQL, or Oracle Database vector search | `data/rag-and-search.md` |
+| Estimate OCI Generative AI or OCI Generative AI Agents cost drivers | `cost/cost-estimation.md` |
+| Secure model or agent access with IAM, private networking, OAuth, guardrails, or audit controls | `governance/private-endpoints-and-governance.md` |
+| Connect Enterprise AI to Autonomous Database, APEX, Oracle Integration, Fusion, or OCI AI Services | `integrations/oracle-platform-integrations.md` |
+
+## Key Starting Points
+
+- `oci/enterprise-ai/models/enterprise-ai-models.md`
+- `oci/enterprise-ai/models/custom-and-imported-models.md`
+- `oci/enterprise-ai/agent-workflows/responses-api-agents.md`
+- `oci/enterprise-ai/agent-workflows/hosted-applications.md`
+- `oci/enterprise-ai/agent-workflows/agent-tools.md`
+- `oci/enterprise-ai/data/rag-and-search.md`
+- `oci/enterprise-ai/cost/cost-estimation.md`
+- `oci/enterprise-ai/governance/private-endpoints-and-governance.md`
+
+## Common Multi-Step Flows
+
+| Task | Recommended Sequence |
+|------|----------------------|
+| Build a governed enterprise assistant | `responses-api-agents` -> `agent-tools` -> `rag-and-search` -> `cost-estimation` -> `private-endpoints-and-governance` |
+| Move from model experimentation to production serving | `enterprise-ai-models` -> `cost-estimation` -> `private-endpoints-and-governance` |
+| Bring a custom model into OCI serving | `custom-and-imported-models` -> `enterprise-ai-models` -> `cost-estimation` -> `private-endpoints-and-governance` |
+| Deploy a packaged agent runtime | `responses-api-agents` -> `hosted-applications` -> `cost-estimation` -> `private-endpoints-and-governance` |
+| Build RAG over files | `rag-and-search` -> `agent-tools` -> `cost-estimation` -> `responses-api-agents` |
+| Build RAG over Oracle Database | `rag-and-search` -> `db/features/vector-search.md` -> `db/features/dbms-vector.md` -> `db/features/select-ai.md` when in-database generation is needed |
+| Add AI to APEX or Autonomous Database apps | `oracle-platform-integrations` -> relevant `db/features/` or `apex/apexlang/` guidance |
+| Design production access controls | `private-endpoints-and-governance` -> `enterprise-ai-models` or `responses-api-agents` depending on workload |
+
+## Scope Boundaries
+
+- Keep cloud-side model, agent, tool, endpoint, hosting, and governance decisions in this domain.
+- Use `db/features/select-ai.md`, `db/features/vector-search.md`, `db/features/dbms-vector.md`, and `db/features/ai-profiles.md` for Oracle Database-owned AI implementation.
+- Use `apex/apexlang/` for APEX application artifact generation and APEX AI agent component templates.
+- Prefer official Oracle documentation for model availability, supported tools, IAM verbs, endpoint formats, and service limits because Enterprise AI services change frequently.
+
+## Sources
+
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/overview.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/home.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/models.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/fine-tune-models.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/imported-models.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/agents.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/governance.htm
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/oci-openai.htm
+- https://www.oracle.com/artificial-intelligence/enterprise-ai/cost-estimator/
+- https://docs.oracle.com/en-us/iaas/Content/generative-ai/calculate-cost.htm