- Branch off
main. - Small commits, Conventional Commits:
feat:,fix:,chore:,docs:,refactor:,test:,ci:. - Open PR → CI must be green.
- Squash-merge.
Run /ship (or manually):
dotnet format --verify-no-changes
dotnet test
dotnet list package --vulnerable
pwsh scripts/scan-secrets.ps1- Bumping a major dep, changing auth, changing deploy topology → add a
DECISIONS.mdentry (ADR) in the same PR.
- .editorconfig is authoritative.
- No comments that restate the code. Explain WHY when non-obvious.
- No hand-written docstrings on trivial methods.