# Cubis Engineers

> Practical engineering knowledge for humans and AI agents. Use the focused Markdown pages for retrieval, or fetch the complete corpus.

## Documentation

- [Documentation](/llms.mdx/docs/content.md): Guides for learning, deploying software, and running systems at Cubis.
- [Agentic Engineering](/llms.mdx/docs/ai-development/agentic-engineering/content.md): Design AI agents with bounded tools, least privilege, human approvals, and observable recovery.
- [AI-Assisted Work](/llms.mdx/docs/ai-development/assisted-work/content.md): Use AI for exploration, implementation, and review while keeping the engineer in control.
- [Context and Review](/llms.mdx/docs/ai-development/context-and-review/content.md): Give AI useful context, detect confident mistakes, and keep generated work concise and maintainable.
- [AI in Development](/llms.mdx/docs/ai-development/content.md): Use AI to improve engineering work without giving up judgment, security, or ownership.
- [Security and Ethics](/llms.mdx/docs/ai-development/security-and-ethics/content.md): Protect sensitive information, verify generated code, and consider the people affected by AI-assisted work.
- [Ansible for Cloud Infrastructure](/llms.mdx/docs/ansible/content.md): Automate repeatable Linux server tasks from one control machine without installing an agent on every server.
- [Inventory and access](/llms.mdx/docs/ansible/inventory-and-access/content.md): Group Linux servers, define SSH connection details, and verify Ansible can reach the intended hosts.
- [Safe automation workflow](/llms.mdx/docs/ansible/safe-workflow/content.md): Review the target and changes, test one server, roll out in small batches, and verify the result.
- [Server baseline playbook](/llms.mdx/docs/ansible/server-baseline/content.md): Apply a small, repeatable Linux baseline with packages, an operations group, time settings, and a running service.
- [Compose Applications](/llms.mdx/docs/docker/compose/content.md): Define a multi-container application with explicit health, network, secret, and storage boundaries.
- [Images and Builds](/llms.mdx/docs/docker/images-and-builds/content.md): Build a small non-root image, use the cache deliberately, and publish an identifiable artifact.
- [Docker for Cloud Engineers](/llms.mdx/docs/docker/content.md): Build reproducible images, run isolated application processes, and operate them safely.
- [Container Operations](/llms.mdx/docs/docker/operations/content.md): Investigate container failures, release immutable images, protect persistent data, and reclaim space safely.
- [Documentation as Engineering Work](/llms.mdx/docs/engineering-journal/documentation-as-engineering-work/content.md): Treat documentation as a maintained interface for people, teams, and engineering tools.
- [Incident Notes That Lead to Action](/llms.mdx/docs/engineering-journal/incident-notes-that-lead-to-action/content.md): Write timelines and follow-up work that help teams learn without hiding accountability.
- [Engineering Journal](/llms.mdx/docs/engineering-journal/content.md): Articles and field notes shared by Cubis engineering teams.
- [Safer Infrastructure Changes](/llms.mdx/docs/engineering-journal/safer-infrastructure-changes/content.md): A practical review for reducing uncertainty before, during, and after a production change.
- [Collaboration](/llms.mdx/docs/engineering-practice/collaboration/content.md): Communicate context, review ideas fairly, and make it safe to surface risks and ask for help.
- [Engineering Judgment](/llms.mdx/docs/engineering-practice/engineering-judgment/content.md): Make technical decisions from evidence, explicit trade-offs, and the needs of the system.
- [Engineering Practice](/llms.mdx/docs/engineering-practice/content.md): Develop technical judgment, human skills, and working habits that help people and the company grow.
- [Ownership and Growth](/llms.mdx/docs/engineering-practice/ownership-and-growth/content.md): Connect engineering work to customer outcomes, reliable operation, and long-term company value.
- [Sustainable Teams](/llms.mdx/docs/engineering-practice/sustainable-teams/content.md): Build trust, learning, leadership, and a healthy pace that can support a long-term mission.
- [Collaboration](/llms.mdx/docs/git/collaboration/content.md): Update branches, resolve conflicts, and prepare work for review without rewriting shared history.
- [Git for Engineering Teams](/llms.mdx/docs/git/content.md): A practical daily workflow for creating small, understandable changes.
- [Recovery](/llms.mdx/docs/git/recovery/content.md): Choose the least destructive Git command for uncommitted, committed, or apparently lost work.
- [Server access and security](/llms.mdx/docs/linux/access-and-hardening/content.md): Replace unsafe defaults with SSH keys, limited identities, a default-deny firewall, and a safe change sequence.
- [Deploying applications](/llms.mdx/docs/linux/deployment/content.md): Ship a containerized web application behind Nginx and TLS with explicit release and rollback procedures.
- [Linux foundations](/llms.mdx/docs/linux/foundations/content.md): Learn the filesystem, shell, package manager, and permission model you use on every server.
- [Linux for Cloud Engineers](/llms.mdx/docs/linux/content.md): Learn how to set up, secure, deploy to, and maintain a modern Linux server.
- [Operations and recovery](/llms.mdx/docs/linux/operations/content.md): Observe server health, investigate failures in a reliable order, control logs, and restore from tested backups.
- [Linux command reference](/llms.mdx/docs/linux/quick-reference/content.md): A compact operational reference for daily server work and first-response troubleshooting.
- [Services and networking](/llms.mdx/docs/linux/services-and-networking/content.md): Run applications with systemd and trace requests across DNS, sockets, firewalls, and HTTP.
- [Addressing and Routing](/llms.mdx/docs/networking/addressing-and-routing/content.md): Read IP prefixes, cloud subnets, gateways, and the routes a Linux host will use.
- [DNS, HTTP, and TLS](/llms.mdx/docs/networking/dns-http-tls/content.md): Trace a hostname through DNS resolution, TCP connection, TLS validation, and HTTP response.
- [Networking for Cloud Engineers](/llms.mdx/docs/networking/content.md): Understand how traffic moves from a client to a cloud application and back.
- [Network Troubleshooting](/llms.mdx/docs/networking/troubleshooting/content.md): Isolate DNS, routing, firewall, socket, TLS, proxy, and application failures in a fixed order.
- [Act on Evidence](/llms.mdx/docs/problem-solving/act-on-evidence/content.md): Turn a useful explanation into a small, owned action with clear success and failure signals.
- [Problem Solving](/llms.mdx/docs/problem-solving/content.md): How to think, act, and innovate smarter in an AI-assisted world.
- [Innovate Smarter](/llms.mdx/docs/problem-solving/innovate-smarter/content.md): Create better options, test value early, and turn useful learning into durable improvement.
- [Think Clearly](/llms.mdx/docs/problem-solving/think-clearly/content.md): Frame the right problem, separate evidence from assumptions, and find causes worth testing.
- [Detection and Response](/llms.mdx/docs/security/detection-and-response/content.md): Turn host, identity, network, and application events into alerts a team can act on.
- [Honeypots](/llms.mdx/docs/security/honeypots/content.md): Use isolated decoy services to detect scanning, credential abuse, and lateral movement safely.
- [Security for Cloud Operations](/llms.mdx/docs/security/content.md): Protect Linux services, detect suspicious behavior, and respond without losing evidence.
- [Server Protection](/llms.mdx/docs/security/server-protection/content.md): Build a small, observable Linux attack surface with controlled access and tested recovery.
- [Threat Resilience](/llms.mdx/docs/security/threat-resilience/content.md): Prepare practical controls and response decisions for DDoS, malware, ransomware, and zero-day risk.
- [DNS and Reverse Proxy](/llms.mdx/docs/networking/cloudflare/dns-and-proxy/content.md): Route eligible web traffic through Cloudflare while keeping DNS, TLS, and origin boundaries clear.
- [Cloudflare for Web Infrastructure](/llms.mdx/docs/networking/cloudflare/content.md): Use Cloudflare DNS, reverse proxy, edge security, and Tunnel with clear trust boundaries.
- [Tunnel and Access](/llms.mdx/docs/networking/cloudflare/tunnel-and-access/content.md): Connect services through outbound tunnels and authorize access with identity and device policy.
- [WAF and DDoS](/llms.mdx/docs/networking/cloudflare/waf-and-ddos/content.md): Apply managed rules, rate limits, caching, and origin controls without blocking normal users blindly.

## Complete corpus

- [All Cubis Docs in one file](/llms-full.txt)