| User wants to build or change something | brainstorming first |
| You have a spec and need a plan | writing-plans |
| You have a plan to execute | executing-plans or subagent-driven-development |
| Any bug, error, crash, or unexpected behavior | systematic-debugging |
| User pastes a stack trace, log, or error output | error-reading |
| User asks to review code quality or DevOps readiness | code-audit |
| User wants to optimize code, fix memory leaks, loops | code-optimization |
| Working with Terraform, Ansible, or Pulumi | infrastructure-provisioning |
| Working with Docker | container-operations |
| Working with Kubernetes or Helm | kubernetes |
| Working with CI/CD pipelines | ci-cd-pipeline |
| Working with AWS, GCP, or Azure | cloud-operations |
| Working with Prometheus, Grafana, or logs | monitoring-and-alerting |
| Working with secrets, Vault, or SOPS | secrets-management |
| Working with IPs, ports, or firewall rules | network-operations |
| Working with Nginx, Traefik, or HAProxy | reverse-proxy |
| Working with DNS records or domain routing | dns-and-domains |
| Working with load balancers | load-balancing |
| Before declaring any work complete | verification-before-completion |
| Starting work that needs isolation | using-git-worktrees |
| Implementation complete, deciding how to merge/PR | finishing-a-development-branch |
| Receiving code review feedback | receiving-code-review |
| Need to request a code review | requesting-code-review |
| 2+ independent problems to investigate in parallel | dispatching-parallel-agents |
| Creating or editing a skill | writing-skills |
| Writing tests, or any code where tests should drive implementation | test-driven-development |