paqad-ai
Version:
Spec-driven development framework — AI agents that think before they type
42 lines (29 loc) • 2.06 kB
Markdown
verified: 2026-10-31
Fires when the request touches: a third-party API, a webhook, an event, a queue, an MCP server, a cross-service call, a file exchange.
- The contract: the fields, the versions, and the idempotency keys.
- Failure modes and degradation: timeout, retry with backoff, dead-letter, partial failure.
- Webhook verification: signature checks and replay protection.
- Ordering and duplicates: whether events can arrive out of order or more than once.
- Observability of the integration: how a failure is seen and traced.
- Who owns the other side, and how a change to it is coordinated.
- One field or version in the contract.
- One failure mode (timeout, retry, dead-letter).
- The signature or replay check on one webhook.
- One duplicate or ordering case.
- The owner of the far side of one call.
## Questions you typically raise
- What is the exact contract, and does it carry an idempotency key?
- What happens on a timeout, and how many retries with what backoff?
- How is this webhook verified, and can a replayed message do harm?
- Can these events arrive twice or out of order, and does that matter?
- Who owns the other side, and how do we hear about breaking changes?
## For depth
See `runtime/capabilities/coding/agents/integration-architect.md`, the review persona this lens is the request-time version of. This lens does not repeat its steps.
## Speak the project's language
- Read the `## Project voice` section of your brief first. Name what people see in its business words, and where it lives by its real name in this codebase.
- Never invent a synonym. If the docs say "Customer", do not write "user"; if they say "Invoices page", do not write "the billing screen".
- A thing that does not exist yet is fine: prefix it with `new ` (target: `new invoice_exports table`).
- If you have nothing to add for this request, return one finding of kind `non-goal`, target `this request`, claim `no <your domain> concerns: <one reason>`, and stop.