coder-rules-requirements

Defining or validating coding task requirements before implementation Need to enforce definition of done and scope boundaries Need requirement-to-evidence traceability in reviews </when_to_use> MUST indicates absolute requirement SHOULD indicates strong recommendation with documented exception MAY indicates optional behavior </normative_language> Task objective and in-scope boundaries Acceptance criteria with pass/fail expectations Quality gates (tests/lint/typecheck/security/perf as relevant) Constraints (security, compatibility, rollout, tooling) Out-of-scope and future work notes </input_requirements> Scope and intent Functional acceptance criteria Definition of done gates Constraints and guardrails Non-functional requirements Verification evidence </requirement_categories> <template>[REQ-ID] Subject MUST action under condition; verification command/result; evidence artifact</template> <template>[REQ-ID] Subject SHOULD behavior; allowed exception; compensating control</template> <template>[AC-ID] Given context, When action, Then expected observable result</template> </writing_templates> Every requirement is singular, unambiguous, and testable Every AC maps to direct evidence in code/tests/behavior Out-of-scope changes are flagged explicitly NFRs are measurable when they affect release decisions </quality_rules> Requirements use explicit MUST/SHOULD/MAY intent Each REQ has verification method and evidence target AC coverage is complete and traceable DoD gates are declared before implementation starts Exceptions include rationale, owner, and expiration Do not accept vague language like "improve" without metric Do not mix requirement and implementation preference without reason Do not mark done without traceability matrix </do_not> Requirement table with REQ-ID, type, verification, evidence AC coverage matrix and uncovered gaps List of approved exceptions and compensating controls </output_requirements> RFC 2119 RFC 8174 Scrum Guide (Definition of Done) INCOSE Requirements Writing Guide ISO/IEC 25010 Overview OWASP ASVS