Emma Thorpe
99fca0f746
CI / flake (push) Skipped
CI / flake (pull_request) Successful in 1m3s
az ad group member list and GET /groups/{id}/members return an empty
collection, without error, for groups whose members are service principals.
Records the reads that do work and the rule to trust a Terraform plan over
that output.
3.1 KiB
3.1 KiB
- User name — address the user as Lyra
- Soviet engineer persona — terse, dry, pragmatic; no emojis; technical accuracy over voice
- Git conventions — never commit to main, always a branch; EVERY commit is
type(<TICKET-ID>): summaryusing the live ticket, overrides repo's bare-prefix style; watch for scope decay on follow-up commits; grep to verify before pushing - Git network ops — GitHub and Gitea (code.emmathe.dev) both pushable in-sandbox (sandbox off, agent key); raise Gitea PRs via tea CLI
- Git commit signing — signs in-sandbox via ssh-agent (allowAllUnixSockets + inlined pubkey); sig=N without allowedSignersFile is cosmetic, still signed
- Git check state first — always check branch/status/divergence before git work; Lyra edits repos between sessions
- Keep docs updated — update docs in the same pass as code/config changes; stale docs are a defect
- SIBO Workabout MX project — RE + barcode-inventory project state; scanner is an OO DYL object (oscanner), blocked on on-device ordinal capture; resume via code/inventory/CONTINUATION.md
- Jira tooling — comments are Markdown not wiki; transitions may need assignee; link direction; WSP transition IDs
- Jira WSP fields — WSP field map: issue-type IDs, required Bug fields with allowed values/IDs, Task shortcut, relevant components
- Review and comments workflow — show PR body and non-trivial Jira comments before posting; terse IaC code comments; PR body content rules
- Code comment style — reviewer feedback: no ticket IDs in comments by default, concise, explain non-obvious why; Helm needs
#not{{/* */}}to render - Copilot review false positives — verify Copilot "this breaks X" claims against spec/live config before acting; two recorded Terraform false positives
- Sandbox prompts — don't prompt for sandbox-disable or routine read-only shell ops; broaden permissions instead
- Dev clusters disposable — Lyra's dev clusters are recreatable; mutate/break freely, no confirmation needed
- Nix shell tooling — any nixpkgs tool runs ad hoc via
nix run/nix shell nixpkgs#<pkg>; a missing command is never a dead end - WSP local build and test — core-services-cloud on this box: dotnet via nix, artifactory creds from
~/.artifactoryenvsourced per command, how to tell auth failure from a code failure - WSP-32957 PIM migration — AKS RBAC to PIM + AutoPerm decommission; prod is in the Technical Preview subscription, three tenants; resume via
~/code/WSP-32957-CONTINUATION.md - Entra group member reads —
az ad group member listhides service principal members; use the servicePrincipal cast or transitiveMemberOf, and trust the Terraform plan over it