cxc-dev-devops
MUST USE for DevOps, infrastructure, or delivery work — container builds, deploy pipelines, stacked-PR CI diagnosis, Kubernetes, Infrastructure as Code, SRE foundations, edge/serverless, ML infrastruc
SKILL.mdplugins/codexclaw/skills/dev-devops/SKILL.md
GitHubDev-DevOps — Production Infrastructure & Delivery
Backend handoff rule: When a deploy/SRE gate needs app behavior,
dev-backendimplements the hook (health handler, readiness dependency check, trace/span/log fields, migration compatibility, shutdown hook).dev-devopsdefines the operational gate, rollout/rollback behavior, alert policy, and release proof. This skill owns deployment strategy, rollback proof, observability operations, health/readiness operational gates, SLOs, incident response, and infrastructure/runtime delivery.
Class, fast path, rule authority, proof, and safety: dev. Current/public evidence: dev routing.
Severity and rule authority are distinct (dev §0.2). Safety/correctness and release
proof remain mandatory; architecture/tool preferences need project-specific justification.
§2.7 Release Proof Contract (STRICT)
Rule (DEVOPS-RELEASE-PROOF-01): A release claim must name the artifact digest, workflow/builder identity, deploy target/environment, smoke-test evidence, and rollback evidence. Keep the proof at router level; detailed package, platform, and SLSA mechanics live in package-release.md, cross-platform-release.md, and platform-engineering.md.
Modular References
| Condition | Reference |
|---|---|
| Container builds or image push | container-build-rules.md; docker.md |
| Deploy pipeline, rollout, rollback, secrets, or GitOps | deployment-pipeline-rules.md; ci-cd-deploy.md |
| Freeze or GO/NO-GO publication decision | release-readiness.md |
| Package publishing, registry auth, trusted publishing, or distribution channels | package-release.md |
| Release depends on OS-local behavior | cross-platform-release.md |
| Tauri, AppKit/SwiftUI, WidgetKit, menu-bar/tray, embedded runtimes; desktop acceptance or release readiness | native-desktop-acceptance.md |
| TCC, Gatekeeper, login/background items, keychain, or Apple Events approval prompts | macos-system-approvals.md |
| Homebrew Formula/Cask distribution | homebrew.md |
| Platform, DORA, provider routing, or SLSA handoff | platform-engineering.md |
| K8s deploys, Gateway API, scaling, or manifest checks | kubernetes-basics.md; kubernetes.md |
| Stacked/dependent PRs or unexpected CI runs | Stacked PRs |
| Authorized branch/worktree cleanup | branch-hygiene-rules.md; branch-lifecycle.md |
| Repository setup, rulesets, auto-delete, or PR limits | repo-bootstrap.md |
| Agent-authored intake policy or superseded PRs | agent-pr-intake.md |
| Local worktree/branch GC or scheduled cleanup | local-gc.md |
| IaC modules, state, or blast radius | infrastructure-code-rules.md; iac.md |
| SLO, error budget, incident, or runbook | sre-basics.md; sre-foundations.md |
| Edge/serverless delivery | edge-serverless.md |
| GPU clusters, model registry, scaling, or MLOps | ml-infra.md |
| Ownership overlaps with app, testing, or security work | delivery-boundaries.md |
| Submitting infrastructure changes | infrastructure-preflight.md |