Skill Claude CodeCodex
Use when adding or changing a REST endpoint, an error response, pagination, idempotency, or rate limiting in packages/api, or when editing docs/openapi.yaml. Triggers on "endpoint", "REST", "OpenAPI", "problem+json", "RFC 9457", "cursor pagination", "Idempotency-Key", "rate limit", "status code", "429", "403 vs 404".
Skill Claude CodeCodex
Use when adding or changing an audit event, the audit log schema, SIEM export, or anything writing to auditevents. Also use when adding a code path that grants or denies access, since denials are events. Triggers on "audit", "audit log", "auditevents", "SIEM", "journal", "access log", "who read what".
Skill Claude CodeCodex
Use when changing anything under packages/core/authz, the grants table, the effective-principals cache, or the vector pre-filter — the permission resolver, deny handling, scope inheritance, ACL tags, or the T1-T25 suite. Also use when a change elsewhere could affect who can see what, such as touching search filters…
Skill Claude CodeCodex
Use when adding, renaming, or removing an environment variable, changing startup configuration validation, adding a Compose profile or service, or adding a Prometheus metric. Triggers on "environment variable", "NACRE", "config", "docker compose", "profile", "metrics", "healthcheck", "readiness".
Skill Claude CodeCodex
Use when changing the PostgreSQL schema, adding a migration under packages/core/migrations, or touching row-level security, the grants table, tombstones, or the audit table. Triggers on "migration", "schema", "DDL", "RLS", "row level security", "ALTER TABLE", "new column", "index" in a database context.
Skill Claude CodeCodex
Use when adding or changing an MCP tool, the MCP transport, or MCP authorization in packages/mcp — tool schemas, tools/list, the Streamable HTTP endpoint, STDIO mode, OAuth, CIMD, EMA, or ID-JAG. Triggers on "MCP tool", "tools/list", "Streamable HTTP", "Mcp-Method", "CIMD", "DCR", "EMA", "ID-JAG", "resource server"…
Skill Claude CodeCodex
Use when deciding whether a feature belongs in this open-source repository or in the private nacre-enterprise one, when adding an extension point, or when a change touches multi-tenancy, SSO, SCIM, document-level deny rules, EMA/ID-JAG, the audit log, the global admin, or quotas. Triggers on "enterprise"…
Instructions file
Claude Code instructions for nacre-work/nacre, covering nacre — core, the six invariants, never, in any change, commands and layout.