a11y-waf
Accessibility standards โ WCAG 2.2 AA compliance, semantic HTML, ARIA roles/properties, keyboard navigation, focus management, color contrast, screen reader com
Accessibility standards โ WCAG 2.2 AA compliance, semantic HTML, ARIA roles/properties, keyboard navigation, focus management, color contrast, screen reader com
Agent coding standards โ ReAct loop, tool selection, memory management, circuit breaker on tools.
AI agent safety standards โ fail-closed defaults, least-privilege tool access, human-in-the-loop for destructive actions, prompt injection defense, budget contr
Agentic OS standards โ .github folder structure, 7 primitives, 4 layers, plugin packaging.
Play 21 patterns โ Agentic RAG patterns โ retrieval decision loop, multi-source routing, query refinement, self-evaluation.
AI glossary consistency โ use standard FAI terminology, avoid ambiguous AI terms in code comments.
Play 11 patterns โ Advanced landing zone โ multi-region, ExpressRoute, Azure Firewall, Policy as Code, Defender for Cloud.
Play 02 patterns โ Landing zone patterns โ hub-spoke VNet, private endpoints on ALL PaaS, Managed Identity, tag enforcement, GPU quota.
Play 17 patterns โ AI observability patterns โ OpenTelemetry spans, token metrics, quality dashboards, alert thresholds.
AI prompt safety in application code โ input sanitization, output validation, structured output enforcement, content filtering, token budget management, system
Play 09 patterns โ Search portal patterns โ faceted search, semantic ranker, result rendering, analytics, personalization.
Play 20 patterns โ Anomaly detection patterns โ streaming analytics, statistical thresholds, ML models, alert routing.
Ansible automation standards โ idempotent playbooks, secure vault usage, role structure, handler patterns, variable naming, error handling, molecule testing, an
Arch Linux packaging standards โ PKGBUILD structure, makepkg rules, dependency management, package signing, AUR submission, namcap validation, split packages, s
ASP.NET Core 9 standards โ Minimal APIs, DI, middleware pipeline, Entra ID auth, EF Core, health checks, rate limiting, output caching, and Azure-native integra
Astro framework standards โ Islands Architecture, content collections, view transitions, SSG/SSR modes, image optimization, MDX, and deployment patterns.
Azure AI Document Intelligence standards โ model selection, layout analysis, table/form extraction, custom models, batch processing, confidence thresholds, SDK
Azure AI Foundry config โ Hub/Project RBAC, deployment types, evaluation pipeline, content filter config.
Azure AI Language standards โ text analytics, NER, sentiment analysis, PII detection, summarization, CLU, custom text classification, healthcare NLP, SDK patter
Azure AI Speech standards โ STT (real-time + batch), TTS (neural voices, SSML, custom voice), speech translation, pronunciation assessment, speaker recognition,
Azure AI Vision standards โ image analysis, OCR, custom classification, spatial analysis, and content safety patterns.
Azure App Service standards โ deployment slots, scaling, authentication, monitoring, and security patterns.
Azure Bicep AVM (Azure Verified Modules) standards โ module usage, parameter patterns, WAF-aligned infrastructure.
Azure Cosmos DB standards โ global distribution, partitioning, consistency, RU optimization, vector search.
Azure DevOps standards โ YAML pipelines, environments, service connections, test management, boards.
Azure Front Door & WAF standards โ global load balancing, WAF rules, caching, SSL offloading, origin protection.
Azure Functions standards โ serverless compute, triggers, bindings, durable functions, cold start optimization.
Azure Logic Apps standards โ workflow automation, connectors, error handling, B2B integration.
Azure Cache for Redis standards โ caching patterns, data structures, pub/sub, clustering, security.
Azure Static Web Apps standards โ static hosting, serverless API, authentication, CI/CD, custom domains.
Bicep Code Best Practices standards โ module design, naming, parameters, outputs, testing
Bicep infrastructure-as-code standards aligned with Azure WAF pillars โ Azure Verified Modules, secure parameter handling, tagging conventions, production deplo
Blazor standards โ Server/WebAssembly/United components, state, performance, security
Play 23 patterns โ Browser automation patterns โ domain allowlist, no credential entry, screenshot analysis, action limits.
Play 04 patterns โ Voice AI patterns โ Azure Speech SDK, real-time transcription, sentiment detection, turn-taking, noise handling.
Clojure Waf standards โ Clojure coding standards โ REPL-driven, immutable data, pure functions, and spec for validation.
Code Review Waf standards โ Code review standards โ what to check, severity levels, constructive feedback, and merge blocking criteria.
Containerization Waf standards โ Containerization standards โ immutability, reproducible builds, health probes, 12-factor.
Play 10 patterns โ Content moderation patterns โ Azure Content Safety, 4 harm categories, threshold tuning, human review pipeline.
Context Engineering Waf standards โ Context engineering standards โ maximize Copilot effectiveness through structured instructions, examples, and constraints.
Copilot extensibility โ Graph connectors, plugin manifest, action design, M365 integration patterns.
Play 08 patterns โ Copilot Studio patterns โ topics, generative answers, knowledge sources, channel deployment, Dataverse integration.
Copilot Studio Waf standards โ Copilot Studio standards โ topic design, generative answers, knowledge sources, channel config.
Play 16 patterns โ Teams extension patterns โ adaptive cards, message extensions, bot framework, Teams toolkit.
Copilot Thought Logging Waf standards โ Copilot thought logging โ track reasoning process, tool selection rationale, confidence levels.
Cost Bicep standards โ Bicep cost optimization โ consumption SKUs, auto-shutdown, tags for cost centers, budget resources.
Play 14 patterns โ AI gateway patterns โ APIM policies, semantic cache, token metering, multi-backend retry, budget enforcement.
Python cost optimization โ token budgets, model routing, caching, batch embedding, async for throughput.
TypeScript cost optimization โ streaming responses, semantic cache, token metering, efficient serialization.
C++ coding standards โ modern C++20/23, RAII, smart pointers, and safe concurrency patterns.
C#/.NET MCP server development standards โ ModelContextProtocol NuGet patterns, [McpServerTool] attributes, dependency injection, IHostedService lifecycle, and
C#/.NET coding standards aligned with Azure WAF pillars โ Managed Identity, async patterns, dependency injection, structured logging, Pydantic-like validation w
Dart/Flutter coding standards โ effective Dart, widget composition, state management, and null safety.
Dataverse SDK standards โ entity operations, metadata, batch requests, and Power Platform integration.
Debian/Ubuntu administration standards โ apt, systemd, UFW firewall, and server hardening.
OOP design patterns โ interface segregation, composition over inheritance, and SOLID principles.
Play 03 patterns โ Deterministic AI patterns โ temperature=0, structured output, grounding, citation, evaluation-driven reliability.
Determinism standards โ temperature=0+seed, structured output, validation pipeline, grounding checks.
Django standards โ models, views, URLs, ORM queries, and security middleware patterns.
Dockerfile standards โ multi-stage builds, non-root user, minimal base images, and security scanning.
Play 06 patterns โ Document processing patterns โ AI Document Intelligence, table extraction, OCR confidence, structured output.
.NET architecture standards โ DDD, SOLID, clean architecture, CQRS, event sourcing.
Draw.io diagram standards โ consistent styling, layers, export formats, and architecture diagram patterns.
Play 19 patterns โ Edge AI patterns โ Phi-4 optimization, ONNX Runtime, quantization, batch size tuning, device constraints.
Entity Framework Core standards โ migrations, query optimization, eager/lazy loading, concurrency handling.
Electron standards โ IPC security, preload scripts, context isolation.
Play 01 patterns โ RAG-specific patterns โ chunking strategy, embedding batch, hybrid search, citation enforcement, hallucination prevention.
FastAPI standards โ Pydantic models, dependency injection, async endpoints, and OpenAPI-first design.
Fine-tuning data standards โ JSONL format, quality validation, class balance, edge case inclusion.
Play 13 patterns โ Fine-tuning patterns โ JSONL data prep, LoRA config, eval metrics, A/B comparison, model versioning.
Flask standards โ blueprints, app factory, SQLAlchemy, and production configuration patterns.
GenAI foundations coding โ token counting, model parameter configuration, inference optimization.
GitHub Actions CI/CD standards โ SHA-pinned actions, minimal permissions, secrets handling, and reusable workflows.
Go MCP server development โ go-sdk/mcp, struct-based I/O, context handling.
Go coding standards โ idiomatic Go, return early, error handling, goroutines, and minimal dependency patterns.
GPU infrastructure standards โ VRAM sizing, quantization selection, serving framework config, scaling rules.
GraphQL standards โ schema design, resolvers, DataLoader, error handling.
gRPC standards โ protobuf design, streaming, error codes, health checking.
HTML/CSS standards โ semantic HTML, accessibility, 60-30-10 color rule, and responsive design.
Play 05 patterns โ IT ticket patterns โ intent classification, knowledge base search, automated resolution, escalation rules.
Java MCP server development โ official SDK, reactive streams, Spring Boot integration.
Java coding standards โ constructor injection, immutable objects, streams API, JUnit 5, and Spring Boot patterns.
Kotlin MCP server development โ coroutines, data classes, Ktor, and Gradle patterns.
Kotlin coding standards โ coroutines, data classes, null safety, extension functions, and Gradle build patterns.
Kubernetes standards โ pod security, resource limits, health probes, and production deployment patterns.
Laravel standards โ Eloquent, Blade, Artisan, queue workers, and security.
LLM selection standards โ model routing config, benchmark-driven selection, cost/quality tradeoffs.
Localization standards โ i18n key management, RTL support, pluralization, date/number formatting.
Markdown standards โ CommonMark, GFM, accessibility, heading hierarchy, and structured documentation.
MAUI standards โ cross-platform, MVVM, dependency injection, platform-specific.
MCP integration patterns โ tool description quality, parameter design, error handling, transport selection.
Persistent project documentation standards โ maintain context across AI sessions with structured memory files.
ASP.NET Minimal API standards โ endpoint routing, DI, filters, OpenAPI, rate limiting.
Play 12 patterns โ Model serving patterns โ vLLM config, GPU scheduling, health probes, autoscaling, quantization selection.
MongoDB standards โ schema design, indexes, aggregation pipelines, and Atlas Vector Search patterns.
Play 07 patterns โ Multi-agent patterns โ supervisor routing, turn limits, token budgets, cross-agent context passing.
Play 22 patterns โ Swarm patterns โ supervisor delegation, specialist budgets, turn management, result synthesis.
Play 15 patterns โ Multi-modal patterns โ GPT-4o Vision, image+text pipelines, PDF rendering, chart interpretation.
NestJS standards โ DI, decorators, modular architecture, Pipes validation, and TypeORM patterns.
Next.js 16 App Router standards โ Server Components by default, streaming with Suspense, Turbopack, Tailwind v4, static export for FAI.dev, and production optim
No heredoc in terminal โ prevent terminal file corruption from heredoc syntax in AI-generated commands.
Nuxt 3 standards โ Vue 3, SSR, auto-imports, and composable patterns.
Object calisthenics standards โ 9 rules for clean, maintainable code across OOP languages.
OpenAPI standards โ spec-first design, versioning, security schemes, examples.
GitHub Actions operational excellence โ reusable workflows, matrix testing, artifact management.
Monitoring standards โ Application Insights, structured logging, custom metrics, alert thresholds.
Power Apps Component Framework standards โ lifecycle methods, React integration, and TypeScript patterns.
Performance optimization standards โ measure first, profile before optimizing, and avoid premature optimization.
Python performance โ async/await, connection pooling, streaming, profiling with cProfile/py-spy.
TypeScript performance โ event loop, streaming SSE, connection pooling, memory profiling.
Pester 5 testing standards โ Describe/It blocks, TestDrive, and PowerShell module testing patterns.
PHP MCP server development โ attributes, typed properties, Composer.
PHP coding standards โ typed properties, attributes, PSR-12, Composer, and modern PHP 8.3+ patterns.
Playwright testing standards โ role-based locators, auto-wait, visual regression, and accessibility testing.
Power Apps Canvas standards โ delegation, collections, component libraries.
Power Apps Model-driven standards โ forms, views, business rules, Dataverse security.
Power Automate flow standards โ error handling, parallel branches, approvals, SLA tracking.
Power BI DAX standards โ CALCULATE patterns, time intelligence, performance optimization.
Power Pages standards โ Liquid templates, web forms, entity permissions, progressive profiles.
Custom connector standards โ OpenAPI definition, auth configuration, throttling, testing.
PowerShell standards โ Verb-Noun naming, PascalCase, standard parameters, and error handling patterns.
Prisma ORM standards โ schema design, migrations, query optimization, relation loading, type safety.
Production deployment standards โ blue-green, canary rollout, health probes, rollback criteria.
Prompt engineering standards โ system message structure, few-shot patterns, output format enforcement.
Play 18 patterns โ Prompt management patterns โ version control, A/B testing, template variables, prompt libraries.
Pydantic standards โ model design, validation, serialization, settings management, custom validators.
pytest testing standards โ fixtures, parametrize, coverage, and mock patterns for Python.
Python MCP server development standards โ FastMCP patterns, @mcp.tool() decorators, Pydantic parameter types, async handlers, resource definitions, and producti
Python coding standards aligned with Azure Well-Architected Framework pillars โ secure credential handling, async patterns, structured error handling, cost-awar
Quarkus standards โ Java 21, CDI, reactive, native compilation patterns.
R coding standards โ vectorized operations, tidyverse, lower_snake_case, and reproducible analysis patterns.
RAG coding standards โ chunking config, embedding batch calls, reranker integration, citation injection.
Responsible AI bias testing โ disaggregated metrics, diverse evaluation datasets, fairness benchmarks.
Responsible AI content safety โ Azure Content Safety integration, filter thresholds, PII redaction.
Ruby on Rails standards โ MVC conventions, Active Record, migrations, and RuboCop enforcement.
C# reliability standards โ Polly retry/circuit breaker, health checks, exception handling, resilience.
Python reliability standards โ retry with tenacity, circuit breakers, health checks, structured logging.
TypeScript reliability standards โ AbortSignal timeout, retry patterns, health endpoints, error boundaries.
Responsible AI coding โ content safety integration, red team test coverage, bias metric collection.
Ruby MCP server development โ mcp gem, block DSL, Rails integration.
Ruby coding standards โ Ruby 3.3+, RuboCop enforcement, Ractor patterns, and Rails conventions.
Rust MCP server development โ rmcp SDK, tokio, proc macros, serde, and high-performance tool serving.
Rust coding standards โ ownership, lifetimes, ResultT,E, serde, tokio async, and memory safety patterns.
Salesforce Apex standards โ bulkification, governor limits, trigger patterns, and testing.
Salesforce Lightning Web Components standards โ reactive properties, wire adapters, and accessibility.
Scala coding standards โ immutability, val over var, pattern matching, and functional programming patterns.
Bicep security standards โ @secure() parameters, private endpoints, Managed Identity, diagnostic settings.
C# security standards โ parameterized queries, output encoding, anti-forgery tokens, secure headers.
Comprehensive OWASP security standards for all code โ covers Top 10 vulnerabilities, LLM-specific security (OWASP Top 10 for LLMs), input validation, output enc
Python security standards โ input validation, secrets handling, dependency scanning, SQL injection prevention.
TypeScript security standards โ XSS prevention, CSP headers, input sanitization, dependency audit.
Self-documenting code standards โ comment WHY not WHAT, meaningful names, and code as documentation.
Semantic Kernel standards โ kernel config, plugin design, filter pipeline, memory store integration.
Shell scripting standards โ set -euo pipefail, safe expansions, quoting, and portable POSIX patterns.
SignalR real-time standards โ hub design, groups, streaming, connection management, Azure SignalR Service.
Spring Boot standards โ constructor injection, profiles, YAML config, and production patterns.
SQL optimization standards โ index strategy, query plans, normalized design, and migration patterns.
SQLAlchemy standards โ async sessions, relationship mapping, migration with Alembic, connection pooling.
Svelte 5 standards โ runes, SvelteKit, TypeScript, and minimal-bundle patterns.
Swift MCP server development โ actors, Codable, async/await patterns.
Swift coding standards โ actors for concurrency, Codable, async/await, SwiftUI, and value types over reference types.
Tailwind CSS v4 standards โ utility-first, component extraction, responsive design, and dark mode patterns.
Taming Copilot โ prevent overreach, enforce constraints, verify before executing, undo patterns.
Terraform Azure standards โ AVM modules, CALMS framework, modular design.
Terraform standards โ latest providers, modular design, state safety, and secrets management.
Polyglot testing standards โ unit, integration, and E2E testing patterns for AI applications. Covers pytest, Vitest, xUnit, Playwright, mock strategies for LLM
tRPC standards โ router design, middleware, error handling, type-safe API calls, input validation.
TypeScript MCP server development standards โ @modelcontextprotocol/sdk patterns, Zod parameter schemas, McpServer class, stdio/SSE transports, and npm publishi
TypeScript/JavaScript coding standards aligned with Azure WAF pillars โ secure credential handling, async patterns, Zod validation, structured error handling, a
Uvicorn/ASGI standards โ worker config, graceful shutdown, health checks, production settings.
Vitest testing standards โ ES2022, snapshot testing, coverage, and mock patterns for Node.js/TypeScript.
WinUI 3 standards โ XAML, MVVM, Windows App SDK patterns.
WordPress development standards โ hooks/filters, custom post types, security, and performance.
WPF standards โ MVVM, data binding, commands, styles, templates.
xUnit testing standards โ Fact/Theory, FluentAssertions, and integration testing with WebApplicationFactory.
Zod validation standards โ schema design, type inference, transform, error messages, API input validation.