hime

Nested Rails monolith + GraphQL API. Audited against Boris Cherny Steps of AI Adoption — repo harness only. 2026-08-04.

Step 1

Assisted (current)

~28%

Toward Step 2 Parallel

1,279

Ruby files under hime/

No PR CI

Deploy-only workflows

Verdict

Step 1 (Assisted). Solid local pair path via README, bin/setup, DevContainer, RSpec, and RuboCop. Blocked from Parallel by thin verification, no CI test gate, tracked secrets, no agent memory, and fixed ports/DB that collide across worktrees.

Unlock scores (0–100)

0→1 Access

1→2 Verify

2→3 Autonomy

3→4 Scale

Stack snapshot

Metric	Value	Evidence
Shape	Nested Rails under `hime/`	hime/, aws_lambda/, .devcontainer/
Ruby / Rails	2.7.7 / 6.1	hime/Gemfile · .ruby-version says 2.6.4 (mismatch)
DB	PostGIS	docker-compose.yml (17-3.5) · README/devcontainer still 10.x
API	GraphQL-first	hime/app/graphql/ — 244 files
Models / controllers	116 / 81	hime/app/models · controllers
Utils / domain	239	hime/app/utils
RSpec files	153	models 18 · controllers 14 · graphql 37 · utils 84
Model-spec density	~15.5% (18/116)	hime/spec/models

Gate checklist

Gate	Status	Evidence
Setup docs	Partial	`hime/README.md`, `hime/bin/setup`, `.devcontainer/`. Ruby/PostGIS version contradictions.
Secrets safe	Gap	`hime/.env` git-tracked (`!.env` in gitignore). No `.env.example`. Live-style keys present.
Agent memory	Gap	No `CLAUDE.md`, `AGENTS.md`, or `.cursor/rules`.
Tests + lint	Partial	RSpec + RuboCop configs exist. No SimpleCov. Sparse domain coverage. No factory_bot.
CI verify on PR	Gap	`.github/workflows/deploy-to-staging.yml` deploy-only. `bitbucket-pipelines.yml` build/push only. No PR test job.
Security scan	Gap	No Brakeman / bundler-audit in Gemfile or CI.
E2E / HTTP stubs	Gap	Capybara in Gemfile but 0 system specs. No WebMock/VCR.
Worktree isolation	Gap	Fixed ports 3000/5432; test DB hard-coded `hime-test`; Compose `POSTGRES_DB=hime`.
Automated review	Gap	No CODEOWNERS, Dependabot, or review-bot wiring.

What enables Step 1

Local setup path	`hime/README.md` · `bin/setup` · `bin/dev`
DevContainer	`.devcontainer/devcontainer.json` + compose
Lint / test tooling	`hime/.rubocop.yml` · `hime/spec/` · `hime/.rspec`
Clear domain folders	models · graphql · utils (Forms/Services pattern)

Top 5 moves to unlock Step 2

Secrets hygiene — Untrack hime/.env; remove !.env from gitignore; add .env.example; rotate exposed credentials.
PR verify CI — Add .github/workflows/ci.yml running rspec + rubocop (PostGIS service); optional SimpleCov gate.
Agent memory — Add AGENTS.md / CLAUDE.md + .cursor/rules covering nested layout, GraphQL, Forms/Services, verify commands.
Worktree isolation — Parameterize Compose ports and APP_DATABASE_NAME / test DB via env (not fixed hime / 3000 / 5432).
Security + review bar — Brakeman + bundler-audit in CI; default PR auto-review.

One-liner

hime = Step 1 (Assisted), ~28% to Step 2 — solid local pair path; blocked by tracked secrets, no PR verify CI, no agent memory, no parallel worktree isolation.

Next: E2E API safety net

Separate from AI adoption: complete HTTP-level coverage of GraphQL + REST + scheduler (TEMP-app + findTEMP-webapp use cases) with parallel Testcontainers — → hime end-to-end API test plan.