ariffazil/GitHub Merge Protocol
skills/_retired/ARCHIVE-dupe-2026-07-12/root_AAA_skills/ARCHIVE-github/07-merge-protocol/SKILL.md
Merging is law update. Only after CI + review + signers.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace GitHub Merge ProtocolInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 11, 2026, 3:52 AM140.8s1 file scanned
SKILL.md
- id:
- merge-protocol
- name:
- GitHub Merge Protocol
- version:
- 1.0.0
- description:
- Merging is law update. Only after CI + review + signers.
- owner:
- AAA
- risk_tier:
- low
- glyph:
- 🜇
- position:
- 7 of 12 in the GitHub Canon
- language:
- true
- math:
- false
- physics:
- false
- skills:
- []
- schema_version:
- 1
- artifact_hash:
- 973f8b127c3e0d3f
- autonomy_tier:
- T1
🜇 7. GitHub Merge Protocol
"Merging is law update. Only after CI + review + signers." — AAA GitHub Canon, position 7 of 12
Purpose
Merge PRs cleanly. Avoid merge conflicts. Maintain linear history. Keep canon clean.
When to Use
- PR has green CI + required reviewers signed + no unresolved conversations
- All required checks pass (security, tests, lint, schema)
- Risk-appropriate 888_JUDGE seal obtained (high/critical)
When NOT to Use
- Do NOT use to merge a PR with unresolved review comments
- Do NOT use to merge if CI is red or required signers missing
- Do NOT use to merge constitutional file changes without Arif explicit ack
Procedure
- Verify: PR is green + reviews approved + branch up to date with main + no conflicts
- Choose merge strategy: squash (default for feature branches) / merge commit (preserve history) / rebase (linear history, requires 888)
- Squash message: aggregates all commits, references Issue + PR
- Post-merge: delete branch (remote + local), verify deploy if applicable
- Verify main: pull, check HEAD sha, verify deployment pipeline triggered
Allowed Tools
| Tool | Purpose |
|---|---|
| forge_github_pr | merge-protocol operation |
| forge_git_log | merge-protocol operation |
| forge_git_status | merge-protocol operation |
Forbidden Actions
- NEVER merge a PR with unresolved conversations
- NEVER merge your own PR to main (F13 SOVEREIGN)
- NEVER force-push to main under any circumstance
- NEVER delete main even after squash
- NEVER merge without verifying branch protection passed
Output
Merge commit sha + merged-by + linked issue closed + branch deleted + deploy status
Sibling Skills
pr-governancegithub-pr-reviewci-obedience
Position 7 of 12 in the AAA GitHub Canon. Sovereign ruling 2026-06-24. Consolidates and supersedes prior GitHub-related skills in the federation. License: AGPL-3.0 · Sovereign: Arif bin Fazil DITEMPA BUKAN DIBERI
Related Skills
ariffazil/openclaw
testing
VerifiedTrustedCommunity
OpenClaw edge agent bridge — operational triage, doctor, restart, and A2A bridge routing for the federation edge (Telegram surface). USE WHEN: "openclaw unhealthy", "gateway down", "edge bot not responding", "a2a bridge disconnected", "watchdog tripped", "openclaw doctor", "openclaw restart". NOT for token/security audit — use FORGE-telegram-audit.
2SKILL.mdUpdated Aug 8, 2026
ariffazil/MiniMax Image Generation
tools
VerifiedTrustedCommunity
Generate images, videos, TTS, voice clone, and music via MiniMax MCP server. Use when user asks to "draw", "generate image", "create picture", "make a photo", "text to image", "image generation".
2SKILL.mdUpdated Aug 8, 2026
ariffazil/arifos-constitutional-judge
testing
VerifiedTrustedCommunity
Single load-bearing constitutional-judgment skill. Routes all F1–F13, verdict, hold, seal, scope, authority and floor-check calls through the live arif_judge surface. Replaces 7 overlapping predecessors (arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge).
2SKILL.mdUpdated Aug 8, 2026
ariffazil/FORGE-lsp-pre-edit-gate
development
VerifiedTrustedCommunity
MANDATORY LSP grounding gate BEFORE any code mutation on .ts, .py, .js, .tsx, .jsx files. Forces the agent to read real-time compiler diagnostics and structural project context before editing — eliminating blind guesses and anchoring every mutation in F2 (TRUTH). Routes through arifOS kernel (:8088) for centralized gate logic.
2SKILL.mdUpdated Aug 8, 2026