agentic-harness

Review a pull request or pending changes. Performs a focused code review against the current branch's diff (or staged diff if invoked pre-commit), surfacing correctness bugs, missing tests, style violations, and unclear naming. Use when the user asks to "review this", "review the PR", "code review", or before commits/PRs.

Complete a security review of pending changes on the current branch. Focuses on injection, authn/authz, secrets, SSRF, deserialisation, insecure defaults, and supply-chain risk. Use when the user asks to "security review", "security audit", "check for vulns", or before raising a PR.

Pre-commit gate (fmt + clippy + test) then create a conventional commit with explicit file staging.

Create or update ARCHITECTURE.md with system components, data flows, and ADRs

Format Rust code with rustfmt and report what changed.

Full TDD loop — plan, branch, write code + tests, fmt, clippy, test, review, commit.

View the story board grouped by status, with optional filters

Security review → confirm with user → push branch → open PR with structured body.

Review a pull request or pending changes. Performs a focused code review against the current branch's diff (or staged diff if invoked pre-commit), surfacing correctness bugs, missing tests, style violations, and unclear naming. Use when the user asks to "review this", "review the PR", "code review", or before commits/PRs.

Complete a security review of pending changes on the current branch. Focuses on unsafe code, injection, secrets, memory safety at FFI boundaries, insecure deserialization, path traversal, and supply-chain risk. Use when the user asks to "security review", "security audit", "check for vulns", or before raising a PR.

Bootstrap the Rust dev environment — verify rustup, toolchain, rust-analyzer, cargo tools, env vars.

Create a user story in stories/ linked to architecture components, or update an existing story's status

Run cargo test with llvm-cov coverage, enforce gates, name uncovered lines on modified files.

Review a pull request or pending changes. Performs a focused code review against the current branch's diff (or staged diff if invoked pre-commit), surfacing correctness bugs, missing tests, style violations, and unclear naming. Use when the user asks to "review this", "review the PR", "code review", or before commits/PRs.

Complete a security review of pending changes on the current branch. Focuses on unsafe code, injection, secrets, memory safety at FFI boundaries, insecure deserialization, path traversal, and supply-chain risk. Use when the user asks to "security review", "security audit", "check for vulns", or before raising a PR.

Pre-commit gate (format + lint + test) then create a conventional commit with explicit file staging.

Format Swift code with swift-format and report what changed.

Full TDD loop — plan, branch, write code + tests, format, lint, test, review, commit.

Security review → confirm with user → push branch → open PR with structured body.

Review a pull request or pending changes. Performs a focused code review against the current branch's diff (or staged diff if invoked pre-commit), surfacing correctness bugs, missing tests, style violations, and unclear naming. Use when the user asks to "review this", "review the PR", "code review", or before commits/PRs.

Complete a security review of pending changes on the current branch. Focuses on unsafe code, injection, secrets, memory safety at FFI boundaries, insecure deserialization, path traversal, and supply-chain risk. Use when the user asks to "security review", "security audit", "check for vulns", or before raising a PR.

Bootstrap the Swift dev environment — verify swift, xcodegen, sourcekit-lsp, swift tools, env vars.

Run swift test, enforce gates, name failures.