Node / meshtastic / Meshtastic-Android / files / .specify / extensions / agent-governance / templates / agent-governance-template.md

Displaying Rendered • View raw • Download

<!--

Sync Impact Report

-->

• active agent platform governance file

• managed T383838SPECKIT GOVERNANCE section

• cache: internal

• Responsibility: one primary purpose per directory.

• Depth: 2.

• Coverage: include visible, hidden, generated, cache, config/env, tool, and agent directories.

• Mixed concerns: follow existing repo convention or split responsibility.

• Change impact: review linked code, tests, docs, config/env, data, assets, generated files, and tool outputs; update only when in scope and authorized.

• agent collaboration rules

• tool and MCP permissions

• write boundaries

• skill invocation contracts

• project governance: external

• Scope: active task only

• Preserve: user-authored edits

• Preserve managed markers verbatim: T383838<!-- SPECKIT GOVERNANCE START --> and T383838<!-- SPECKIT GOVERNANCE END -->

• Protected files: implementation, CI, MCP config, secrets, permissions, tool settings

• Protected-file writes: explicit user request only

• Repository-local skill specs should declare purpose, trigger, allowed read paths, allowed write paths, forbidden paths, outputs, and validation command.

• Default: read-only

• Mutation: explicit user intent

• External writes: target, action, result

• Secrets: never log, never write

• changed files

• commands run

• tests/validation result

• unresolved risks