┌ library70 rules · 101 skills ┐

Traffic One · Library

Every rule. Every skill.
One Library.

Rules are markdown guardrails that attach when matching files are open. Skills are workflows your AI fires from intent. Both are versioned, cited in every change, and grouped under the eight pillars.

just shipped

rulerules/common/agent-handoff-digests.md· Agent Handoff Digests rulerules/common/clean-code.md· Clean Code rulerules/common/codebase-graph.md· Codebase Graph rulerules/core.md· Project Core rulerules/common/dependencies.md· Dependencies Quality Gate rulerules/common/documentation.md· Auto-Documentation Defaults

01/03by pillar

Code quality

Clean code, surgical edits, component boundaries.

13 rules·20 skills

Security

Auth, secrets, schema validation, pre-write hooks.

4 rules·8 skills

Architecture

Provider-first stacks, package boundaries, scale paths.

43 rules·37 skills

Infrastructure

Postgres, Docker, queues, service templates.

1 rules·5 skills

Deployment

Preview envs, fast-forward prod, one-command rollback.

0 rules·2 skills

Documentation

ADRs, READMEs, JSDoc - written as you build.

1 rules·4 skills

Token optimization

Path-scoped rules, lazy skills, context budgeting.

4 rules·4 skills

Testing

TDD-first skills, AI regression on every PR.

4 rules·21 skills

02/03directory

171 items.

Token optimizationruleAgent Handoff Digestsrules/common/agent-handoff-digests.md

Subagents leave a sub-2KB digest at phase boundaries. Downstream agents read the digest instead of re-reading the repo - cuts redundant token spend across the senior-eng orchestrator flow.

Code qualityruleClean Coderules/common/clean-code.md

Language-agnostic baseline: KISS/DRY/YAGNI, immutability, naming, ~200-400 line files, single-responsibility functions. Stack rules layer on top.

Token optimizationruleCodebase Graphrules/common/codebase-graph.md

Read the active codebase-graph artifact (GitNexus or graphify) before falling back to broad Glob/Grep - replaces dozens of searches with one file read.

Code qualityruleProject Corerules/core.md

TypeScript strict baseline, monorepo layout, zod-at-the-boundary, Gitflow. The framework-agnostic floor every other rule sits on.

ArchitectureruleDependencies Quality Gaterules/common/dependencies.md

Search local before adding a dep, check stack defaults, run the quality gate (maintained, adopted, permissive license, typed, sized). Build in packages/* only when no candidate passes.

DocumentationruleAuto-Documentation Defaultsrules/common/documentation.md

Canonical doc set (README, AGENTS, CLAUDE, architecture, ADRs) generated and reconciled automatically across new and existing projects.

Code qualityruleExecution Disciplinerules/common/execution-discipline.md

Behavioral rules that block silent assumptions, speculative architecture, unrelated edits, and invisible failure - think before coding, simplest first, surgical changes.

ArchitectureruleGit Conventionsrules/common/git.md

Conventional commits, one logical change per commit, PR titles under 70 chars with test-plan body, no force-push to protected branches, no --no-verify.

ArchitectureruleLibrary Catalogrules/common/library-catalog.md

Curated starting points (zod, react-hook-form, RTK Query, framer-motion, Sentry, PostHog, Resend, Shifter) per stack so the AI does not pick a random package.

ArchitecturerulePackage Architecturerules/common/package-architecture.md

Every workspace package ships an up-to-date architecture.md describing purpose, public API, dependencies, and why-not-a-library tradeoffs.

Token optimizationruleProject Memoryrules/common/project-memory.md

Versioned .traffic-one/ folder (product, stack, coding, security, schema, agent-log) survives across sessions, tools, and subagents - read first, then plan.

Code qualityruleQuality Toolingrules/common/quality-tooling.md

Required root scripts (format, lint, typecheck, test, build), repo-owned tooling only, lint-staged + Husky pre-commit gates - deterministic and hard to bypass.

SecurityruleSecurity Baselinerules/common/security.md

Pre-commit checklist for every change touching input/auth/storage/network: no hardcoded secrets, parameterized SQL, schema-validated input, authz on every endpoint, restrictive CORS.

Token optimizationruleSenior Engineer Team Orchestrationrules/common/senior-engineer-team.md

Architect-first, then frontend/backend parallel, then reviewer/tester parallel, shipper only on explicit deploy. Subagents own narrow write scopes and emit handoff digests.

ArchitectureruleStack Recommendationsrules/common/stack-recommendations.md

Provider-first defaults: GitHub Actions, Stripe, Sentry, Resend, Supabase, PostgreSQL, pnpm. Custom infra only after stack core, provider feature, and quality gate fail.

ArchitectureruleC++ Backendrules/backend/cpp.md

Modern C++17/20/23, RAII everywhere, repository interfaces, std::optional/expected for failures, clang-tidy + sanitizers in CI, GoogleTest for unit tests.

ArchitectureruleC#/.NET Backendrules/backend/csharp.md

Nullable references on, records for DTOs, constructor DI with explicit lifetimes, typed Options, parameterized queries, framework auth handlers over custom JWT.

ArchitectureruleGo Backendrules/backend/golang.md

gofmt + goimports, small consumer-defined interfaces, context.Context through request work, gosec in CI, parameterized SQL, race detector for concurrent code.

ArchitectureruleJava Backendrules/backend/java.md

google-java-format, records for DTOs, constructor injection, Optional only as return type, parameterized SQL, bcrypt/Argon2 for passwords, JUnit 5 baseline.

ArchitectureruleKotlin/JVM Backendrules/backend/kotlin.md

ktlint/Detekt, val over var, sealed types for state, no !!, structured concurrency, Result<T> for recoverable failures, kotlinx-coroutines-test for coroutine code.

ArchitectureruleNode Service Layoutrules/backend/node.md

Route to controller to service to repository to db - never skip layers. zod-validate every handler, typed DTOs only, rate-limit public endpoints, scrubbed metrics.

ArchitecturerulePerl Backendrules/backend/perl.md

v5.36 strictness, subroutine signatures, Moo with Types::Standard, taint mode for web-facing scripts, DBI placeholders always, Test2::V0 for new tests.

ArchitecturerulePHP Backendrules/backend/php.md

PSR-12, declare(strict_types=1), DTOs/value objects over array shapes, framework form-request validation, prepared statements, password_hash, framework auth packages.

InfrastructurerulePostgres Patternsrules/backend/postgres.md

Right types (bigint/uuid IDs, text not varchar, timestamptz, numeric for money, jsonb), composite indexes equality-first, explicit FK on-delete, tenant_id + RLS for multi-tenant.

ArchitecturerulePython Backendrules/backend/python.md

PEP 8, type annotations on every signature, Protocol for service boundaries, context managers for I/O, Bandit in CI, parameterized queries, framework auth over hand-rolled JWT.

Showing 25 of 171 items

03/03changelog

What's new.

Rules and skills are versioned just like code. Here's what landed in the last few weeks.

May 31, 2026

ruleToken optimizationAgent Handoff Digestsrules/common/agent-handoff-digests.md

Subagents leave a sub-2KB digest at phase boundaries. Downstream agents read the digest instead of re-reading the repo - cuts redundant token spend across the senior-eng orchestrator flow.

May 31, 2026

ruleCode qualityClean Coderules/common/clean-code.md

Language-agnostic baseline: KISS/DRY/YAGNI, immutability, naming, ~200-400 line files, single-responsibility functions. Stack rules layer on top.

May 31, 2026

ruleToken optimizationCodebase Graphrules/common/codebase-graph.md

Read the active codebase-graph artifact (GitNexus or graphify) before falling back to broad Glob/Grep - replaces dozens of searches with one file read.

May 31, 2026

ruleCode qualityProject Corerules/core.md

TypeScript strict baseline, monorepo layout, zod-at-the-boundary, Gitflow. The framework-agnostic floor every other rule sits on.

May 31, 2026

ruleArchitectureDependencies Quality Gaterules/common/dependencies.md

Search local before adding a dep, check stack defaults, run the quality gate (maintained, adopted, permissive license, typed, sized). Build in packages/* only when no candidate passes.

May 31, 2026

ruleDocumentationAuto-Documentation Defaultsrules/common/documentation.md

Canonical doc set (README, AGENTS, CLAUDE, architecture, ADRs) generated and reconciled automatically across new and existing projects.

May 31, 2026

ruleCode qualityExecution Disciplinerules/common/execution-discipline.md

Behavioral rules that block silent assumptions, speculative architecture, unrelated edits, and invisible failure - think before coding, simplest first, surgical changes.

May 31, 2026

ruleArchitectureGit Conventionsrules/common/git.md

Conventional commits, one logical change per commit, PR titles under 70 chars with test-plan body, no force-push to protected branches, no --no-verify.

May 31, 2026

ruleArchitectureLibrary Catalogrules/common/library-catalog.md

Curated starting points (zod, react-hook-form, RTK Query, framer-motion, Sentry, PostHog, Resend, Shifter) per stack so the AI does not pick a random package.

May 31, 2026

ruleArchitecturePackage Architecturerules/common/package-architecture.md

Every workspace package ships an up-to-date architecture.md describing purpose, public API, dependencies, and why-not-a-library tradeoffs.