patterns git:20260715.f8cbb34A

Immutable. This exact content never changes and is served at /api/v1/blob/9366778c37b6e41d.

---
name: patterns
description: "Project code patterns and conventions. Auto-loads when implementing, designing, verifying, or reviewing code. Provides detailed pattern definitions with code examples."
user-invocable: false
allowed-tools: Read, Glob, Grep
---

# Project Patterns Reference

This skill contains detailed pattern documentation for this project.
See individual pattern files for full details with code examples.

Available patterns:
- [revalidated-execution-port.md](revalidated-execution-port.md) — Bind planned operations to adapter requests, revalidate them under lock, then apply through `ExecutionPort`.
- [root-confined-filesystem-port.md](root-confined-filesystem-port.md) — Access managed descendant files through a canonical root and no-follow relative-path operations.
- [drift-checked-managed-projection-plan.md](drift-checked-managed-projection-plan.md) — Plan skill trees and MCP config as fingerprinted writes, re-observe owned projections, and fail on drift.
- [target-local-resource-state.md](target-local-resource-state.md) — Mutate lifecycle evidence on exact harness bindings and preserve unselected sibling state.
- [identity-aware-rollback.md](identity-aware-rollback.md) — Roll back only proven owned identities and report post-observed residuals when restoration is incomplete.
- [validated-wire-contract.md](validated-wire-contract.md) — Serialize domain values through private wire DTOs and rebuild them through validating constructors.
- [validated-string-newtypes.md](validated-string-newtypes.md) — Represent bounded domain text with one validated, serde-aware newtype rather than raw `String`.
- [bounded-native-process-port.md](bounded-native-process-port.md) — Resolve binaries and run direct argument vectors through the bounded runner with explicit limits.
- [isolated-native-fixture-roots.md](isolated-native-fixture-roots.md) — Exercise native and filesystem behavior only inside test-support-owned temporary roots and fake binaries.