projectbluefin

Cluster management tools for the lab: kubectl, k3s, zot, external-secrets, and K8sGPT. Use when managing cluster state, installing cluster add-ons, configuring the OCI registry, or running cluster analysis through MCP.

ArgoCD GitOps model for the lab: what is and isn't managed, sync rules, bootstrap vs managed distinction, and common sync failures. Use when working with ArgoCD Applications, adding new templates to git, or troubleshooting sync issues.

Authoring, linting, and submitting Argo Workflows and WorkflowTemplates in the lab. Use when writing or editing any .yaml file under argo/workflow-templates/, argo/bootstrap/, or argo/*.yaml, or when debugging a failed workflow run.

KubeVirt ephemeral VM lifecycle in the lab: containerDisk build, VM provisioning, SSH wait, teardown. Use when writing provision-vm templates, debugging VM boot failures, or working with KubeVirt manifests.

Writing, debugging, and running behave/qecore/dogtail GNOME GUI tests. All Bluefin image tests live in projectbluefin/testsuite. Use when adding test scenarios, fixing AT-SPI failures, debugging Shell.Eval interactions, or working with the qecore-headless…

Building or revising Astro dashboard detail pages backed by repo-tracked JSON and browser-side charts. Use when adding docs routes like /tests, /images, or /applications that must render real evidence, explicit unavailable states, GitHub Pages-safe static…

GitHub Actions workflow authoring and debugging for lab dashboards and automation. Use when changing .github/workflows/, troubleshooting stale Pages data, or wiring CI jobs that need private-cluster data.

KubeStellar multi-cluster control plane on the lab: WDS/ITS/WEC model, install/upgrade via ArgoCD, WEC registration, BindingPolicy authoring, smoke testing, and failure modes. Use when working with KubeStellar, KubeFlex control planes, OCM ManagedClusters, or…

Task → skill router and hard-rule set for projectbluefin/testsuite. Load this first in every session, then load only the sub-skills your task needs.

How to write behave scenarios and step definitions for the testsuite repo. Load when editing .feature files or steps.py.

How to call and debug the reusable testsuite e2e workflow. Load when changing e2e.yml, action inputs, or consumer-repo wiring.

Authoritative coverage matrix and @future gap list. Load during planning, coverage reviews, or when adding a new suite.

How to write GNOME Shell / AT-SPI / dogtail tests for the testsuite repo. Load when editing GNOME interaction steps.

Operational gotchas and failure signatures for the testsuite lab/CI setup. Load when debugging e2e failures, GDM, oomd, Argo, or runner issues.

How to contribute changes to the testsuite repo. Load when preparing a PR or reviewing contribution mechanics.

When to stop and ask a human for input. Use when a PR is ready to merge, when changing CI interfaces or secrets, when a change may break consumers, or before any upstream write.

Containerfile multi-stage build, image digest pinning in FROM lines, Justfile local build recipes, and build script conventions. Use when changing Containerfile, Justfile, or build/*.sh.

Fork bootstrap playbook: rename (locations: `finpilot-templates`), enable Actions, RENOVATE_TOKEN, first green build, README "What Makes this Raptor Different" section, and branch protection. Use when creating a new fork from this template.

PR gates and pre-commit checklist by change type. Covers validation commands for Containerfile, build scripts, Brewfiles, Flatpaks, ujust, workflows, and README changes. Use before opening or reviewing a PR.

Task router for the finpilot repo: which skill covers what, and the overview → domain → PR-checklist sequence. Use when unsure which skill fits, or to add a skill to the routing table.

GitHub Actions workflows, projectbluefin/actions composite actions, Renovate configuration, and PR validation for finpilot. Use when changing .github/workflows/, .github/renovate.json, or .hadolint.yaml.

Maintenance of an active finpilot fork: Renovate digest PRs, README raptor section updates, signing verification, local test loops, and maintenance schedules. Use when maintaining a fork after onboarding.

Template identity rules: the seven rename locations, image identity ARGs, keyless signing, and AGENTS.md update rules. Use when renaming a fork, verifying or explaining signing, or updating AGENTS.md and setup docs.

Consolidated symptom-cause-fix table for finpilot. Covers local build failures, CI failures, runtime issues, Renovate problems, COPR persistence, and ujust command not found. Use when something is broken and you need a quick diagnosis.

Manage OS-managed Homebrew packages. Use when adding/removing default brew packages, moving tools between RPM and brew, or auditing image-vs-brew placement.

OEM hardware first-boot setup hooks in projectbluefin/common. Use when adding hardware-specific setup, understanding hook directories and versioning contract, or applying shellcheck requirements.

CI policy and tooling — SHA pinning, pre-commit guards, Renovate digest tracking, and workflow config. Use when editing .github/workflows/ files.

bonedigger + kubestellar-bot lifecycle automation. Use when working on ujust report, issue lifecycle, priority escalation, or how fixes ship back to images.

Incident log of CI gotchas across projectbluefin repos. Use when debugging silent CI failures, startup_failure, or workflow skip behavior.

Containerfile build structure and local testing. Use when modifying the Containerfile, adding binaries, updating wallpaper sources, or using just overlay.

Pre/post-merge E2E CI for common. Use when debugging E2E failures, understanding the PR gate flow, or diagnosing masked brew-setup issues.

Self-improving factory loop for projectbluefin. Use when identifying automation gaps, proposing workflows, or auditing ACMM maturity.

Explains workflow triggers, path filters, reusable workflow calls, and how to read failing runs in this repository. Use when a workflow failed, did not start, or ran the wrong checks.

States the package-source trust boundaries, signing requirements, and secure-boot constraints for this image. Use when adding a package source or changing verification or trust behavior.

Covers the release and testing-to-main promotion workflows, digest and tag verification, and signing gates. Use when running a release or diagnosing a failed promotion.

Explains issue assignment, project state, label semantics, and the branch- to-pull-request path used in this repository. Use when picking up, updating, or closing an issue.

Describes the Renovate configuration, automerge workflow, and authentication model for automated updates. Use when changing dependency automation config or triaging an automated update pull request.

Covers Containerfile stages, build_files layering, local image builds, and which validation gate to run for a given change. Use when editing image inputs or deciding whether a full build is required.

Covers dispatching artifact workflows, confirming the source image digest, and promoting a verified artifact. Use when building or promoting an ISO or other installation artifact derived from a published image.

Provides the decision tree for where a package belongs and the files that declare each package source. Use when adding, removing, or relocating a package input.

Use when changing the `/wolves/` teaser hero, Trailer 1 player, the delivered-render embed, poster, ended URL card, or trailer fidelity tests.

Use at session start, before commits, before pushes, at factory gates, and when a task crosses local, GitHub, Cloudflare, or production boundaries.

Use when configuring Cloudflare DNS, Workers, Pages, custom domains, redirects, or Wrangler authentication.

Use when editing production text, links, translations, data, or approved assets without changing design.

Use when editing lore, fiction, quotes, transcripts, attributions, or other authored prose.

Use when adding, updating, or regenerating Wolves guardian character cards, their share pages, or the lobby character gallery manifest.

Use when creating, restructuring, reviewing, or retiring an agent skill.

Use before marking any task done, to decide what durable learning to write back and which skill file owns it.

Diagnose and change continuous-integration, promotion, and publication workflows. Use when a workflow does not trigger, an artifact is not published, or CI logic changes.

Verify and promote published artifacts safely. Use when checking digests, signatures, stable releases, rollback, or emergency promotion.

Local builds, validation, variants, and VM artifacts for projectbluefin/bluefin-lts. Use when running just recipes, understanding the LTS/NVIDIA variant map, or debugging a build failure.

CentOS Stream 10 vs Fedora package and repo differences for bluefin-lts. Use when adding packages, enabling repos, choosing akmods tags, or resolving COPR chroot names.

Add, remove, and build desktop shell extensions. Use when changing extension sources, submodules, schemas, or build integration.

Change hardware hooks and device integration safely. Use when modifying setup hooks, services, or device-specific image behavior.

Add, remove, or update packages in the image. Use when changing package manifests, repositories, or package-related build scripts.

Add, refactor, validate, or retire an agent skill. Use when implementation reveals a durable rule, when a skill is too large or stale, or when the skill catalog changes.

BuildStream elements, junctions, patches, dependency graphs, and build failures in Dakota. Use when editing elements, project.conf, junctions, or patches.

Diagnose or change Dakota validation, build, publish, e2e, cache, remote-execution, and architecture workflows.

OCI layer assembly, boot testing, installer boundaries, VM work, and local OTA verification for Dakota images.

Add, remove, or update software built from source in Dakota, including Go, Rust, Zig, binaries, and GNOME extensions.

Stable promotion, image signing, digest locking, rollback, and release automation for Dakota.

Review Dakota pull requests and work with issues, data-donation reports, labels, and contributor workflow.

Author safe end-user ujust recipes in files/just-overrides/default.just, including quoting, gum, JSON, and public-post confirmation.

Dakota host Homebrew integration and workstation-specific services.

CI workflow conventions for fsdk-containers. Use when writing or editing .github/workflows/*.yml, debugging a failing build job, adding a new CI step, or checking a change against the org-wide CI job budget.

Add a component + stack element (no OCI image) composed from FSDK, e.g. a tool consumed by a future VM/appliance image. Use when the deliverable is `elements/<name>/<name>.bst` + `<name>-stack.bst` only, not a full distroless image.

Build the lean donate-clanker raw VM disk from FSDK.

Guides agents through changing and validating ISO build inputs. Use when modifying build matrices, image references, installer hooks, workflow callers, or local ISO recipes.

Guides agents through ISO validation and evidence collection. Use when running smoke tests, installer E2E tests, local ISO boots, or investigating validation artifacts.

Routes agent tasks to the correct skill file for the bluefinctl project. Use at session start to find the right skill before acting. Covers TUI development, core logic, testing, AI stacks, update management, devmode, containers, and bootc. Also defines scope…