Cursor rule

1---
2description: Claude Rules - Security
3alwaysApply: true
4---
5 
6# Claude Rules - Security
7 
8## Overview
9 
10Security rules for Claude Code when working on go-crypto-wallet.
11**Security is paramount** - this project handles private keys and cryptocurrency transactions.
12 
13## Detailed Rules
14 
15Refer to @docs/guidelines/security.md for full security requirements.
16 
17## Quick Reference
18 
19### Critical Rules
20 
211. **NEVER** log private keys or sensitive information
222. **NEVER** commit secrets or credentials
233. Always validate inputs at system boundaries
244. Consider offline wallet implications for keygen/sign operations
255. Security-related changes must be reviewed
26 
27### Security-Critical Areas
28 
29- `internal/infrastructure/wallet/key/` - Key generation
30- `internal/domain/key/` - Key value objects
31- Any code handling private keys, seeds, or passwords
32 
33### Wallet Architecture
34 
35| Wallet | Environment | Security Level         |
36| ------ | ----------- | ---------------------- |
37| Watch  | Online      | Public keys only       |
38| Keygen | **Offline** | Generates private keys |
39| Sign   | **Offline** | Signs transactions     |
40 
41## Verification
42 
43Before committing security-related changes:
44 
45```bash
46make go-check-vuln
47make go-lint
48make go-test
49```
50