golang

This core routes to domain guidance; /golang-review owns the aggregate rule catalog. /aip owns resource design; this skill owns Go implementation.

Non-negotiables

• Bound tenant-controlled memory, cardinality, fan-out, concurrency, and response size.
• Traverse protos with generated getters: a.GetB().GetC().
• Proto annotations own field contracts; do not duplicate handler validation.
• Use optional only for semantic presence; update intent belongs in masks.
• Collections are paginated, filterable List; Get returns one resource.
• At API boundaries, log internal causes and return structured Connect/gRPC errors with stable reasons and public paths. Preserve upstream per-item granularity.
• Security fails closed; secrets are references, never plaintext input, storage, output, or logs.
• Bound retry/backoff inside the owning timeout.
• Reuse semantic config types, not strings or bool sets.
• Feature-flag risky mixed-version rollout and remove flags after convergence.
• Bootstrap files wire; packages own behavior.
• Integration tests cross real boundaries; tests assert stable behavior, not paths or incidental text.

Contextual tensions

• Prefer positive config booleans, except negative disabled when the zero value must fail closed.
• Exhaustive enum switches reject unknowns; intentional subsets document ignored values.
• gRPC keepalive depends on every intermediary.
• New AIP surfaces use bounded filter strings; preserve established typed filters for compatibility.
• Fakes suit unit tests, never claims of protocol, role, provider, or container compatibility.

Load by task

Work	Read
Protos, handlers, Connect/gRPC, public errors	PROTO-API.md
Goroutines, caches, shutdown, shared state	CONCURRENCY.md
Errors, logging, metrics	ERRORS.md
Tests and CI	TESTING.md
Temporal	TEMPORAL.md
Tenant input, egress, authz, secrets, destructive ops	SECURITY.md
Flags, deprecation, schema removal	ROLLOUT.md
Packages, storage, interfaces	STRUCTURE.md
Operators and reconcilers	CONTROLLERS.md
Go 1.27 APIs and leak profiles	GO-1.27.md

Hooks warn on unreserved shipped proto removals and floating test images. Review diffs with /golang-review.