guardrails

To auto-generate security and code-quality guardrails during bootstrap, run a bootstrap scan to detect project values, then use catalog-driven rules to write tailored .claude/rules/*.md files with valid globs and replaced placeholders.

Bootstrap guardrail rules are .claude/rules/*.md files that codify security, testing, database, and docs standards. You need them during project initialization to enforce domain-specific best practices automatically from detected stack values.

Yes, you can customize guardrail files by loading catalogs that replace placeholders like TEST_FRAMEWORK, DB_CLIENT, API_DIRECTORY, and AUTH_METHOD with values detected from your scan results, ensuring concise and actionable rules.

The guardrails skill validates frontmatter structure and ensures valid globs by scanning your project during bootstrap, loading rule catalogs, and writing .claude/rules/*.md files with placeholders correctly replaced by detected domain values.

No external dependencies or components are required to generate domain guardrail rules. The skill operates independently during bootstrap, using scan results to produce security, testing, database, and documentation .md rule files.

The best way to enforce documentation and database standards at initialization is automating guardrail generation, which writes tailored .claude/rules/{database,docs}.md files from detected stack values to codify project standards without manual setup.