Rules
Rule 1 — Issue First. No branch, no code, no commit without a GitLab issue. Every MR description must contain Closes #NNN or CI blocks.
Rule 2 — Branch Naming.
<type>/<issue-number>-short-description
feat/71-dev-workflow
fix/72-cors-header
ci/73-bandit-gate
Commit Format
<type>(<scope>): <subject>
Body: WHY this change, not what.
Closes #71
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Types: feat · fix · ci · docs · refactor · test · chore
Scope: launcher · api · ansible · ci · cluster
Slash Command Sequence
/start-issue
→
/plan-issue
→
/build-issue
→
/review-diff
→
/finish-issue
/start-issue
Read issue · explore files · confirm scope
/plan-issue
Written plan · operator approval · no code yet
/build-issue
Execute plan · surgical changes · run local gates
/review-diff
Self-review · bugs · security · scope creep
/finish-issue
Commit · push · open MR with Closes #NNN
MR Resolve Loop — repeat until pipeline green + reviewer clean
1.Fetch latest Claude reviewer comment
2.Fix every HIGH and MEDIUM finding — no suppressions
3.Run local gates
4.Commit + push
5.ScheduleWakeup — wait for pipeline
6.Re-check reviewer on new sha → merge --squash --remove-source-branch
CI Gates
| Job | Stage | Command |
|---|
| validate_docs | validate | markdownlint '**/*.md' |
| check_issue_link | validate | MR description must contain Closes/Refs #NNN |
| lint | test | flake8 --max-line-length=120 src/multi-agent-cluster/ |
| typecheck | test | mypy --ignore-missing-imports src/multi-agent-cluster/ |
| ansible_lint | test | ansible-lint ansible/ |
| security | security | bandit -r src/multi-agent-cluster/ --severity-level medium |
| secret_detect | security | Gitleaks — always runs, never allow_failure |
| claude_audit | security | Claude CI reviewer — HIGH/MEDIUM block merge |