Project Harness: Web Application

Generated by episteme harness apply web-app. Edit this file to customize the operating context for this project.

Web application with a frontend (JS/TS/React/Vue/Svelte) and optional backend.

Execution Profile

local — Local dev server for frontend. Backend may run locally or hosted.

Start the dev server and verify in a browser before reporting any UI task complete — type checking alone is not sufficient.
Test the golden path and common edge cases for every feature change.
Use episteme worktree feat/<name> for non-trivial frontend features to keep the main branch clean.
Run npm run build and check for type errors before any merge.
Monitor for regressions in existing features when making layout or state changes.

Never expose API keys, secrets, or tokens in frontend code — they are visible to anyone.
Sanitize all user input — XSS, injection, and CSRF risks apply to web surfaces.
Authentication and authorization changes require a review gate before merge.
Validate all data at system boundaries (user input, external APIs) — never in the middle.

planner · implementer · reviewer

review-gate · requirements-to-plan · worktree-split