Onboarding

Traceo

20 cards ~ 1.8 h Foundational

Foundational walk through the traceo project. Read top to bottom if you're new; no prior context assumed.

  1. traceo beginner 6 min

    Two-Service MCP & Engine Architecture (as deployed)

    Use when: deciding which service owns a new endpoint; debugging cross-service request flow; onboarding to the Traceo backend; adding a route and wondering why it 404s in production

  2. traceo intermediate 7 min

    Requirement & Relationship Schema (Drizzle base + 007–023)

    Use when: adding a new requirement field to migrations; writing a new traceability relationship type; debugging why a link exists in one direction only; working out which tenant a user belongs to

  3. traceo beginner 4 min

    Classification Layers & Status Lifecycle

    Use when: approving a requirement for implementation; deprecating an obsolete requirement; filtering the traceability matrix by layer; assuming the server will stop an out-of-order status change (it will not)

  4. traceo intermediate 7 min

    JWT Auth: BetterAuth ES256 via JWKS, the GHA OIDC Machine Issuer, and RBAC

    Use when: adding a new permission to a tool; debugging 401/403 responses; wiring a CI job to read Traceo without a shared secret; assuming @require_permission protects a route (check ENABLE_RBAC first)

  5. traceo advanced 8 min

    Multi-Tenant RLS: app.* GUCs, traceo_app, and the Derived Tenant

    Use when: adding a new tenant-scoped table; debugging empty result sets that should have rows; auditing cross-tenant leakage risk; writing a test that claims to prove isolation

  6. traceo beginner 4 min

    Per-IP Fixed-Window Rate Limiter (engine only, as deployed)

    Use when: tuning MCP_RATE_LIMIT or ENGINE_RATE_LIMIT; debugging unexpected 429 responses; exempting a new health-check path; assuming the MCP server is rate limited (it is not, in production)

  7. traceo intermediate 6 min

    Engine CSV Ingestion Jobs: In-Memory, YAML-Out, No Webhook

    Use when: uploading a CSV requirement set through the engine; debugging a stuck `running` job; extending the ingestion validators; wondering why ingested rows never appear in the requirements table

  8. traceo intermediate 6 min

    FastMCP Tool Surface (31 tools, HTTP-deployed)

    Use when: registering a new MCP tool; auditing the tool catalogue; working out what actually guards a tool call in production

  9. traceo intermediate 6 min

    Ariel Baselines: Upstream-Only Writes, Allowlisted Reads

    Use when: freezing a baseline before a release review; diffing two baselines to produce a change report; syncing a frozen baseline into a workspace's requirements; wondering why baseline create/freeze returns BASELINE_WRITE_DISABLED

  10. traceo intermediate 5 min

    pgvector RAG Embeddings

    Use when: tuning embedding recall vs latency; rebuilding the HNSW index after a model swap; adding a new RAG-backed tool

  11. traceo beginner 6 min

    Observability State & Gaps (as served, 2026-10)

    Use when: writing an alert and checking the metric is actually emitted; scraping Traceo with Prometheus; answering 'do we have correlation IDs?'; reading the tenant-resolve counters

  12. traceo beginner 3 min

    The Audit Room at 9pm

    Use when: writing the Traceo homepage hero or one-line description; explaining what category Traceo lives in

  13. traceo beginner 4 min

    Two Rooms, One Product

    Use when: deciding which case study or testimonial to lead with; qualifying an inbound lead before a demo

  14. traceo beginner 3 min

    Exact. Calm. Expert.

    Use when: writing copy for the Traceo site, docs, or a launch post; reviewing a draft for voice match before it ships

  15. traceo beginner 4 min

    End-to-End or Nothing

    Use when: explaining what success looks like for Traceo's first program; answering 'why not just ship the MCP server first'

  16. traceo beginner 4 min

    Modernising the Category, Not the Aesthetic

    Use when: answering 'how is Traceo different from DOORS, Polarion, or Jama'; answering 'how is Traceo different from a Linear-style tool for specs'

  17. traceo intermediate 7 min

    Billing Through TOLL: One Capability, traceo.team

    Use when: touching checkout, change-plan or entitlements in the web client; explaining why Solo limits are shown but never enforced; turning the founding offer on or off; debugging a CHECKOUT_DISCOUNT_REFUSED or BILLING_NOT_CONFIGURED response

  18. traceo intermediate 6 min

    The Deploy Observer: Outcome, Non-Outcome, Not-Yet

    Use when: a merge is green but production might not have it; reading a deploy-observability failure page in #pipeline; classifying a Railway deploy status you have not seen before; deciding how long an in-flight deploy may sit before it counts as stuck

  19. traceo intermediate 6 min

    Where Traceo CI Runs: Hosted, Hermes Fleet, Hosted Nightly

    Use when: opening a PR and wondering why no CI ran; dispatching Traceo CI by hand before a merge; reading a red board full of jobs with no runner; asking whether CI blocks a merge (it never has)

  20. traceo intermediate 6 min

    Docs Are Not the Deployment: The Corroborated False Description

    Use when: auditing whether a control (test, middleware, gate) actually runs; writing a card, runbook or comment that says a mechanism does something; three documents agree and you are about to stop checking