Windsurf rules

1# WINDSURF GUARDRAILS
2 
3These rules apply to ALL code generation, edits, and suggestions in this project.
4 
5## The Four Laws of Agent Safety
6 
71. **Read Before Editing** - Never modify code without reading it first. Always use the Read tool before any edit.
82. **Stay in Scope** - Only touch files explicitly authorized. No "while I'm here" fixes.
93. **Verify Before Committing** - Test and check all changes. Run relevant tests.
104. **Halt When Uncertain** - Ask for clarification instead of guessing.
11 
12## Pre-Operation Checklist (MANDATORY)
13 
14Before ANY file modification:
15- [ ] Read target file(s) completely
16- [ ] Verify operation is within authorized scope
17- [ ] Identify the rollback procedure
18- [ ] Check for test/production separation requirements
19 
20## Forbidden Actions (NEVER DO)
21 
221. Modifying code without reading it first
232. Mixing test and production environments
243. Force pushing to main/master
254. Committing secrets, credentials, or .env files
265. Running untested code in production
276. Modifying unread code
287. Working outside authorized scope
29 
30## Halt Conditions (STOP and Ask User)
31 
32- Attempting to modify code you haven't read
33- No rollback procedure exists or is unclear
34- Production impact is uncertain
35- User authorization is ambiguous
36- Test and production environments may mix
37- Uncertain about ANY aspect of the task
38- Operation has failed 3 times
39 
40## Three Strikes Rule
41 
42- **Strike 1**: Retry with adjusted approach
43- **Strike 2**: Try alternative approach
44- **Strike 3**: HALT and escalate to user
45 
46Never continue beyond 3 failures. Continuing wastes tokens, contaminates context, and rarely succeeds.
47 
48## Production-First Rule
49 
50Production code MUST be created before test code or infrastructure code.
51 
52Order:
531. Production implementation
542. Production validation (lint, type check, compile)
553. Tests for the production code
564. Infrastructure/deployment config
57 
58## Scope Rules
59 
60Only touch files within the authorized scope:
611. Explicit file list from user (highest authority)
622. Files identified in the task description
633. Direct dependencies of target files (with approval)
644. When uncertain: HALT and ask user
65 
66## Architecture Patterns (Go/MCP Server)
67 
68When working on `mcp-server/`:
69 
70### Clean Architecture Layers
71 
72```
73Domain → Application → Adapters → Interface
74```
75 
76- **Domain** (`internal/domain/`) — Interfaces, value objects. ZERO deps.
77- **Application** — Command/query handlers. Depends on Domain only.
78- **Adapters** (`internal/adapters/`) — DB, cache, external services.
79- **Interface** (`internal/mcp/`) — MCP handlers. Depends on Domain.
80 
81### Dependency Rule
82 
83Outer layers can depend on inner, never reverse. Domain has no imports.
84 
85### CQRS
86 
87- **Commands** (write): CreateRule, UpdateRule, LogViolation
88- **Queries** (read): Evaluate, List, Get — cache-friendly
89 
90Commands publish events → cache subscribes → invalidates on rule changes.
91 
92### Vertical Slices
93 
94Each guardrail type is self-contained:
95 
96```
97internal/guardrails/
98├── bash/           ← model + evaluator + handler
99├── git/            ← all git-related code
100└── fileedit/       ← all file edit code
101```
102 
103### SOLID
104 
105- **S**: One responsibility per type
106- **O**: Add new evaluator (interface), don't modify engine
107- **L**: Implement interface fully or not at all
108- **I**: Small interfaces (3 methods max)
109- **D**: Depend on abstraction (interface), not concrete
110 
111### Never Do (Architecture)
112 
113- Import database packages in domain types
114- Put concrete implementations in domain layer
115- Create cross-layer circular dependencies
116- Add infrastructure logic to handlers
117 
118## References
119 
120- `skills/shared-prompts/four-laws.md` - The Four Laws (canonical)
121- `skills/shared-prompts/halt-conditions.md` - Full halt conditions
122- `skills/shared-prompts/three-strikes.md` - Full strike tracking
123- `skills/shared-prompts/production-first.md` - Full production-first rules
124- `skills/shared-prompts/clean-architecture.md` - Clean Architecture patterns
125- `skills/shared-prompts/cqrs.md` - CQRS command/query separation
126- `docs/AGENT_GUARDRAILS.md` - Core safety protocols
127