Ground truth for the NXTG-Forge platform — the real forge CLI subcommands, the /forge:* slash commands, the .forge/state.json + events.jsonl model, both MCP servers (Rust orchestrator + Node governance), the agent roster, and the security hooks. Use when…
Quality-assurance knowledge for test STRATEGY, coverage analysis, bug detection, and quality gates — the reference the qa-sentinel agent reasons from. Use when designing a test plan, deciding unit vs integration vs E2E, judging whether coverage is real or…
Clean Architecture, Domain-Driven Design, and backend system-design guidance: organizing a codebase into layers with the right dependency direction, choosing structural design patterns (Repository, Strategy, Observer, Command, DI), applying DDD tactical…
Authoritative reference for how Claude Code itself works AND how to build for it — CLAUDE.md memory, custom slash commands, subagents, skills, hooks, MCP servers, settings precedence, permissions, plan mode, CLI/headless/CI, worktrees, and multi-platform…
Cross-language coding conventions — naming, type safety, error handling, async, imports, SQL formatting, git commit format, complexity/size limits, security, and a pre-PR review checklist for Python, TypeScript/JavaScript, Rust, and Go. Use when writing or…
OWASP vulnerability detection + remediation for security code review, PLUS the Forge plugin's own security guards (why a "SECURITY BLOCK" / exit-2 fired and the correct fix). Use when reviewing or hardening authentication, authorization, input validation,…
How to WRITE real, maintainable tests in any stack — assertions that fail when the code is broken, the test pyramid and AAA structure, behavior-over-implementation, mocking discipline, fixtures, coverage that means something, and the ship gates…
Backend implementation playbook — API endpoints, database models/migrations, auth, query optimization, and the framework-specific traps that break servers in production. Use when implementing or reviewing server-side code: FastAPI / Django / Flask / Express /…