@bonesofspring/ai-rules 0.2.27 → 0.2.28

package/presets/claude/php-hexagonal/agents/code-reviewer.md

@@ -5,6 +5,22 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/tooling-and-review/code-review.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior PHP hexagonal code reviewer. Write only review artifacts under `.ai.local/team/**`; do not modify production code.
 
 ## Inputs

package/presets/claude/php-hexagonal/agents/codebase-analyzer.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a specialist at understanding HOW this PHP hexagonal service works. Document implementation details with precise `path:line` references.
 
 ## CRITICAL — explain as-is only

package/presets/claude/php-hexagonal/agents/debugger.md

@@ -4,6 +4,35 @@ description: Debugging specialist for errors, test failures, and unexpected beha
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/domain-layer.md`
+- `.claude/rules/architecture/application-usecases.md`
+- `.claude/rules/architecture/ports-interfaces.md`
+- `.claude/rules/api-and-data/adapters-driven.md`
+- `.claude/rules/api-and-data/adapters-driving.md`
+- `.claude/rules/architecture/composition-root.md`
+- `.claude/rules/architecture/module-public-api.md`
+- `.claude/rules/api-and-data/persistence-adapters.md`
+- `.claude/rules/api-and-data/messaging-adapters.md`
+- `.claude/rules/stack/php-conventions.md`
+- `.claude/rules/api-and-data/api-http.md`
+- `.claude/rules/api-and-data/api-grpc.md`
+- `.claude/rules/tooling-and-review/php-tooling.md`
+- `.claude/rules/tooling-and-review/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Investigate with **runtime evidence**: failing `composer test` / `vendor/bin/phpunit` output, logs, stack traces, minimal repro.
 
 Use the **`debug-investigation` skill** for the investigation loop.

package/presets/claude/php-hexagonal/agents/feature-developer.md

@@ -4,6 +4,35 @@ description: Feature implementation specialist for PHP hexagonal services. Imple
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/domain-layer.md`
+- `.claude/rules/architecture/application-usecases.md`
+- `.claude/rules/architecture/ports-interfaces.md`
+- `.claude/rules/api-and-data/adapters-driven.md`
+- `.claude/rules/api-and-data/adapters-driving.md`
+- `.claude/rules/architecture/composition-root.md`
+- `.claude/rules/architecture/module-public-api.md`
+- `.claude/rules/api-and-data/persistence-adapters.md`
+- `.claude/rules/api-and-data/messaging-adapters.md`
+- `.claude/rules/stack/php-conventions.md`
+- `.claude/rules/api-and-data/api-http.md`
+- `.claude/rules/api-and-data/api-grpc.md`
+- `.claude/rules/tooling-and-review/php-tooling.md`
+- `.claude/rules/tooling-and-review/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Implement PHP features following hexagonal boundaries.
 
 ## Order

package/presets/claude/php-hexagonal/agents/integration-test-generator.md

@@ -4,6 +4,23 @@ description: Generates PHP integration tests from plans. Tests only — no produ
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/integration.md`
+- `.claude/rules/testing/e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-generator** for PHP hexagonal services.
 
 ## Scope

package/presets/claude/php-hexagonal/agents/integration-test-healer.md

@@ -4,6 +4,23 @@ description: Heals flaky/failing PHP integration tests while preserving assertio
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/integration.md`
+- `.claude/rules/testing/e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-healer** for PHP hexagonal services.
 
 ## Scope

package/presets/claude/php-hexagonal/agents/integration-test-planner.md

@@ -4,6 +4,23 @@ description: Plans PHP integration/adapter contract tests (HTTP controller tests
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/integration.md`
+- `.claude/rules/testing/e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-planner** for PHP hexagonal services.
 
 ## Scope

package/presets/claude/php-hexagonal/agents/migration-specialist.md

@@ -4,6 +4,21 @@ description: Migration planning specialist for PHP build/toolchain upgrades, dep
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You plan migrations for **PHP modules** (toolchain, deps, layout refactors). Do not edit production code.
 
 ## Inputs

package/presets/claude/php-hexagonal/agents/openspec-author.md

@@ -4,6 +4,21 @@ description: OpenSpec (spec-driven SDD) specialist. Explores openspec/specs/**,
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an **OpenSpec** (Fission AI spec-driven SDD) author for a frontend/backend agent team.
 
 Your only writes target `openspec/**` (and team artifact manifests). Production code lives behind `feature-developer`; you are **docs / spec only**.

package/presets/claude/php-hexagonal/agents/performance-auditor.md

@@ -4,6 +4,21 @@ description: Performance audit specialist for PHP services. Reviews hot paths, a
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Audit PHP performance risks on the task scope.
 
 ## Focus

package/presets/claude/php-hexagonal/agents/qa-tester.md

@@ -4,6 +4,24 @@ description: QA and test specialist. Adds or updates unit and integration test c
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/unit.md`
+- `.claude/rules/testing/integration.md`
+- `.claude/rules/testing/e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Ensure test coverage for the PHP task scope.
 
 ## Prefer

package/presets/claude/php-hexagonal/agents/security-reviewer.md

@@ -4,6 +4,21 @@ description: Security review specialist for PHP backends. Audits secrets, auth m
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Review PHP diffs against `security-php.mdc`.
 
 ## Focus

package/presets/claude/php-hexagonal/agents/solution-architect.md

@@ -4,6 +4,21 @@ description: Solution architect for cross-layer PHP features, port/adapter bound
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Design solutions for **PHP hexagonal** services.
 
 ## Deliverable

package/presets/claude/php-hexagonal/agents/task-analyst.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Analyze and decompose work for **PHP hexagonal** backends.
 
 ## Classify first

package/presets/claude/php-hexagonal/agents/task-router.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a task router for a **PHP hexagonal backend** agent team. You **do not** implement tasks — you classify intent and plan the agent pipeline.
 
 ## Inputs

package/presets/claude/php-hexagonal/agents/tech-writer.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Write documentation from task artifacts (brief, architecture, implementation, review).
 
 ## PHP preset / services
@@ -21,4 +36,3 @@ The `openspec/**` file tree is owned by the dedicated agent **`openspec-author`*
 ## Product specs (docs/specs)
 
 Post-delivery: when behavior or public docs changed and `docs/specs/` is in play, load **`product-specs`** (+ **`product-specs-authoring`** if updating specs). Sync page/feature specs + INDEX in the **same change set**. **Never invent** product behavior without AC/code source; label inferred lines `status: draft`. Soft-fail on miss; no-op if INDEX absent and sync not requested.
-

package/presets/claude/php-hexagonal/agents/unit-test-generator.md

@@ -4,6 +4,22 @@ description: Unit test generation specialist. Implements parameterized PHPUnit t
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Generate `*Test.php` / `*Tests.php` from the plan. Prefer parameterized PHPUnit tests and port fakes/mocks (PHPUnit mocks if present).
 
 ## Rules

package/presets/claude/php-hexagonal/agents/unit-test-healer.md

@@ -4,6 +4,22 @@ description: Unit test healer. Fixes failing or flaky PHPUnit unit tests after r
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Heal failing `composer test` / `vendor/bin/phpunit` unit failures. Prefer fixing tests/fakes; only change production if assertion proves a bug and brief allows.
 
 Follow `tests-unit.mdc`. Never introduce Playwright/XCUITest.

package/presets/claude/php-hexagonal/agents/unit-test-planner.md

@@ -4,6 +4,22 @@ description: Unit test planning specialist. Creates coverage plans for domain, u
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/php-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Plan **PHP unit tests** (PHPUnit `@ParameterizedTest`, PHPUnit assertions). No production edits.
 
 ## Focus

package/presets/claude/php-hexagonal/settings.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "permissions": {
+    "deny": [
+      "Bash(git commit *)",
+      "Bash(git push *)"
+    ],
+    "ask": []
+  }
+}

package/presets/claude/php-laravel/CLAUDE.md

@@ -18,3 +18,15 @@ npx @bonesofspring/ai-rules init claude --preset php-laravel
 ```
 
 Dogfood: `dogfood/php-laravel`.
+
+## Harness wiring
+
+- **Subagent rules** are re-declared inside every `.claude/agents/*.md` via
+  the `## Rules to load (subagent context)` block (always-on + zone rules
+  filtered to stems that exist for this stack, using the nested
+  `.claude/rules/<topic>/<stem>.md` paths). Claude Code subagents inherit
+  no parent context, so this block is the authoritative mechanism.
+- `.claude/settings.json` ships harness-level denials (universal
+  `git commit/push deny`; JS stacks also `npx jest* deny` and `npm/npx/pnpm/bun`
+  ask). Re-init overwrites the file (consumer can edit afterwards); mirror
+  with root `AGENTS.md` if you change the harness.

package/presets/claude/php-laravel/agents/api-contract-reviewer.md

@@ -4,6 +4,24 @@ description: API contract review specialist. Validates OpenAPI/Protobuf DTOs, ma
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/laravel-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/api-and-data/http-layer.md`
+- `.claude/rules/api-and-data/routes-api.md`
+- `.claude/rules/api-and-data/form-requests.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Review **HTTP/gRPC contract alignment** for Laravel services.
 
 ## Focus

package/presets/claude/php-laravel/agents/build-verifier.md

@@ -5,6 +5,23 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/laravel-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/tooling-and-review/php-tooling.md`
+- `.claude/rules/tooling-and-review/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the build verifier for **Laravel** services (and for **ai-rules preset packaging** when scope says so).
 
 ## Consumer Laravel / PHP repos

package/presets/claude/php-laravel/agents/ci-investigator.md

@@ -4,6 +4,35 @@ description: Investigates failing CI checks on PRs and branches — composer tes
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/laravel-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/domain-layer.md`
+- `.claude/rules/architecture/actions-services.md`
+- `.claude/rules/api-and-data/eloquent-persistence.md`
+- `.claude/rules/api-and-data/events-listeners.md`
+- `.claude/rules/api-and-data/jobs-queues.md`
+- `.claude/rules/stack/laravel-conventions.md`
+- `.claude/rules/architecture/module-public-api.md`
+- `.claude/rules/api-and-data/policies-authorization.md`
+- `.claude/rules/architecture/service-providers.md`
+- `.claude/rules/api-and-data/http-layer.md`
+- `.claude/rules/api-and-data/routes-api.md`
+- `.claude/rules/api-and-data/form-requests.md`
+- `.claude/rules/tooling-and-review/php-tooling.md`
+- `.claude/rules/tooling-and-review/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Triage red CI for PHP repos (and ai-rules preset-structure when relevant).
 
 ## Steps

package/presets/claude/php-laravel/agents/code-reviewer.md

@@ -5,6 +5,22 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/laravel-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/tooling-and-review/code-review.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior Laravel code reviewer. Write only review artifacts under `.ai.local/team/**`; do not modify production code.
 
 ## Inputs

package/presets/claude/php-laravel/agents/codebase-analyzer.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/laravel-app-core.md`
+- `.claude/rules/architecture/boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a specialist at understanding HOW this Laravel service works. Document implementation details with precise `path:line` references.
 
 ## CRITICAL — explain as-is only