Cursor rule Cursor
Self-audit before claiming work is complete (no defer / follow-up / mock).
Cursor rule Cursor
Self-audit before claiming work is complete (no defer / follow-up / mock).
Cursor rule Cursor
Complex tasks force Plan Mode + Todo list (non-waivable).
Cursor rule Cursor
Configuration changes (yaml fields, env vars, configKeys, systemmetadata) conform to the 4-layer model in configuration-architecture.md.
Cursor rule Cursor
Visual values via CSS variables; no hex / rgb literals in style.
Cursor rule Cursor
All repository artifacts (docs, comments, UI strings, commits) are English.
Cursor rule Cursor
Go conventions for all Go code (modules, naming, errors, logging, metrics).
Cursor rule Cursor
All user-visible UI text uses t('namespace:section.key') from react-i18next.
Cursor rule Cursor
5-step IAM impact review for any admin endpoint / sidebar / route change.
Cursor rule Cursor
Thing-model IoT terminology is internal-only — user-facing surfaces use product terms (node / config sync / out of sync / target config / applied config).
Cursor rule Cursor
You are editing NETransparentProxyProvider territory. This code is in the host's outbound packet path. Any hang / panic / silently-claimed-but-not-relayed flow takes down the entire Mac's network — DNS, DHCP, mDNS, NTP, Apple Push, VPNs. Recovery requires launchctl unload + plist delete.
Cursor rule Cursor
Always use iam.BuildRequestNRNForAction — never hardcode resourceType strings in iamMW.
Cursor rule Cursor
Read 3 docs before changing code (architecture + feature + conventions).
Cursor rule Cursor
Canonical = OpenAI shape; each non-OpenAI adapter owns its bidirectional translation (8 binding rules from provider-adapter-architecture.md §3a).
Cursor rule Cursor
Redis is cache-only — no pub/sub (config invalidation goes via Hub WebSocket).
Cursor rule Cursor
1.0 GA — backward compatibility for shipped contracts; greenfield for internal-only code.
Cursor rule Cursor
Mandatory development workflow (Plan + Todo + SDD pipeline).
Cursor rule Cursor
Secrets are env-only — never in committed YAML; cross-service shared secrets tagged [MUST MATCH].
Cursor rule Cursor
Proactively offer a handoff document when a session is approaching context capacity or closing out a major program.
Cursor rule Cursor
Discipline for dispatching sub-agents (Agent tool) — what to delegate, what not to, and required prompt shape.
Cursor rule Cursor
Tests and prod- skills read config from tests/.env. only; fail-closed on hostname leakage.
Cursor rule Cursor
Compliance / agent normalizer must produce readable text; usage stats optional.
Cursor rule Cursor
Adding a usage/token field requires 5 stamp sites.
Cursor rule Cursor
Cursor rule "ui-shared-boundary" from AlphaBitCore/nexus-gateway, covering packages/ui-shared boundary (binding), allowed, forbidden, what ui-shared may contain and what ui-shared must not contain.
Cursor rule Cursor
Unit test coverage ≥95% per Go package (binding rule).