Apply when wiring validation, error handling, or framework adapters. Concentrate guards at system boundaries (CLI, config, network, external APIs); trust internal types and keep business logic in pure functions.
NewMaintained
On-demandOn-demand: invoked explicitly — never occupies your agent's context until called.
◆Coding pack
Last verified 9/27/2026
What it changes
Passed 21 of 22 test cases with the skill, and 21 of 22 without it.
Without skill95%
With skill95%
Checks it passed that the model alone missed
Isolate password hashing and user domain rules in framework-agnostic domain components.
1 fixed20 passed either way0 still failing1 broke
Pass-rate lift
0 pp
Tokens
-10%
Agent turns
0%
Response time
-18%
Model gemini-3.6-flashMeasured 9/27/2026v221 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
A Rails controller action handles user registration by checking feature flags, validating email formats, hashing passwords, generating JWT tokens, saving to DB, and sending welcome emails in 80 lines inside `UsersController#create`. How should responsibility be split between the controller shell and core domain logic?
What was checked, without and with the skill
Checked
Without skill
With skill
Keep the controller shell thin by delegating domain logic to specialized domain modules.
Passed
Passed
Isolate password hashing and user domain rules in framework-agnostic domain components.
Missed
Passed
case-15 · gemini-3.6-flash · 9/27/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md28 linessingle file
Boundary Discipline
Place validation, type narrowing, and error handling at system boundaries. Trust internal code unconditionally. Business logic lives in pure functions. The shell is thin and mechanical.
Why: Scattered validation is noisy, redundant, and gives a false sense of safety. Keep logic out of framework wiring so it can be tested without the framework.
Inside the system: typed data, error propagation, no re-validation. Trust the types.
Across the boundary. Expose domain concepts, not the boundary's private representation. Keep general-purpose mechanism inside and special-purpose policy at the edge.
Applications:
Validation and error handling:
Validate config at parse time (the boundary), not inside business logic
Parse raw data into domain types at the boundary
Do not re-export transport, storage, framework, or wire types through the public surface
No redundant nil checks deep in call chains if the boundary already validated
Code organization:
Business logic in pure functions with no framework dependencies
Parse functions: pure transforms from raw bytes to typed state
Prompt construction: structured state in, string out
Scoring and assessment: pure transforms from state to results
The tests:
"Is this data crossing a system boundary right now?" If not, validation is redundant.
"Can this be a pure function that the shell just calls?" If yes, extract it.