garethhughes.dev

Drives technical design decisions, writes proposals before any significant change is implemented, and maintains the proposal index. Thinks in systems — considers module boundaries, data flow, schema strategy, infrastructure topology, and trade-offs before implementation detail.

Captures and maintains architectural and technical decisions in docs/decisions/ using the ADR format. Keeps the decision index up to date. Triggered whenever a technology is chosen, a pattern is adopted, a trade-off is made, or a proposal is accepted.

Writes production-quality application code and Infrastructure-as-Code using TDD (red-green-refactor). Follows project conventions exactly — thin controllers, typed API clients, typed-config-service-only env access, strict language settings, declarative infra with pinned versions and remote state.

Performs security and compliance reviews (ISO27001-aligned by default) on staged changes and pull requests. Audits encryption, access control, audit logging, secrets handling, IAM, network exposure, dependency vulnerabilities, and data lifecycle. Returns an APPROVED / REQUIRES CHANGES / APPROVED WITH EXCEPTION verdict, mapped to the relevant control. Read-only — never edits code.

Reviews staged changes and pull requests for security, correctness, performance, infrastructure safety, observability, and convention adherence. Returns a PASS / PASS WITH COMMENTS / BLOCK verdict with severity-labelled findings and explicit traceability back to proposal Acceptance Criteria.

Interactively selects an existing blog post, applies user-directed edits, and stamps the post with a last-modified date at the bottom of the page.

Loads a blog post draft from Squirrel Notes, proofreads and improves it, converts it to the project's markdown post format with the current UTC time as the publish date, writes the file, then marks the note as published.

Interactively configures OpenCode plugins for a project. Presents a menu of available plugins, collects any required credentials, and writes the chosen config into opencode.json. Invoked automatically by project-bootstrap and project-onboard.