BUILD OS · PATTERN LIBRARY

Rules extracted from real product work.

Each pattern states a rule, its failure mode and a way to verify it. Sources are labelled as documentation, not presented as benchmark results.

• The server is the source of truth for access and payment state

  The browser may request or display a state change; only a verified server-side operation should authorize durable access.

  Rule and verification →

• Authentication is not authorization

  A valid session identifies a caller. Each protected resource still needs an explicit ownership, role or tenant decision.

  Rule and verification →

• Verify the current behavior before asking an agent to refactor it

  Capture the existing behavior and the regression check before broadening a code change.

  Rule and verification →