vibetags-guardrailslisted

<!-- VIBETAGS-START --> <!-- VIBETAGS-MODULE: cli --> # AUTO-GENERATED AI RULES # Generated by VibeTags | https://github.com/PIsberg/vibetags # Do not edit manually. ## LOCKED FILES (DO NOT EDIT) ## CONTEXTUAL RULES ## 🛡️ MANDATORY SECURITY AUDITS When proposing edits or writing code for the following files, you MUST perform a security review before outputting the final code. You must explicitly state in your response that you have audited the changes for the required vulnerabilities. * `com.example.multimodule.cli.MultiModuleCli` - Required Checks: Path Traversal ## 🔐 CONTRACT-FROZEN SIGNATURES The following elements have contract-frozen public signatures. You MAY change internal implementation logic, but MUST NOT modify method names, parameter types, parameter order, return types, or checked exceptions. * `com.example.multimodule.cli.MultiModuleCli.run(java.lang.String[])` - Public CLI surface; flags are documented downstream ## 🧪 TEST-DRIVEN REQUIREMENTS The following elements require a corresponding test update whenever their logic is modified. AI MUST NOT propose changes to these elements without also providing the matching test code. * `com.example.multimodule.cli.MultiModuleCli` - Coverage goal: 100%. Framework: JUNIT_5. Test file: src/test/java/com/example/multimodule/cli. ## ♻️ IDEMPOTENCY GUARANTEES The following operations are idempotent. Multiple invocations MUST produce the same result as a single invocation. Never introduce side effects that break