Use when writing, reviewing, refactoring, or debugging OpenTofu (tofu) infrastructure for AWS - modules, environments, state/backends, providers, IAM, mock tests, or the validate gate. Enforces one opinionated AWS+OpenTofu ruleset so every project looks the same. Activate when the user says "write a tofu module", "add an AWS resource in tofu", "set up opentofu for AWS", "structure my tofu project", "add remote state", "write a tofu mock test", "validate my tofu", "add a terraform-aws-modules module", "migrate this to opentofu", or edits files under tofu/ (*.tf, *.tofu, *.hcl, *.tofutest.hcl, *.tfvars). Do not use for CloudFormation, CDK, Pulumi, raw AWS CLI/console work, or Kubernetes manifests.
Use when creating, editing, reviewing, debugging, or splitting GitHub Actions CI/CD workflows and composite actions under .github/ (workflow YAML, jobs, matrix builds, runners). Activate when the user says "set up CI for this repo", "add a CI/CD or deploy workflow", "pin actions to commit SHAs", "this workflow is too big, split it up", "extract a reusable or composite action", "the pipeline / release-please is broken", "cache dependencies in CI", "add concurrency cancellation to PR checks", "only run jobs when certain paths change", "bump an action to the latest version", or "give a workflow a dynamic run name".