Operational discipline layer for AI-assisted software delivery: spec/ticket workflows, quality gates, and persistent engineering memory across Cursor, Claude Code, and VS Code.
Cursor rule
API design guidelines — REST principles, GraphQL patterns, versioning, pagination, error handling, documentation, security, caching, and testing. Applied when designing or reviewing API endpoints.
Cursor rule
Code review guidelines — scoring criteria, review structure, focus areas, and output format. Applied when reviewing code or PRs.
Cursor rule
Database design guidelines — relational normalisation, indexing, constraints, NoSQL patterns, query optimisation, migrations, security, and backup strategies. Applied when working with database schemas and queries.
Cursor rule
DevOps practices — CI/CD pipeline design, Docker containerisation, Kubernetes orchestration, Infrastructure as Code, monitoring, logging, and security. Applied when working with deployment and infrastructure files.
Cursor rule
Universal architecture and design principles — stack-agnostic. Applied when making structural decisions, reviewing design proposals, choosing patterns, or reasoning about system boundaries and evolution.
Cursor rule
Universal software engineering principles — stack-agnostic. Clean code, SOLID, clean architecture, error handling, testability, naming, and design quality. Applied whenever writing, reviewing, or reasoning about any code.
Cursor rule
Universal security principles — stack-agnostic. Applied when writing any code that handles input, authentication, authorisation, secrets, or sensitive data. Aligned with OWASP Top 10.
Cursor rule
OWASP AI Security & Privacy Guide – PR rules emphasizing data protection, governance, and safety.
Cursor rule
OWASP Top 10 for LLM Applications – actionable PR rules for AI features and agent tools.
Cursor rule
Performance optimisation guidelines — bundle optimisation, memory management, rendering, network, Electron-specific, and monitoring strategies. Applied when working on performance-sensitive code.
Cursor rule
Pull request templates, commit conventions, code review standards, and quality gates. Applied when creating PRs, writing commits, or reviewing code.
Cursor rule
Security guidelines — OWASP Top 10 mitigations, authentication, authorisation, encryption, input validation, and secure coding practices. Applied when writing or reviewing code that handles input, identity, secrets, or sensitive data.
Cursor rule
Testing strategies and quality assurance — testing pyramid, unit/integration/E2E testing, TDD/BDD, test automation, and quality metrics. Applied when writing or reviewing tests.
Cursor rule
API Design for .NET — ASP.NET Core patterns, MediatR, FluentValidation, and Web API best practices. Extends core/rules/api-design.mdc with .NET-specific guidance.
Cursor rule
Code convention analysis and enforcement — ESLint integration, naming conventions, type safety checks, and quality scoring with remediation steps. Applied when analysing code style and conventions.
Cursor rule
.NET-specific architecture, structural patterns, and IaC standards. Covers Clean Architecture in .NET, CQRS/MediatR, feature organisation, IaC with Bicep/Terraform, observability, and testing strategy for .NET solutions. Complements engineering-architecture.mdc.
Cursor rule
C#/.NET-specific clean code standards and idioms. Covers naming conventions, C# language patterns, async/await correctness, DI, and .NET tooling hygiene. Complements engineering-principles.mdc.
Cursor rule
.NET and C# development guidelines — naming conventions, async patterns, dependency injection, EF Core, error handling, configuration, security, testing, and performance. Applied when working with .NET/C# code.
Cursor rule
.NET-specific observability standards for ASP.NET Core APIs. Covers structured logging with ILogger, OpenTelemetry tracing, correlation IDs, health endpoints, ProblemDetails error responses, and middleware patterns. Complements dotnet-architecture.mdc.
Cursor rule
.NET-specific security standards for ASP.NET Core applications. Covers EF Core injection prevention, ASP.NET Core Identity, JWT validation, Key Vault integration, OWASP mitigations with .NET APIs, and HTTP security headers. Complements engineering-security.mdc.