tigerstyle - SKILL.md Agent Skill

name: tigerstyle description: > Enforces TigerBeetle's coding style and design philosophy when writing or reviewing code. Use when the user asks to write code in TigerStyle, review code against TigerStyle guidelines, or requests high-safety, high-performance systems-level code following TigerBeetle conventions. Covers safety (assertions, static allocation, control flow), performance (batching, resource sketches, mechanical sympathy), and developer experience (naming, comments, formatting). license: Apache-2.0 metadata: author: tigerbeetle version: "1.0" source: "https://github.com/tigerbeetle/tigerbeetle/blob/main/docs/TIGER_STYLE.md"

Apply TigerBeetle's coding style: a discipline where safety, performance, and developer experience — in that order — drive every decision.

Simplicity is the hardest revision. Find the "super idea" that solves safety, performance, and DX simultaneously. Spend mental energy upfront in design — an hour of design is worth weeks in production.
Zero technical debt. Do it right the first time. Never let potential memcpy latency spikes or exponential-complexity algorithms slip through. What we ship is solid.
Design goals in priority order: Safety → Performance → Developer Experience. All three matter; good style advances all three.

Use only very simple, explicit control flow. No recursion.
Put a limit on everything — all loops, all queues must have a fixed upper bound.
Use explicitly-sized types (u32), not architecture-specific (usize).
Assert all function arguments, return values, pre/postconditions, and invariants.
- Minimum two assertions per function.
- Pair assertions: enforce properties from at least two different code paths.
- Split compound assertions: assert(a); assert(b); over assert(a and b);.
- Assert both positive and negative space.
All memory must be statically allocated at startup. No dynamic allocation after init.
Declare variables at the smallest possible scope.
Hard limit of 70 lines per function.
Handle all errors. Handle all compiler warnings at strictest setting.
Split compound conditions into simple nested if/else branches.
State invariants positively.
Don't react directly to external events — run at your own pace, batch instead.

Think about performance from the outset, during design — the 1000x wins live here.
Do back-of-the-envelope sketches for network, disk, memory, CPU (bandwidth + latency).
Optimize for the slowest resource first (network → disk → memory → CPU), weighted by frequency.
Separate control plane from data plane. Batch accesses.
Be explicit. Don't depend on the compiler to do the right thing.
Extract hot loops into standalone functions with primitive arguments (no self).

Naming: Get nouns and verbs just right. Use snake_case. No abbreviations. Put units/qualifiers last, sorted by descending significance (latency_ms_max).
Comments: Always say why. Comments are sentences — capital letter, full stop.
Formatting: zig fmt. 4-space indent. Hard limit 100 columns. Braces on if unless single-line.
Commit messages: Descriptive, informative, delightful. PR descriptions don't replace them.
Dependencies: Zero dependencies policy (apart from Zig toolchain).
Tooling: Use Zig for scripts (scripts/*.zig not scripts/*.sh).
Pass options explicitly at call sites — never rely on library defaults.
Order matters: important things near the top. main goes first. Fields → types → methods.

Check the following in order:

Safety: Are all assertions present? Are limits on loops/queues? Is memory static? Are errors handled? Is control flow simple and explicit?
Performance: Is the design sketch sound? Are accesses batched? Are hot paths clean?
DX: Are names precise? Are comments explaining why? Is formatting correct? Are functions ≤ 70 lines?