Handbook
Capablio enterprise uplift — Cursor dual-wiki prompt pack
Version: 1.0 Date: 2026-07-17 Purpose: Turn the current Capablio prototype into an enterprise-grade product spanning public marketing, customer documentation, role-aware application workspaces, tenant administration, and…
Updated
What is in this pack
This is an implementation prompt hierarchy, not a visual mockup or a completed application. It contains:
- A screen-by-screen audit of the supplied 18-screen prototype.
- A target product and information architecture.
- A dual-wiki operating model so customer-facing truth and internal system truth remain synchronized.
- Layout, design-system, accessibility, responsive, and data-visualization rules.
- Role and data-visibility models for global administrators, tenant administrators, HR, managers, users, and external raters.
- Copy-paste Cursor prompts sequenced from repository discovery through release hardening.
- Starter
AGENTS.md, flat.cursor/rules/*.mdcfiles, wiki manifests, templates, and traceability scaffolding.
Source material used
20260717T081249Z.zip: 18 current-state Capablio screenshots and short page descriptions.capablio-framework-v0.1.zip: adaptive question, cadence, cooldown, PDP, rotation, tenant-overlay, analytics, privacy, integration, and pricing architecture.360 Report Leonid Zvyahintsev(2).pdf: Thomas-compatible input shape and report concepts.Leo_360_Snapshot(2).pdf: development-conversation, anonymity, interpretation, and PDP concepts.
The product name is normalized to Capablio, matching the supplied application screens. Do not silently rename domains, packages, legal entities, or existing database identifiers without an explicit migration decision.
Recommended use
- Copy
starter/AGENTS.md,starter/.cursor/rules/, andstarter/wiki/into the repository root. - Run prompts in numeric order. Do not run implementation prompts in parallel unless they touch disjoint applications and share a frozen design-system version.
- Start with Cursor Ask or Plan mode for prompts
00through02; they are discovery and architecture prompts. - Allow code changes beginning with prompt
03only after the dual wiki, route map, role matrix, and architecture decisions exist. - At the end of every prompt, require Cursor to update both wikis, the feature index, and the traceability matrix.
- Keep one commit or pull request per prompt unless a prompt explicitly defines smaller feature slices.
Prompt hierarchy
| Level | Purpose | Files |
|---|---|---|
| L0 | Product constitution and non-negotiable rules | starter/AGENTS.md, .cursor/rules/000-* |
| L1 | Cross-cutting rules: wiki, layout, accessibility, security, content, tests | .cursor/rules/010-* through 070-* |
| L2 | Repository and product architecture | prompts/00-* through 02-* |
| L3 | Experience foundations | prompts/03-* through 06-* |
| L4 | Persona workspaces | prompts/07-* through 11-* |
| L5 | Domain workflows | prompts/12-* through 15-* |
| L6 | Quality, migration, and release | prompts/16-* through 18-* |
| L7 | Reusable page and feature micro-prompts | prompts/templates/* |
Read first
00-current-state-audit.md02-dual-wiki-operating-model.md04-layout-and-design-system-guidelines.md05-role-permission-and-data-visibility-model.md07-prompt-hierarchy.md
Important boundaries
- Capablio is a development and feedback product, not a diagnostic, compensation, disciplinary, or automated employment-decision engine.
- Imported Thomas data is external evidence. It must retain source lineage and must not be blended into native longitudinal trends without an explicit, validated bridge.
- Never expose raw JSON, internal IDs, bearer tokens, encryption-envelope terminology, or database states in normal user interfaces.
- Global platform operators must not gain plaintext access to tenant feedback merely because they can administer the platform.
- A role label is not sufficient authorization. Every server-side operation must evaluate tenant, resource, action, scope, and data class.
- Do not fabricate customer logos, testimonials, certifications, benchmark claims, usage numbers, or security attestations on the marketing site.