Run any Skill in Manus with one click

architecture-guardrails

Stars0

Forks0

UpdatedJune 27, 2026 at 06:16

The non-negotiable architecture rules Hermes enforces when assigning and reviewing work — Laravel layering, tenancy, auth, and the human-merge gate.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

chiruu12

chiruu12/forge2-chiru

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

SKILL.md

readonly

name	architecture-guardrails
description	The non-negotiable architecture rules Hermes enforces when assigning and reviewing work — Laravel layering, tenancy, auth, and the human-merge gate.

Architecture Guardrails (enforce on every issue)

Layering (Laravel)

routes/api.php → Controller (Api/) → Policy (authorization) → Model. Validation lives in FormRequests. Shape responses with JsonResource. No business logic in routes.

Tenancy (security-gated)

organization_id on every tenant model; a global scope auto-filters by the auth user's org.
Tenant derived from the auth session ONLY. Reject/ignore any client-supplied org id.
Cross-org access returns 404 (not 403 — don't leak existence).

Auth

Sanctum tokens. Roles admin|agent|customer enforced via policies + middleware.

Process

Agents are commit authors; the HUMAN merges. No bot auto-merge.
One issue = one PR = incremental commits (no single giant commit).
All model calls go through EastRouter.

More from this repository

same repository

decompose-to-issues

chiruu12/forge2-chiru

Turn a feature or sprint goal into an ordered backlog of small, testable issues with dependencies. Hermes uses this to write sprints/sprint-0N.md.

2026-06-270

sprint-issue

chiruu12/forge2-chiru

Hermes's format for handing ONE scoped, testable issue to OpenClaw in

2026-06-270

ci-to-slack

chiruu12/forge2-chiru

Post GitHub Actions CI results to the

2026-06-270

domain-model

chiruu12/forge2-chiru

Define PulseDesk's domain entities and relationships before assigning model work, so the data model stays coherent. Source of truth is ARCHITECTURE.md.

2026-06-270

eloquent-model

chiruu12/forge2-chiru

Recipe for a new Eloquent model in PulseDesk — model + migration + factory + seeder + tenant trait. Use when introducing a domain entity.

2026-06-270

git-flow

chiruu12/forge2-chiru

Git discipline for the agent loop — branch per issue, small incremental commits, open a PR, never merge. Keeps the timeline genuine and reviewable.

2026-06-270

name	architecture-guardrails
description	The non-negotiable architecture rules Hermes enforces when assigning and reviewing work — Laravel layering, tenancy, auth, and the human-merge gate.

Architecture Guardrails (enforce on every issue)

Layering (Laravel)

routes/api.php → Controller (Api/) → Policy (authorization) → Model. Validation lives in FormRequests. Shape responses with JsonResource. No business logic in routes.

Tenancy (security-gated)

organization_id on every tenant model; a global scope auto-filters by the auth user's org.
Tenant derived from the auth session ONLY. Reject/ignore any client-supplied org id.
Cross-org access returns 404 (not 403 — don't leak existence).

Auth

Sanctum tokens. Roles admin|agent|customer enforced via policies + middleware.

Process

Agents are commit authors; the HUMAN merges. No bot auto-merge.
One issue = one PR = incremental commits (no single giant commit).
All model calls go through EastRouter.