Node / meshtastic / Meshtastic-Android / files / .specify / memory / agent-governance.md

Displaying Rendered • View raw • Download

<!--

Sync Impact Report

-->

• active agent platform governance file

• managed T383838SPECKIT GOVERNANCE section

• cache: internal

• Responsibility: one primary purpose per directory.

• Depth: 2.

• Coverage: include visible, hidden, generated, cache, config/env, tool, and agent directories.

• Mixed concerns: follow existing repo convention or split responsibility.

• Change impact: review linked code, tests, docs, config/env, data, assets, generated files, and tool outputs; update only when in scope and authorized.

• README: T383838README.md

• Package manifest: T383838Gemfile, T383838build.gradle.kts

• Lockfiles: T383838Gemfile.lock

• Task runners: none detected

• CI workflows: T383838.github/workflows/create-or-promote-release.yml, T383838.github/workflows/dependency-submission.yml, T383838.github/workflows/docs-deploy.yml, T383838.github/workflows/docs-governance.yml, T383838.github/workflows/docs-release.yml, T383838.github/workflows/main-check.yml, T383838.github/workflows/merge-queue.yml, T383838.github/workflows/models_issue_triage.yml, T383838.github/workflows/models_pr_triage.yml, T383838.github/workflows/moderate.yml, T383838.github/workflows/post-release-cleanup.yml, T383838.github/workflows/pr_enforce_labels.yml, T383838.github/workflows/promote.yml, T383838.github/workflows/publish-core.yml, T383838.github/workflows/pull-request-target.yml, T383838.github/workflows/pull-request.yml, T383838.github/workflows/release.yml, T383838.github/workflows/reusable-check.yml, T383838.github/workflows/scheduled-updates.yml, T383838.github/workflows/stale.yml, T383838.github/workflows/sync-android-docs.yml, T383838.github/workflows/update-changelog.yml

• Source paths: T383838app/, T383838scripts/

• Test paths: T383838specs/

• Repository areas: (see "Repository Areas" section below for top-level listing)

• Existing agent context files: T383838.github/copilot-instructions.md, T383838AGENTS.md, T383838CLAUDE.md, T383838GEMINI.md

• Repository-local skills: T383838.agent_refs/mqttastic-client-kmp/.github/skills/mqtt-kmp/SKILL.md, T383838.skills/ci-cost-control/SKILL.md, T383838.skills/code-review/SKILL.md, T383838.skills/compose-ui/SKILL.md, T383838.skills/design-standards/SKILL.md, T383838.skills/implement-feature/SKILL.md, T383838.skills/kmp-architecture/SKILL.md, T383838.skills/navigation-and-di/SKILL.md, T383838.skills/new-branch/SKILL.md, T383838.skills/project-overview/SKILL.md, T383838.skills/speckit/SKILL.md, T383838.skills/testing-ci/SKILL.md

• MCP configs: T383838.agent_refs/firmware/src/modules/Telemetry/Sensor/MCP9808Sensor.cpp, T383838.agent_refs/firmware/src/modules/Telemetry/Sensor/MCP9808Sensor.h, T383838androidApp/build/intermediates/incremental/googleDebug-mergeJavaRes/zip-cache/ut0r9CiGRq6mCprTK2blRg==, T383838app/build/intermediates/incremental/fdroidDebug-mergeJavaRes/zip-cache/mcpnRT6ZHkD92YpTv5y52w==, T383838app/build/intermediates/incremental/googleDebug-mergeJavaRes/zip-cache/mcpnRT6ZHkD92YpTv5y52w==, T383838app/build/intermediates/incremental/googleDebug-mergeJavaRes/zip-cache/ut0r9CiGRq6mCprTK2blRg==

• Active integration: T383838copilot

• Resolved context file: T383838AGENTS.md

Policy: Subdirectories inherit parent area governance rules. When modifying a subdirectory,

review the parent area's context for impact. Top-level directories require review before

changing linked areas; child directories change with their parent.

Top-level areas requiring review: T383838.agent_memory/, T383838.agent_plans/, T383838.agent_refs/,

T383838.github/, T383838.specify/, T383838androidApp/, T383838app/, T383838build-logic/, T383838config/, T383838core/,

T383838desktop/, T383838desktopApp/, T383838docs/, T383838docs-screenshots/, T383838docs-site/, T383838fastlane/, T383838feature/,

T383838gradle/, T383838ios/, T383838iosApp/, T383838offline-repository/, T383838screenshot-tests/, T383838scripts/, T383838specs/

• none detected

• agent collaboration rules

• tool and MCP permissions

• write boundaries

• skill invocation contracts

• project governance: external

• Scope: active task only

• Preserve: user-authored edits

• Preserve managed markers verbatim: T383838<!-- SPECKIT GOVERNANCE START --> and T383838<!-- SPECKIT GOVERNANCE END -->

• Protected files: implementation, CI, MCP config, secrets, permissions, tool settings

• Protected-file writes: explicit user request only

• Repository-local skill specs should declare purpose, trigger, allowed read paths, allowed write paths, forbidden paths, outputs, and validation command.

• Default: read-only

• Mutation: explicit user intent

• External writes: target, action, result

• Secrets: never log, never write

• changed files

• commands run

• tests/validation result

• unresolved risks