granit-dotnet

Framework architect: audit Granit .NET modules against framework conventions, architecture rules, and CLAUDE.md standards. Checks module anatomy, DDD, naming, OpenAPI, persistence, validation, events, metrics, localization, documentation, and cross-cutting concerns. Invoke to verify convention compliance before merge or during tech-debt sprints.

Granit integration auditor: verify that a CONSUMING application (granit-showcase-dotnet, granit-microservice-template, or any host built on the Granit NuGet packages) wires the framework correctly. Builds a package→wiring matrix — every referenced Granit.* package must have its matching service registration, endpoints map, EF Core companion + migration, and provider hookup — then checks the host bootstrap, middleware order, persistence, auth, config, and localization. Invoke before shipping a host, after a framework bump, or when an endpoint/table silently goes missing.

Performance architect: audit Granit .NET modules for scalability bottlenecks and propose high-impact optimizations. Static analysis (EF Core query patterns, allocations/GC, async, caching, HTTP/serialization, messaging, startup/runtime, horizontal scaling) plus live profiling (dotnet-trace/counters/dump) and BenchmarkDotNet guidance. Multi-provider aware: PostgreSQL (primary), SQL Server, SQLite. Invoke before a load test, during a scaling sprint, or when an endpoint/job is slow.

Principal Application Security Architect: exhaustive security audit of the Granit framework. Covers IAM (BFF, DPoP, OIDC), AI/MCP security, data protection, multi-tenancy isolation, infrastructure resilience, and supply chain. Produces STRIDE threat models, CVSS-scored findings, FAPI/ISO 27001/GDPR gap analysis, and a prioritized remediation roadmap.

QA/DevSecOps engineer: full project quality audit or targeted MR review. Analyzes format, tests, local coverage (ReportGenerator), then SonarQube (quality gate, issues, hotspots, coverage). Detects regressions on modified files. Also generates UAT checklists from endpoint definitions. Invoke before a merge or to reduce technical debt.

GitHub operations: create, edit, link, list issues and manage Epic > Feature > Story hierarchy. Invoke before any GitHub operation.

DocuMaster: generate world-class technical documentation for Granit framework modules. Adapts to audience (developer, architect, integrator). Produces clear, engaging Markdown with diagrams, code samples, and callouts. Use when documenting a module, writing a guide, or creating an ADR.