| Principles | Simplicity first, clarity over cleverness, accept interfaces return structs | references/principles.md |
| Project Structure | cmd/, internal/, pkg/ layout; package naming and boundaries | references/project-structure.md |
| Source File Discipline | Single const/var blocks, exported-above ordering, comment density, zero bare TODO/FIXME | references/source-file-discipline.md |
| Error Handling | Wrap with %w, sentinel errors, errors.Is/As, custom error types | references/error-handling.md |
| Interfaces & Types | Small consumer-side interfaces, zero values, embedding, generics | references/interfaces-types.md |
| Concurrency | context propagation, goroutine lifecycle, channels, sync, errgroup | references/concurrency.md |
| API Design | Functional options, constructors, doc comments, exported surface | references/api-design.md |
| Config, Logging & CLI | viper/yaml config, log/slog, cobra subcommands, graceful shutdown | references/config-logging-cli.md |
| Testing | Table-driven tests, subtests, t.Parallel, golden files, mocks | references/testing.md |
| Security & Supply Chain | govulncheck as a CI gate, module proxy/checksum integrity, deserialization boundaries, dependency upgrade policy | references/security-supply-chain.md |
| Performance & Observability | Measure-first profiling (pprof, trace), PGO, structured logs, metrics, health probes | references/performance-observability.md |
| Build & Tooling | go.mod, modules, repo/version strategy, gofmt, go vet, golangci-lint, CI | references/build-tooling.md |
| Review | Quick-reference checklist covering all topics | references/review-checklist.md |