golang

This core routes to domain guidance; /golang-review owns the aggregate rule catalog. /aip owns resource design; this skill owns Go implementation.

Non-negotiables

• Bound tenant-controlled memory, cardinality, fan-out, concurrency, and response size.
• Traverse protos with generated getters: a.GetB().GetC().
• Proto annotations own field contracts; do not duplicate handler validation.
• Use optional only for semantic presence; update intent belongs in masks.
• Collections are paginated, filterable List; Get returns one resource.
• At API boundaries, log internal causes and return structured Connect/gRPC errors with stable reasons and public paths. Preserve upstream per-item granularity.
• Security fails closed; secrets are references, never plaintext input, storage, output, or logs.
• Bound retry/backoff inside the owning timeout.
• Reuse semantic config types, not strings or bool sets.
• Feature-flag risky mixed-version rollout and remove flags after convergence.
• Bootstrap files wire; packages own behavior.
• Integration tests cross real boundaries; tests assert stable behavior, not paths or incidental text.

Contextual tensions