Cursor rule Cursor
Adversarial product review + less-is-more — challenge every proposed feature, knob, surface, menu item before building.
Enterprise AI traffic gateway — unified compliance, routing across 20+ LLM providers, semantic cache, quotas, and audit. SDK / network / OS-layer intercept.
Cursor rule Cursor
Adversarial product review + less-is-more — challenge every proposed feature, knob, surface, menu item before building.
Cursor rule Cursor
Agent runtime: paths abstraction, traffic-upload level, audit empty-string stamping.
Cursor rule Cursor
Agent UI uses "traffic event" never "AI call"; agent has NO quota concept.
Cursor rule Cursor
AI Gateway / trafficevent changes require an ai-gateway smoke run before "done".
Cursor rule Cursor
Read the listed architecture doc BEFORE editing any subsystem.
Cursor rule Cursor
Quick index of project binding rules (canonical text in CLAUDE.md).
Cursor rule Cursor
Binding — code changes must update matching docs (architecture / feature / API / runbook / SDD) in the same diff.
Cursor rule Cursor
Self-audit before claiming work is complete (no defer / follow-up / mock).
Cursor rule Cursor
Complex tasks force Plan Mode + Todo list (non-waivable).
Cursor rule Cursor
Configuration changes (yaml fields, env vars, configKeys, systemmetadata) conform to the 4-layer model in configuration-architecture.md.
Cursor rule Cursor
Visual values via CSS variables; no hex / rgb literals in style.
Cursor rule Cursor
All repository artifacts (docs, comments, UI strings, commits) are English.
Cursor rule Cursor
Go conventions for all Go code (modules, naming, errors, logging, metrics).
Cursor rule Cursor
All user-visible UI text uses t('namespace:section.key') from react-i18next.
Cursor rule Cursor
5-step IAM impact review for any admin endpoint / sidebar / route change.
Cursor rule Cursor
Thing-model IoT terminology is internal-only — user-facing surfaces use product terms (node / config sync / out of sync / target config / applied config).
Cursor rule Cursor
You are editing NETransparentProxyProvider territory. This code is in the host's outbound packet path. Any hang / panic / silently-claimed-but-not-relayed flow takes down the entire Mac's network — DNS, DHCP, mDNS, NTP, Apple Push, VPNs. Recovery requires launchctl unload + plist delete.
Cursor rule Cursor
Always use iam.BuildRequestNRNForAction — never hardcode resourceType strings in iamMW.
Cursor rule Cursor
Read 3 docs before changing code (architecture + feature + conventions).
Cursor rule Cursor
Canonical = OpenAI shape; each non-OpenAI adapter owns its bidirectional translation (8 binding rules from provider-adapter-architecture.md §3a).
Cursor rule Cursor
Redis is cache-only — no pub/sub (config invalidation goes via Hub WebSocket).
Cursor rule Cursor
1.0 GA — backward compatibility for shipped contracts; greenfield for internal-only code.
Cursor rule Cursor
Mandatory development workflow (Plan + Todo + SDD pipeline).
Cursor rule Cursor
Secrets are env-only — never in committed YAML; cross-service shared secrets tagged [MUST MATCH].