Backend

Profiles

Ready-made CPO policy sets. Guardrails block what an agent must never do; quality and stack profiles hold generated code to your conventions. Set a profile by its id.

• Backend C#

  C# / ASP.NET Core / EF Core services, APIs and workers with preserved diagnostics, explicit DI lifetimes, observable async work, owned resources, safe queries and HTTP surfaces, and evidenced completion. Rule IDs BCS-01–BCS-84; NEED TO blocks on proven violations.

  Profile · backend-csharp · 80 policies

• Backend Go

  Go services, APIs and workers (net/http, database/sql, context, slog) with explicit dependencies, checked errors, owned goroutines and resources, bounded work and evidenced completion. Rule IDs E/A/R/C/G/H/D/S/O/T/V; NEED TO blocks on demonstrated violations.

  Profile · backend-go · 63 policies

• Backend Java

  Java services, APIs and workers (Spring, JPA, JDBC, reactive) with declared boundaries, explicit failures, owned resources, safe inputs, consistent transactions and evidenced completion. Rule IDs JB01–JB68; NEED TO blocks on demonstrated violations.

  Profile · backend-java · 65 policies

• Backend Kotlin

  Kotlin/JVM services, APIs and workers (Ktor, Spring, coroutines, JDBC/Exposed) with explicit contracts, owned coroutine lifetimes, preserved failures and cancellation, safe inputs and evidenced completion. Rule IDs KT, AR, ER, CO, BE, QA; NEED TO blocks on proven violations.

  Profile · backend-kotlin · 78 policies

• Backend PHP

  PHP services and APIs (Symfony, Laravel, Doctrine, PDO) with Composer-true autoloading and platforms, explicit dependencies, handled failures, safe input, SQL, shell and secrets, owned transactions and evidenced completion. Rule IDs PHP-001–PHP-080; NEED TO blocks.

  Profile · backend-php · 78 policies

• Backend Python

  Python services, APIs and workers with checked types, explicit failures, safe boundaries, consistent data, owned async work and evidenced completion. Rule IDs ENV/TYP/ARC/PY/API/DB/IO/TST/OPS; NEED TO blocks on demonstrated violations.

  Profile · backend-python · 63 policies

• Backend Rust

  Rust services, APIs and workers (Tokio, axum, tower, SQLx) with declared boundaries, explicit failures, owned async work, bounded resources, safe inputs and evidenced completion. Rule IDs ARC/TYP/ERR/ASY/API/DB/OPS/QLT; NEED TO blocks on demonstrated violations.

  Profile · backend-rust · 63 policies

• Backend TypeScript

  Trustworthy contracts, explicit ownership, bounded work, consistent data and inspectable failures for TypeScript services, APIs and workers. Rule IDs TS/AR/IO/AS/DB/SE/QA; NEED TO blocks on demonstrated violations, SHOULD warns.

  Profile · backend-typescript · 48 policies

• Drizzle ORM 0.45

  Drizzle ORM 0.45.4 + Drizzle Kit 0.31.11 code, configuration, migrations and tooling without 1.0 beta APIs or pre-0.45 habits; any dialect, driver, runtime or app shape. Rule IDs DZ-V/T/C/S/Q/R/X/M/A/Z; NEED TO blocks.

  Profile · drizzle-orm · 114 policies

• Fastify 5

  Fastify 5.12.5+ services and plugins without Fastify 3/4 APIs, with explicit encapsulation, one completion model per hook and handler, trusted schemas, bounded inputs and package-manager-owned dependencies. Rule IDs F5-V/P/H/S/C/T/X; NEED TO blocks.

  Profile · fastify-5 · 110 policies

• PostgreSQL 18.6

  PostgreSQL 18.6 schemas, migrations, queries, roles, configuration and operations read from SQL text, parsed commands, configuration files and postgres-language-server. Rule IDs PG-V/S/M/Q/A/C/O/P; NEED TO blocks or asks, SHOULD warns.

  Profile · postgres-18 · 125 policies

• TypeScript backend

  Node.js / Bun / Deno services in strict TypeScript with a SQL database and migrations (Prisma, Drizzle, Knex, TypeORM…).

  Profile · typescript-backend · 3 policies