Non-negotiable rules:

1. Load references/stack.md first, then only the task-relevant references.
2. Inspect composer.json and composer.lock before applying version-specific APIs. Recommend Laravel 13 for new applications and explicit upgrades; never silently upgrade an existing application during unrelated work.
3. No business logic in controllers. Controllers validate (Form Request), delegate (Action), return (API Resource). Nothing else.
4. No returning Eloquent models directly. Every response goes through an API Resource.
5. No inline validation. All validation lives in Form Request classes.
6. No $guarded = []. Every model uses explicit $fillable.
7. No raw queries. Use Eloquent or query builder with parameter bindings.
8. No bare queue:work. All queue processing uses Horizon.
9. Model::shouldBeStrict() must be enabled in AppServiceProvider::boot().

laravel

Inputs