java-spring

A set of optional coding rules for Spring Boot, a Java framework for building web applications and services. The rules apply only to projects that have adopted this workflow's Spring Boot profile.

In plain words
What is it for?
Use it when editing Spring Boot projects, especially when working with MyBatis database queries, Lombok annotations, shared modules, or sensitive configuration.
Why use it?
It helps keep new Java code consistent with an existing project's packages, build tools, error handling, security practices, and database conventions.

Cursor rule for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/kyungseo/ai-workflow-harness/java-spring
Clone the repo
git clone --depth 1 https://github.com/kyungseo/ai-workflow-harness

Made for: Cursor.

Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 411 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00411
Opus 5 $0.00000 $0.00205
Sonnet 5 $0.00000 $0.00082
Haiku 4.5 $0.00000 $0.00041

Measured 3d ago against content hash 4013ff651b4c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

java-spring scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/java-spring.mdc · 44 lines

What it actually says

Optional Spring Boot Example Rules

These rules are not part of the generic AI Workflow Harness core. They are kept as an optional example/profile surface for projects that adopt the harness with Spring Boot backend code.

MUST:

  • Follow the Java and Spring conventions already present in the adopted project.
  • Keep package names aligned with the adopted project's namespace.
  • Use the adopted project's declared build tool and verification commands.
  • Use MyBatis #{} parameters. Use ${} only with whitelist validation and an explanatory comment.
  • Use Lombok intentionally: prefer @Getter, @Builder, @RequiredArgsConstructor, and @Slf4j; do not use @Data.
  • Keep annotation processor order consistent with the adopted project.
  • Keep shared exception and response handling in the adopted project's established shared module.

NEVER:

  • Add service-specific domain logic to common-core.
  • Add default secret values for JWT_SECRET, DB_PASSWORD, or similar sensitive settings.
  • Log full tokens, passwords, or Authorization header values.

Comments

MUST:

  • Add class-level Javadoc only for: architecture boundaries, security-sensitive logic, complex state. Skip for DTOs, mappers, and standard CRUD controllers.
  • Use // Korean reason — English technical term for inline comments. Explain WHY, not WHAT.
  • Let @Operation, @Schema, and @DisplayName serve as documentation in their contexts.

NEVER:

  • Add comments that repeat what the code already expresses.
  • Add file headers (no-header policy; LICENSE file covers the project).

Full reference: docs/HARNESS-MAINTAINER-GUIDE.md

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 44 lines · 0 tokens per session scan A 4013ff651b4c

Subscribe to this mod's changes

java-spring is a cursor rule published in the GitHub repository kyungseo/ai-workflow-harness (13 stars, last pushed 1mo ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 411 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other cursor rules, from other repositories

language-agnostic-patterns

Language-agnostic programming patterns: SOLID, design patterns, clean code, and architecture. Load when refactoring, designing abstractions, or reviewing structure — not for everyday syntax.

madebyaris/advance-minimax-m3-cursor-rules · 37 tokens

cursor-tools-mastery

Cursor 3.7 runtime guide: choose the right tool, canvases, Design Mode, /worktree, /best-of-n, Await, and parallel execution where safe.

madebyaris/advance-minimax-m3-cursor-rules · 36 tokens

fable5-coding-craft

Fable 5 coding craft: locate-before-write, root-cause method, simplicity taste, error-handling philosophy, test integrity, refactoring discipline, and counters to common LLM coding failure modes. Load when writing, refactoring, debugging, or reviewing non-trivial code in any language.

madebyaris/advance-minimax-m3-cursor-rules · 60 tokens

cursor-agent-orchestration

Cursor 3.7 orchestration guide: when to plan, when to delegate, nested subagents, multi-environment handoffs, /best-of-n, and Await for long-running branches.

madebyaris/advance-minimax-m3-cursor-rules · 39 tokens

fable5-reasoning

Fable 5 reasoning protocols: task interpretation, risk-first decomposition, approach selection, interleaved thinking, hypothesis ledgers, premortems, calibration, and the stuck-strategy ladder. Load for complex, ambiguous, or long-horizon tasks, for debugging strategy, or whenever progress stalls.

madebyaris/advance-minimax-m3-cursor-rules · 60 tokens

cursor-mcp-optimization

Cursor 3.7 MCP optimization: browser Design Mode, canvases, Figma, Cloudflare tools, MCP Apps structured content, and direct action patterns.

madebyaris/advance-minimax-m3-cursor-rules · 32 tokens