governance (治理)

Unified skill for constraint governance state, periodic reviews, index generation,
round-trip verification, and schema migration. Consolidates 6 granular skills.

Trigger: 定期保守 (periodic maintenance) or HEARTBEAT

Source skills: constraint-reviewer, index-generator, round-trip-tester, governance-state, slug-taxonomy, adoption-monitor (from safety)

Installation

CODEBLOCK0

Dependencies:

• - leegitw/constraint-engine (for constraint data)
• INLINECODE1 (for observation data)

CODEBLOCK1

Standalone usage: Index generation and round-trip verification work independently.
Full governance features require constraint-engine and failure-memory integration.

Data handling: This skill operates within your agent's trust boundary. When triggered,
it uses your agent's configured model for governance analysis and review. No external APIs
or third-party services are called. Results are written to output/governance/ in your workspace.

What This Solves

Constraints that never get reviewed become stale. Rules that never get challenged become dogma. This skill manages the lifecycle:

1. 1. State tracking — know which constraints are active, suspended, or retired
2. Periodic reviews — 90-day gates to re-evaluate constraints against current evidence
3. Index generation — dashboards showing constraint health at a glance

The insight: Good governance is proactive. Constraints need maintenance, not just creation.

Usage

CODEBLOCK2

Sub-Commands

Command	CJK	Logic	Trigger
INLINECODE3	状態	centralstate, event→alert	HEARTBEAT
INLINECODE4

審査 | constraints.due→reviewqueue | HEARTBEAT | | /gov index | 索引 | skills[]→INDEX.md | Explicit | | /gov verify | 検証 | round_trip(source↔compiled)→sync✓∨drift✗ | Explicit | | /gov migrate | 移行 | schema.v(n)→schema.v(n+1) | Explicit |

Arguments

/gov state

Argument	Required	Description
--summary	No	Show summary only (default: full state)
--alerts

No | Show pending alerts only |

/gov review

Argument	Required	Description
--due	No	Show only due reviews (default)
--all

No | Show all constraints with review dates | | --complete | No | Mark review as complete |

/gov index

Argument	Required	Description
--path	No	Output path (default: agentic/INDEX.md)
--format

No | Format: markdown (default), json |

/gov verify

Argument	Required	Description
source	Yes	Source file or directory
compiled

Yes | Compiled/generated file or directory | | --strict | No | Fail on any difference |

/gov migrate

Argument	Required	Description
--to	Yes	Target schema version
--dry-run

No | Show changes without applying |

Configuration

Configuration is loaded from (in order of precedence):

1. 1. .openclaw/governance.yaml (OpenClaw standard)
2. INLINECODE12 (Claude Code compatibility)
3. Defaults (built-in)

Core Logic

Governance State Model

CODEBLOCK3

Review Cycle

Constraints require periodic review. The review cadence is configurable (default: 90 days):

CODEBLOCK4

Days Since Last Review	Status	Action
0-75	Current	No action
76-90

Approaching | Warning alert |
| 91+ | Overdue | Escalation alert |

⚠️ Advisory Only: This review cycle is not enforced programmatically.
Compliance relies on HEARTBEAT P3 checks and manual diligence.
Automated enforcement (/gov review --automated) is planned for future release.
See HEARTBEAT.md for current verification schedule.

Adoption Monitoring

Track constraint adoption across sessions:

Metric	Calculation	Target
Adoption rate	Sessions with constraint used / Total sessions	>80%
Violation rate

Violations / Checks | <5% |
| Override rate | Overrides / Violations | <20% |

Slug Taxonomy

Standard slug prefixes for observations and constraints:

Prefix	Domain	Examples
INLINECODE14	Version control	git-commit-message, git-branch-naming
INLINECODE15

Testing | test-before-commit, test-coverage |
| workflow-* | Process | workflow-pr-review, workflow-deploy |
| security-* | Security | security-no-secrets, security-auth |
| docs-* | Documentation | docs-update-readme, docs-api |
| quality-* | Code quality | quality-lint, quality-format |

Output

/gov state output

CODEBLOCK5

/gov review output

CODEBLOCK6

/gov index output

CODEBLOCK7

/gov verify output

CODEBLOCK8

Example: Compliance Review

CODEBLOCK9

Example: Security Audit Preparation

CODEBLOCK10

Integration

• - Layer: Governance
• Depends on: constraint-engine (for constraint data), failure-memory (for observation data)
• Used by: None (top-level governance)

Failure Modes

Condition	Behavior
Invalid sub-command	List available sub-commands
No constraints found

Info: "No constraints in system" | | State file corrupted | Rebuild from constraint files | | Migration conflict | Show conflicts, require manual resolution |

Next Steps

After invoking this skill:

Condition	Action
Reviews due	Process each review, update lifecycle
Alerts pending

Surface to user, track resolution |
| Index outdated | Regenerate INDEX.md |
| Drift detected | Investigate and reconcile |

Workspace Files

This skill reads/writes:

CODEBLOCK11

Security Considerations

What this skill accesses:

• - Configuration files in .openclaw/governance.yaml and INLINECODE21
• Constraint data from output/constraints/ (via constraint-engine)
• Observation data from .learnings/ (via failure-memory)
• Its own output directory INLINECODE24
• Skill index file INLINECODE25

What this skill does NOT access:

• - Files outside declared workspace paths
• System environment variables
• Network resources or external APIs

What this skill does NOT do:

• - Send data to external services
• Execute arbitrary code
• Modify files outside its workspace

Dependency note:
This skill reads data from constraint-engine and failure-memory skill workspaces.
Install the full governance stack for complete functionality.

Acceptance Criteria

• - [ ] /gov state shows complete governance overview
• [ ] /gov state surfaces alerts for due reviews
• [ ] /gov review lists constraints due for 90-day review
• [ ] /gov review provides clear renewal/retirement options
• [ ] /gov index generates skill index from SKILL.md files
• [ ] /gov verify detects drift between source and compiled
• [ ] /gov migrate handles schema version transitions
• [ ] Adoption metrics tracked and reported
• [ ] Workspace files follow documented structure

---

Consolidated from 6 skills as part of agentic skills consolidation (2026-02-15).