feat(standards): add Rust to template configuration (#2)

* feat(standards): add Rust to template configuration

Add commented rust entry to .devrail.yml and pre-commit-cargo hooks
to .pre-commit-config.yaml for Rust language support.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* docs(standards): add critical rule 7 — never suppress failing checks

Add a seventh critical rule to all agent shim files: never suppress
failing checks. Fix the root cause instead of adding blanket
suppressions, commenting out code, or disabling rules.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: matthew-on-git

.cursorrules

@@ -19,6 +19,10 @@ Critical Rules:
 6. Use the shared logging library. No raw `echo` for status messages. Use
    `log_info`, `log_warn`, `log_error`, `log_debug`, and `die` from
    `lib/log.sh`.
+7. Never suppress failing checks. When a lint, format, security, or test
+   check fails, fix the underlying issue. Never comment out code, add
+   suppression annotations, disable rules, or mark CI jobs as
+   allowed-to-fail to bypass a failing check.
 
 Quick Reference:
 

.devrail.yml

@@ -9,6 +9,7 @@ languages:
   # - ruby
   # - go
   # - javascript
+  # - rust
 
 # fail_fast: false          # default: false (run-all-report-all)
 # log_format: json          # default: json | options: json, human

.opencode/agents.yaml

@@ -24,6 +24,10 @@ agents:
       6. Use the shared logging library. No raw `echo` for status messages. Use
          `log_info`, `log_warn`, `log_error`, `log_debug`, and `die` from
          `lib/log.sh`.
+      7. Never suppress failing checks. When a lint, format, security, or test
+         check fails, fix the underlying issue. Never comment out code, add
+         suppression annotations, disable rules, or mark CI jobs as
+         allowed-to-fail to bypass a failing check.
 
       Quick Reference:
 

.pre-commit-config.yaml

@@ -71,6 +71,16 @@ repos:
   #   hooks:
   #     - id: prettier
 
+  # --- Rust (uncomment if languages includes rust) ---
+  # Formatting and linting with cargo
+  # - repo: https://github.com/AndrejOrsula/pre-commit-cargo
+  #   rev: v0.4.0
+  #   hooks:
+  #     - id: cargo-fmt
+  #       args: ["--all", "--", "--check"]
+  #     - id: cargo-clippy
+  #       args: ["--all-targets", "--all-features", "--workspace", "--", "-D", "warnings"]
+
   # --- Secret Detection ---
   # Detects hardcoded secrets, API keys, and credentials in code
   - repo: https://github.com/gitleaks/gitleaks

AGENTS.md

@@ -11,6 +11,7 @@ See DEVELOPMENT.md for the complete reference.
 4. **Respect `.editorconfig`.** Never override formatting rules (indent style, line endings, trailing whitespace) without explicit instruction.
 5. **Write idempotent scripts.** Every script must be safe to re-run. Check before acting: `command -v tool || install_tool`, `mkdir -p`, guard file writes with existence checks.
 6. **Use the shared logging library.** No raw `echo` for status messages. Use `log_info`, `log_warn`, `log_error`, `log_debug`, and `die` from `lib/log.sh`.
+7. **Never suppress failing checks.** When a lint, format, security, or test check fails, fix the underlying issue. Never comment out code, add suppression annotations, disable rules, or mark CI jobs as allowed-to-fail to bypass a failing check.
 
 ## Quick Reference
 

CLAUDE.md

@@ -11,6 +11,7 @@ See DEVELOPMENT.md for the complete reference.
 4. **Respect `.editorconfig`.** Never override formatting rules (indent style, line endings, trailing whitespace) without explicit instruction.
 5. **Write idempotent scripts.** Every script must be safe to re-run. Check before acting: `command -v tool || install_tool`, `mkdir -p`, guard file writes with existence checks.
 6. **Use the shared logging library.** No raw `echo` for status messages. Use `log_info`, `log_warn`, `log_error`, `log_debug`, and `die` from `lib/log.sh`.
+7. **Never suppress failing checks.** When a lint, format, security, or test check fails, fix the underlying issue. Never comment out code, add suppression annotations, disable rules, or mark CI jobs as allowed-to-fail to bypass a failing check.
 
 ## Quick Reference