KISS / over-engineering critique of the api-platform-architect plan. Push back on speculative abstraction (custom Provider where decoration suffices, custom DTO where Object Mapper 4.3 #[Map] is mechanical, subresource where flat URI works, custom Parameter Provider where IriConverterParameterProvider suffices, Voter…
OWASP-style risk review of the api-platform-architect plan. Threat model (trust boundary / actor / asset) per finding. Preserves ranked findings table VERBATIM with Risk / Trust boundary / Actor / Mitigation / Verdict columns. Default-deny doctrinal. Covers API Platform 4.3 specific risks: IDOR via IRI, mass…
Designs the technical plan for an API Platform 4.3 feature on Symfony 7.4+ in 9 mandatory sections + a literal 4-column test matrix. Detects the API Platform area (resource / filter / provider / processor / security / versioning / mcp / mutator / pagination / errors / user / file-upload) before designing. Read-only …
Implements the architect's plan in the repository (Dev stage). Reads .claude/last-api-plan.md first. Detects the API Platform area, dispatches the right gerard: skills (or : overrides), writes the code (resource + DTO/Object Mapper + provider/processor + filters + tests), iterates phpunit + phpstan until green, runs…
Designs Doctrine entity schemas, relationships, and migration paths for API Platform 4.3 + Symfony 7.4+ projects. Analyzes existing entities, proposes schema changes, and plans migration paths before any code lands. Always proposes — never edits. Use for entity design, relationship modeling, identifier strategy (UUID…
Review stage gatekeeper. Last line of defense before merge. Reads .claude/last-api-{plan,dev-report,test-report}.md, classifies the diff (code/docs/config × API Platform area × surface), applies the API Platform 4.3 + Symfony 7.4+ anti-pattern checklist (16 + 8 rules embedded), emits ===EVIDENCE=== block, caps…
Test stage of the pipeline. Reads the architect's test matrix from .claude/last-api-plan.md BEFORE looking at the code (anti-tautology doctrine). Validates AC × test mapping, kills Infection mutants on critical paths in-session (no "recommend follow-up" punt), enforces BDD scenario-based naming (PHPUnit 12 accepts…
Migrate an API Platform codebase from 3.x or 4.0-4.2 to 4.3 (filters, openapiContext, hydra prefix, ValidationException namespace, deprecated interfaces).