governance (治理)

Unified skill for constraint governance state, periodic reviews, index generation, round-trip verification, and schema migration. Consolidates 6 granular skills.

Trigger: 定期保守 (periodic maintenance) or HEARTBEAT

Source skills: constraint-reviewer, index-generator, round-trip-tester, governance-state, slug-taxonomy, adoption-monitor (from safety)

Installation

openclaw install leegitw/governance

Dependencies:

• leegitw/constraint-engine (for constraint data)
• leegitw/failure-memory (for observation data)

# Install full governance stack
openclaw install leegitw/context-verifier
openclaw install leegitw/failure-memory
openclaw install leegitw/constraint-engine
openclaw install leegitw/governance

Standalone usage: Index generation and round-trip verification work independently. Full governance features require constraint-engine and failure-memory integration.

Data handling: This skill operates within your agent's trust boundary. When triggered, it uses your agent's configured model for governance analysis and review. No external APIs or third-party services are called. Results are written to output/governance/ in your workspace.

What This Solves

Constraints that never get reviewed become stale. Rules that never get challenged become dogma. This skill manages the lifecycle:

1. State tracking — know which constraints are active, suspended, or retired
2. Periodic reviews — 90-day gates to re-evaluate constraints against current evidence
3. Index generation — dashboards showing constraint health at a glance

The insight: Good governance is proactive. Constraints need maintenance, not just creation.

Usage

/gov <sub-command> [arguments]

Sub-Commands

Command	CJK	Logic	Trigger
/gov state	状態	central_state, event→alert	HEARTBEAT
/gov review	審査	constraints.due→review_queue	HEARTBEAT
/gov index	索引	skills[]→INDEX.md	Explicit
/gov verify	検証	round_trip(source↔compiled)→sync✓∨drift✗	Explicit
/gov migrate	移行	schema.v(n)→schema.v(n+1)	Explicit

Arguments

/gov state

Argument	Required	Description
--summary	No	Show summary only (default: full state)
--alerts	No	Show pending alerts only

/gov review

Argument	Required	Description
--due	No	Show only due reviews (default)
--all	No	Show all constraints with review dates
--complete	No	Mark review as complete

/gov index

Argument	Required	Description
--path	No	Output path (default: agentic/INDEX.md)
--format	No	Format: markdown (default), json

/gov verify

Argument	Required	Description
source	Yes	Source file or directory
compiled	Yes	Compiled/generated file or directory
--strict	No	Fail on any difference

/gov migrate

Argument	Required	Description
--to	Yes	Target schema version
--dry-run	No	Show changes without applying

Configuration

Configuration is loaded from (in order of precedence):

1. .openclaw/governance.yaml (OpenClaw standard)
2. .claude/governance.yaml (Claude Code compatibility)
3. Defaults (built-in)

Core Logic

Governance State Model

┌─────────────────────────────────────────┐
│           GOVERNANCE STATE               │
├─────────────────────────────────────────┤
│ Constraints:                             │
│   - Active: 5                           │
│   - Draft: 2                            │
│   - Retiring: 1                         │
│   - Retired: 12                         │
├─────────────────────────────────────────┤
│ Reviews:                                 │
│   - Due: 2 (approaching 90-day mark)    │
│   - Overdue: 0                          │
├─────────────────────────────────────────┤
│ Health:                                  │
│   - Circuit: CLOSED                     │
│   - Violations (30d): 3                 │
│   - Adoption rate: 85%                  │
├─────────────────────────────────────────┤
│ Alerts:                                  │
│   - [WARN] CON-001 due for review       │
│   - [INFO] 2 new observations eligible  │
└─────────────────────────────────────────┘

Review Cycle

Constraints require periodic review. The review cadence is configurable (default: 90 days):

# .openclaw/governance.yaml
governance:
  review_cadence_days: 90    # Default
  warning_threshold: 15      # Days before due to warn

Days Since Last Review	Status	Action
0-75	Current	No action
76-90	Approaching	Warning alert
91+	Overdue	Escalation alert

⚠️ Advisory Only: This review cycle is not enforced programmatically. Compliance relies on HEARTBEAT P3 checks and manual diligence. Automated enforcement (/gov review --automated) is planned for future release. See HEARTBEAT.md for current verification schedule.

Adoption Monitoring

Track constraint adoption across sessions:

Metric	Calculation	Target
Adoption rate	Sessions with constraint used / Total sessions	>80%
Violation rate	Violations / Checks	<5%
Override rate	Overrides / Violations	<20%

Slug Taxonomy

Standard slug prefixes for observations and constraints:

Prefix	Domain	Examples
git-*	Version control	git-commit-message, git-branch-naming
test-*	Testing	test-before-commit, test-coverage
workflow-*	Process	workflow-pr-review, workflow-deploy
security-*	Security	security-no-secrets, security-auth
docs-*	Documentation	docs-update-readme, docs-api
quality-*	Code quality	quality-lint, quality-format

Output

/gov state output

[GOVERNANCE STATE]
Updated: 2026-02-15 10:30:00

=== Constraints ===
Active: 5 | Draft: 2 | Retiring: 1 | Retired: 12

=== Circuit Breaker ===
Status: CLOSED (healthy)
Violations (30d): 3

=== Reviews ===
Due: 2 constraints approaching 90-day mark
  - CON-20251120-001: "Always run tests" (day 87)
  - CON-20251125-003: "Lint before commit" (day 82)

=== Adoption ===
Rate: 85% (target: >80%)
Sessions tracked: 47

=== Alerts ===
[WARN] CON-20251120-001 due for review in 3 days
[INFO] 2 observations eligible for constraint generation

/gov review output

[CONSTRAINT REVIEW QUEUE]

Due for review (2):

1. CON-20251120-001: "Always run tests before commit"
   Age: 87 days | Status: active
   Violations (90d): 2 | Overrides: 0
   Adoption: 92%

   Options:
   a) Renew for 90 days: /ce lifecycle CON-20251120-001 active
   b) Begin retirement: /ce lifecycle CON-20251120-001 retiring
   c) Immediate retire: /ce lifecycle CON-20251120-001 retired

2. CON-20251125-003: "Always lint before commit"
   Age: 82 days | Status: active
   Violations (90d): 5 | Overrides: 1
   Adoption: 78%

   [WARN] Below adoption target (80%)
   Consider: Clarify constraint or improve tooling

/gov index output

[INDEX GENERATED]
Path: agentic/INDEX.md
Skills: 7
Updated: 2026-02-15 10:30:00

Contents:
- failure-memory (fm) - Core
- constraint-engine (ce) - Core
- context-verifier (cv) - Foundation
- review-orchestrator (ro) - Review
- governance (gov) - Governance
- safety-checks (sc) - Safety
- workflow-tools (wt) - Extensions

/gov verify output

[ROUND-TRIP VERIFICATION]
Source: docs/constraints/
Compiled: output/constraints/

Status: ✓ IN SYNC

Files checked: 12
Matches: 12
Drifts: 0

Example: Compliance Review

/gov review --all
[CONSTRAINT REVIEW QUEUE]

Compliance Status (SOC 2):

1. CON-20260101-001: "Always encrypt PII at rest"
   Age: 45 days | Status: active
   Compliance: SOC 2 CC6.1
   Violations (90d): 0 | Adoption: 100%
   ✓ Compliant

2. CON-20260115-002: "Always log authentication events"
   Age: 31 days | Status: active
   Compliance: SOC 2 CC6.2
   Violations (90d): 1 | Adoption: 98%
   ⚠ Review violation on 2026-02-01

Summary: 12 constraints | 11 compliant | 1 needs review

Example: Security Audit Preparation

/gov state --summary
[GOVERNANCE STATE]
Updated: 2026-02-15 14:00:00

Audit Readiness:
  Security constraints: 8 active
  Last review: 2026-02-10
  Violations (90d): 2 (both resolved)
  Override rate: 5% (within policy)

Recommendation: Ready for external audit.

Integration

• Layer: Governance
• Depends on: constraint-engine (for constraint data), failure-memory (for observation data)
• Used by: None (top-level governance)

Failure Modes

Condition	Behavior
Invalid sub-command	List available sub-commands
No constraints found	Info: "No constraints in system"
State file corrupted	Rebuild from constraint files
Migration conflict	Show conflicts, require manual resolution

Next Steps

After invoking this skill:

Condition	Action
Reviews due	Process each review, update lifecycle
Alerts pending	Surface to user, track resolution
Index outdated	Regenerate INDEX.md
Drift detected	Investigate and reconcile

Workspace Files

This skill reads/writes:

output/
├── governance/
│   ├── state.json           # Central governance state
│   ├── reviews/             # Review records
│   │   └── YYYY-MM-DD.md
│   └── alerts.json          # Pending alerts
└── constraints/
    └── metadata.json        # Constraint metadata (adoption, violations)

agentic/
└── INDEX.md                 # Generated skill index

Security Considerations

What this skill accesses:

• Configuration files in .openclaw/governance.yaml and .claude/governance.yaml
• Constraint data from output/constraints/ (via constraint-engine)
• Observation data from .learnings/ (via failure-memory)
• Its own output directory output/governance/
• Skill index file agentic/INDEX.md

What this skill does NOT access:

• Files outside declared workspace paths
• System environment variables
• Network resources or external APIs

What this skill does NOT do:

• Send data to external services
• Execute arbitrary code
• Modify files outside its workspace

Dependency note: This skill reads data from constraint-engine and failure-memory skill workspaces. Install the full governance stack for complete functionality.

Acceptance Criteria

• [ ] /gov state shows complete governance overview
• [ ] /gov state surfaces alerts for due reviews
• [ ] /gov review lists constraints due for 90-day review
• [ ] /gov review provides clear renewal/retirement options
• [ ] /gov index generates skill index from SKILL.md files
• [ ] /gov verify detects drift between source and compiled
• [ ] /gov migrate handles schema version transitions
• [ ] Adoption metrics tracked and reported
• [ ] Workspace files follow documented structure

---

Consolidated from 6 skills as part of agentic skills consolidation (2026-02-15).