# Resources and Prompts

## Resource URI schemes

```text
itworx-project://<project>/<environment>/status
itworx-docs://<project>/<source>/<path-or-id>
itworx-git://<project>/<repository>/<ref>/<path>
itworx-unraid://<project>/<environment>/container/<registered-ref>
itworx-audit://event/<id>
```

Rules:

- custom URIs do not reveal physical server paths;
- identifiers are canonical and encoded once;
- resource access repeats project/client authorization;
- large resources use metadata plus bounded retrieval;
- symlink and path containment rules apply before reading content.

## Initial prompts

- `project-health-review`;
- `incident-triage`;
- `repository-onboarding`;
- `release-readiness-review`;
- `security-posture-review`.

Prompts structure a user-initiated workflow. They do not grant permissions, hide tool calls, or autonomously execute write actions.