القائمة
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
Use when adding, removing, enabling/disabling, or reconfiguring a backend in the router's servers.yaml registry (URLs, namespaces, entrypoints, server_name/transform overrides).
| name | ci-failure-triage |
| description | Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors). |
Follow AGENTS.md first.
make ci-local and read the log to see which sub-target failed. It typically chains format-check lint-ci lint-loc typecheck test-fast test-integration, but repos vary (e.g. clinvar-link has no lint-loc) — trust the actual recipe/CI log, not this list.format-check) — run make format, re-check.lint-ci) — run make lint-fix; fix remaining findings by hand rather than blanket-ignoring.lint-loc, the per-file line budget in scripts/check_file_size.py, where present) — split the growing module along its seams; edit .loc-allowlist only with a tracked decomposition reason.typecheck) — run make typecheck; fix the type, don't add broad ignore_errors / # type: ignore.test-fast / test-integration) — fix code or test per the assertion; parser/data changes need fixture-backed coverage under tests/.make ci-local until green before handoff..loc-allowlist to dodge a needed split.ci-local.