packages n8n (workflow automation tool) as a Docker container with nginx reverse proxy for secure access through Home Assistant's ingress system.
Always reference these instructions first and fallback
22015d agoReviewMountCreate a free account to mount
termination condition. No pointer capture in closures without snapshot/sync.
## 3. Workspace path safety (critical: security boundary)
- Containment of workspace paths under `workspace.root` after absolute normalization; no escape symlinks.
- Issue identifiers
21843d agoReviewMountCreate a free account to mount
pull request requirements, the pull request review workflow
and output format, and the security policy. Read it before making changes or
reviewing. This file intentionally contains nothing else
2155mo agoReviewMountCreate a free account to mount
expr)` for propagating failures in call chains that return optional/expected.
4. **Security** — no `getenv()` calls inside library code (only in `main.cpp` and CLI handlers);
validate all external input (WebSocket messages
2149mo agoReviewMountCreate a free account to mount
caller
before editing. Never simplify away input validation, error handling
that prevents data loss, security, or accessibility. Non-trivial logic
leaves one runnable check behind. A repo overrides these wholesale
2122mo agoReviewMountCreate a free account to mount
bullets. explain/teach -- only when user says "why" or "explain".
Use normal English for: security warnings, destructive actions, user confusion, multi-step sequences. Resume terse after.
## Memory routing
Session start: call
2107mo agoReviewMountCreate a free account to mount
camelCase (variables/functions/methods), UPPER_CASE (constants)
- **Testing**: Follow TDD (write tests first when fixing bugs)
- **Security**: Be extra careful - this code downloads and executes .NET installers
## Common Development Workflows
### Updating Dependencies
2093y agoReviewMountCreate a free account to mount
Balance all five pillars** - Consider Cost Optimization, Operational Excellence, Performance Efficiency, Reliability, and Security together
4. **Justify decisions** - Explain WHY a service or pattern was chosen, including tradeoffs
5. **Link
2037mo agoReviewMountCreate a free account to mount
GitHub Copilot Instructions for this Repository
## General Guidelines:
- Prioritize security, performance, and readability in code suggestions.
- Use clear and concise language.
- This project contains a Node-RED integration for Home
1984mo agoReviewMountCreate a free account to mount
CortexPrismPipes a download into a shellCopilot instructions
canonical source: `skills/`.
Change canonical skills then run `python scripts/sync_agent_skills.py --write`.
- Verify scope and security with repository-native tests and policies
1889d agoReviewMountCreate a free account to mount
maintainer requested it.
- Before opening, updating, or finalizing a PR, use the pre-PR security cycle:
`docs/pre-pr-security-cycle.md`,
`.github/skills/pre-pr-security-cycle/SKILL.md`, and
`.github/prompts/pre-pr-security-cycle.prompt.md`.
- Before creating, reopening, or requesting review on a PR, satisfy
1876mo agoReviewMountCreate a free account to mount
anti-detector
Stop: "stop unslop" or "normal mode"
Auto-Clarity: drop unslop style for security warnings, irreversible actions, legal/medical/financial precision, user confused. Resume after.
Boundaries: code/commits/PRs written normal. Never invent
1823mo agoReviewMountCreate a free account to mount
skill files under `.github/skills/`. Avoid duplicating checklist content between this file and skills.
## Security Defaults (Always-On)
Apply secure-by-default behavior across all code generation, changes, and reviews, regardless
1787mo agoReviewMountCreate a free account to mount
test` after every change
## Code Quality
- Review across five axes: correctness, readability, architecture, security, performance
- Every PR must pass: lint, type check, tests, build
- No secrets in code or version
17435d agoReviewMountCreate a free account to mount
version gate.
- **Backend Communication**: Use `backend_flightcontroller.py` facade; implement progress callbacks for long operations
## Security
- Never commit secrets or credentials
- Use SSL verification for network requests
- Validate all user inputs before
17320mo agoReviewMountCreate a free account to mount