ariffazil/GitHub PR Governance
skills/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-github/05-pr-governance/SKILL.md
PRs are constitutional hearings. Intent becomes law.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace GitHub PR GovernanceInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 11, 2026, 3:52 AM217.7s1 file scanned
SKILL.md
- id:
- pr-governance
- name:
- GitHub PR Governance
- version:
- 1.0.0
- description:
- PRs are constitutional hearings. Intent becomes law.
- owner:
- AAA
- risk_tier:
- low
- glyph:
- 🜅
- position:
- 5 of 12 in the GitHub Canon
- language:
- true
- math:
- false
- physics:
- false
- skills:
- []
- schema_version:
- 1
- artifact_hash:
- 63bef5e6565ad00c
- autonomy_tier:
- T1
🜅 5. GitHub PR Governance
"PRs are constitutional hearings. Intent becomes law." — AAA GitHub Canon, position 5 of 12
Purpose
Open, review, and merge PRs that turn governed intent into canon.
When to Use
- Any PR touching >1 file
- Any PR modifying contracts, schemas, registries
- Any PR marked high/critical risk
- Any PR from an external contributor
When NOT to Use
- Do NOT use for docs-only typo fixes if low-risk and self-contained (commit to a docs branch, fast-track)
- Do NOT use to merge your own PR (F1 AMANAH — self-seal forbidden)
- Do NOT use to dismiss security findings (escalate to secret-safety-scan + 888_JUDGE)
Procedure
- Open PR:
Closes #<issue-n>, body = what + why + risks + fallback + checklist - Run pre-merge gate: tests pass, lint clean, secrets clean, schema updated
- Request reviewers per risk tier (peer / peer+architect / 2 peers+auditor / all+Arif)
- Respond to review comments — request changes is remand, not veto
- Squash and merge after green CI + required signers + 888_JUDGE seal (if high/critical)
Allowed Tools
| Tool | Purpose |
|---|---|
| forge_github_pr | pr-governance operation |
| forge_github_create_pull_request | pr-governance operation |
| forge_github_get_file | pr-governance operation |
| forge_git_diff | pr-governance operation |
Forbidden Actions
- NEVER self-approve your own PR
- NEVER merge to main without branch protection + required signers
- NEVER dismiss security findings
- NEVER force-push a PR branch after review has started
- NEVER create cross-repo PRs without architectural judgment
Output
PR URL + linked issue + risk tier + required signers + CI status + verdict (approve/changes/block)
Sibling Skills
github-pr-reviewpr-review-governancegithub-ci-diagnose
Position 5 of 12 in the AAA GitHub Canon. Sovereign ruling 2026-06-24. Consolidates and supersedes prior GitHub-related skills in the federation. License: AGPL-3.0 · Sovereign: Arif bin Fazil DITEMPA BUKAN DIBERI
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026