Onboarding Docs
Skill Profile
(Select at least one profile to enable specific modules)
Overview
Developer Onboarding Documentation provides new team members with everything they need to become productive quickly. Good onboarding reduces time-to-first-commit from weeks to days.
Core Principle: "New developers should commit code on day 1, deploy to staging by day 3, and feel confident by week 2."
Why This Matters
Core Concepts & Rules
1. Core Principles
- Follow established patterns and conventions
- Maintain consistency across codebase
- Document decisions and trade-offs
2. Implementation Guidelines
- Start with the simplest viable solution
- Iterate based on feedback and requirements
- Test thoroughly before deployment
Inputs / Outputs / Contracts
- Inputs:
- <e.g., env vars, request payload, file paths, schema>
- Entry Conditions:
- <Pre-requisites: e.g., Repo initialized, DB running, specific branch checked out>
- Outputs:
- <e.g., artifacts (PR diff, docs, tests, dashboard JSON)>
- Artifacts Required (Deliverables):
- <e.g., Code Diff, Unit Tests, Migration Script, API Docs>
- Acceptance Evidence:
- <e.g., Test Report (screenshot/log), Benchmark Result, Security Scan Report>
- Success Criteria:
- <e.g., p95 < 300ms, coverage ≥ 80%>
Skill Composition
- Depends on: None
- Compatible with: None
- Conflicts with: None
- Related Skills: None
Quick Start
```bash
git clone https://github.com/company/project.git
cd project
npm run setup
npm run dev
```
Visit http://localhost:3000
Assumptions
- New developer has basic programming skills
- Company accounts are provisioned
- Hardware is provided
- Team has established practices
Compatibility
- Works with any tech stack
- Language-agnostic principles
- Can be adapted to any team size
Test Scenario Matrix
| Scenario |
Expected Behavior |
Notes |
| New developer joins |
Follow onboarding checklist |
Buddy guides through process |
| First week |
Complete graduated tasks |
Build confidence gradually |
| Month 1 |
Full team integration |
Lead a feature end-to-end |
| Remote onboarding |
Video-based onboarding |
Use async communication |
Technical Guardrails & Security Threat Model
1. Security & Privacy (Threat Model)
- Top Threats: Injection attacks, authentication bypass, data exposure
2. Performance & Resources
3. Architecture & Scalability
4. Observability & Reliability
Agent Directives & Error Recovery
(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)
- Thinking Process: Analyze root cause before fixing. Do not brute-force.
- Fallback Strategy: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.
- Self-Review: Check against Guardrails & Anti-patterns before finalizing.
- Output Constraints: Output ONLY the modified code block. Do not explain unless asked.
Definition of Done
Anti-patterns / Pitfalls
- ⛔ Don't: Log PII, catch-all exception, N+1 queries
- ⚠️ Watch out for: Common symptoms and quick fixes
- 💡 Instead: Use proper error handling, pagination, and logging
Reference Links
Versioning & Changelog
- Version: 1.0.0
- Changelog:
- 2026-02-22: Initial version with complete template structure
1---2name: onboarding-docs-33description: Developer Onboarding Documentation provides new team members with everything they need to become productive quickly. Good onboarding reduces time-to-first-commit from weeks to days. **Core Principle**4---5
6# Onboarding Docs
7
8## Skill Profile
9*(Select at least one profile to enable specific modules)*
10- [ ] **DevOps**
11- [x] **Backend**
12- [ ] **Frontend**
13- [ ] **AI-RAG**
14- [ ] **Security Critical**
15
16## Overview
17Developer Onboarding Documentation provides new team members with everything they need to become productive quickly. Good onboarding reduces time-to-first-commit from weeks to days.
18
19**Core Principle**: "New developers should commit code on day 1, deploy to staging by day 3, and feel confident by week 2."
20
21---
22
23## Why This Matters
24- **<Benefit>**: <short explanation>
25- **<Benefit>**: <short explanation>
26- **<Benefit>**: <short explanation>
27
28## Core Concepts & Rules
29
30### 1. Core Principles
31- Follow established patterns and conventions
32- Maintain consistency across codebase
33- Document decisions and trade-offs
34
35### 2. Implementation Guidelines
36- Start with the simplest viable solution
37- Iterate based on feedback and requirements
38- Test thoroughly before deployment
39
40
41## Inputs / Outputs / Contracts
42* **Inputs**:
43 - <e.g., env vars, request payload, file paths, schema>
44* **Entry Conditions**:
45 - <Pre-requisites: e.g., Repo initialized, DB running, specific branch checked out>
46* **Outputs**:
47 - <e.g., artifacts (PR diff, docs, tests, dashboard JSON)>
48* **Artifacts Required (Deliverables)**:
49 - <e.g., Code Diff, Unit Tests, Migration Script, API Docs>
50* **Acceptance Evidence**:
51 - <e.g., Test Report (screenshot/log), Benchmark Result, Security Scan Report>
52* **Success Criteria**:
53 - <e.g., p95 < 300ms, coverage ≥ 80%>
54
55## Skill Composition
56* **Depends on**: None
57* **Compatible with**: None
58* **Conflicts with**: None
59* **Related Skills**: None
60
61## Quick Start
62\`\`\`bash
63git clone https://github.com/company/project.git
64cd project
65npm run setup
66npm run dev
67\`\`\`
68Visit http://localhost:3000
69
70## Assumptions
71- New developer has basic programming skills
72- Company accounts are provisioned
73- Hardware is provided
74- Team has established practices
75
76## Compatibility
77- Works with any tech stack
78- Language-agnostic principles
79- Can be adapted to any team size
80
81---
82
83## Test Scenario Matrix
84| Scenario | Expected Behavior | Notes |
85|----------|-------------------|-------|
86| New developer joins | Follow onboarding checklist | Buddy guides through process |
87| First week | Complete graduated tasks | Build confidence gradually |
88| Month 1 | Full team integration | Lead a feature end-to-end |
89| Remote onboarding | Video-based onboarding | Use async communication |
90
91---
92
93## Technical Guardrails & Security Threat Model
94
95### 1. Security & Privacy (Threat Model)
96* **Top Threats**: Injection attacks, authentication bypass, data exposure
97- [ ] **Data Handling**: Sanitize all user inputs to prevent Injection attacks. Never log raw PII
98- [ ] **Secrets Management**: No hardcoded API keys. Use Env Vars/Secrets Manager
99- [ ] **Authorization**: Validate user permissions before state changes
100
101### 2. Performance & Resources
102- [ ] **Execution Efficiency**: Consider time complexity for algorithms
103- [ ] **Memory Management**: Use streams/pagination for large data
104- [ ] **Resource Cleanup**: Close DB connections/file handlers in finally blocks
105
106### 3. Architecture & Scalability
107- [ ] **Design Pattern**: Follow SOLID principles, use Dependency Injection
108- [ ] **Modularity**: Decouple logic from UI/Frameworks
109
110### 4. Observability & Reliability
111- [ ] **Logging Standards**: Structured JSON, include trace IDs `request_id`
112- [ ] **Metrics**: Track `error_rate`, `latency`, `queue_depth`
113- [ ] **Error Handling**: Standardized error codes, no bare except
114- [ ] **Observability Artifacts**:
115 - **Log Fields**: timestamp, level, message, request_id
116 - **Metrics**: request_count, error_count, response_time
117 - **Dashboards/Alerts**: High Error Rate > 5%
118
119
120## Agent Directives & Error Recovery
121*(ข้อกำหนดสำหรับ AI Agent ในการคิดและแก้ปัญหาเมื่อเกิดข้อผิดพลาด)*
122
123- **Thinking Process**: Analyze root cause before fixing. Do not brute-force.
124- **Fallback Strategy**: Stop after 3 failed test attempts. Output root cause and ask for human intervention/clarification.
125- **Self-Review**: Check against Guardrails & Anti-patterns before finalizing.
126- **Output Constraints**: Output ONLY the modified code block. Do not explain unless asked.
127
128
129## Definition of Done
130- [ ] README with quick start guide
131- [ ] Architecture documentation with diagram
132- [ ] Development workflow guide
133- [ ] Troubleshooting guide
134- [ ] Team practices documented
135- [ ] Learning resources listed
136- [ ] First week tasks defined
137- [ ] Onboarding buddy guide
138- [ ] Documentation checklist complete
139
140---
141
142## Anti-patterns / Pitfalls
143
144* ⛔ **Don't**: Log PII, catch-all exception, N+1 queries
145* ⚠️ **Watch out for**: Common symptoms and quick fixes
146* 💡 **Instead**: Use proper error handling, pagination, and logging
147
148
149## Reference Links
150- [Onboarding Best Practices](https://hbr.org/topic/onboarding)
151- [Developer Onboarding Guide](https://stackoverflow.blog/developer-onboarding-guide/)
152- [Remote Onboarding Checklist](https://github.com/lukasz-madon/remote-onboarding-checklist)
153
154---
155
156## Versioning & Changelog
157
158* **Version**: 1.0.0
159* **Changelog**:
160 - 2026-02-22: Initial version with complete template structure
161