Skill Claude CodeCodex
Event-driven architecture inside a Rails app or across services — domain events, transactional outbox, eventual consistency, idempotent handlers, the difference between domain events and integration events, event sourcing (and when NOT to do it), the railseventstore gem. Use when the user mentions domain events, event…
Skill Claude CodeCodex
Distributed tracing for Rails — OpenTelemetry SDK + auto-instrumentation, trace + span model, context propagation across HTTP / Sidekiq / Kafka, baggage, sampling strategies, exporters (OTLP to Tempo / Jaeger / Honeycomb / Datadog / Lightstep), correlating traces with logs via traceid, when tracing matters more than…
Skill Claude CodeCodex
Production-grade observability for Rails — RED + USE metrics, SLO / SLI / error budgets, multi-window multi-burn-rate alerting (Google SRE workbook), exemplars linking metrics to traces, log levels and sampling, alerting hygiene (paging only on customer impact), runbooks, on-call rotations. Use when the user mentions…
Skill Claude CodeCodex
HIPAA compliance for Rails apps handling PHI (Protected Health Information) — Active Record Encryption for PHI at rest, audit logs that survive deletion, access controls (RBAC), Business Associate Agreements (BAAs) with cloud providers, breach detection, the 18 HIPAA identifiers, when NOT to handle PHI in your app.…
Skill Claude CodeCodex
PCI-DSS compliance for Rails apps handling card data — the "don't touch PAN" rule, tokenization with Stripe / Braintree / Adyen, why hosted fields + Stripe Elements minimize scope to SAQ-A, the 12 PCI requirements, what counts as "cardholder data," logging hygiene to keep cards out of logs. Use when the user mentions…
Skill Claude CodeCodex
GDPR compliance for Rails apps — DSAR (Data Subject Access Request) export, right to erasure, lawful basis, consent management, data minimisation, processor vs controller responsibilities, DPAs with vendors, breach notification within 72 hours, cookie consent (and when you don't need a banner), pseudonymisation vs…
Skill Claude CodeCodex
SOC 2 readiness for Rails apps — the 5 Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy), audit log requirements, access reviews, change management, vendor management, the role of compliance vendors (Drata / Vanta / Secureframe), Type I vs Type II reports, SOC 2 vs ISO…
Skill Claude CodeCodex
Syncing Rails Postgres to a data warehouse (Snowflake, BigQuery, Redshift) — Fivetran / Airbyte / Hightouch / Stitch / Census / CDC via Debezium, when ELT beats ETL, dbt for transformation, reverse-ETL to push warehouse data back into ops tools, schemas for analytics vs OLTP, when to add columns vs separate tables…
Skill Claude CodeCodex
GitHub Actions CI/CD for Rails 8 — RSpec, Brakeman, RuboCop, bundle audit, system specs with Cuprite, parallel matrix tests, caching gems and nodemodules, Kamal deploy job gated on green main, OIDC + AWS / GCP without long-lived keys, branch protection rules. Use when the user mentions GitHub Actions, GHA, CI…
Skill Claude CodeCodex
GitLab CI/CD for Rails 8 — .gitlab-ci.yml structure, RSpec + lint + security parallel stages, cache strategy (bundler, yarn, assets), services keyword for Postgres + Redis, Auto DevOps caveats, deploy via Kamal or AutoDevOps, OIDC for cloud credentials, environments + protected branches. Use when the user mentions…
Skill Claude CodeCodex
Jenkins for Rails — Jenkinsfile (declarative pipeline) for RSpec, lint, security, deploy. Agents, credentials, parallel stages, the Blue Ocean UI. Counter-position. If you're greenfield in 2026, prefer GitHub Actions or GitLab CI; Jenkins is for enterprise / on-prem requirements where managed CI isn't allowed. Use…
Skill Claude CodeCodex
Code-quality tooling for Rails — RuboCop with rubocop-rails / rubocop-performance / rubocop-rspec / rubocop-threadsafety extensions, the rubocop-rails-omakase preset (DHH's defaults, shipped with Rails 8), SimpleCov coverage with branch coverage + CI threshold, erblint for ERB templates, RBS / Sorbet for optional type…