Engineering Decision Governor lets an AI coding agent act autonomously on proven, in-scope technical defects while preserving the owner's authority over undefined product behavior, residual risk, release decisions, and high-impact production actions.
Coding agents often fail in opposite ways: they ask the owner to decide routine implementation details, or they silently make product and risk decisions they do not own. This skill supplies a precise decision boundary and a repeatable triage workflow.
Every finding is verified and classified as:
AUTO-FIX: proven, in-scope, deterministic, bounded, and verifiable;OWNER-DECISION: multiple legitimate business outcomes remain;RECORD-ONLY: real but unrelated legacy debt;RELEASE-RISK: unresolved evidence or operational risk affects release confidence;DISMISSED: false positive, duplicate, style-only, or unproven.
- Freeze the current task boundary before fixing findings.
- Treat reviewer and analyzer findings as hypotheses, regardless of model strength.
- Trace the real implementation and violated contract or invariant.
- Fix only deterministic in-scope defects without asking routine technical questions.
- Split mixed issues so the objective portion is fixed before escalating ambiguity.
- Verify the final candidate, not an older commit or an agent's confidence.
- Recommend GO or NO-GO for release risk without accepting that risk for the owner.
- Engineering Decision Governor controls engineering execution authority.
- Project Context Governor checks whether the facts used by the engineering process are current and trustworthy.
- Project State Governor persists verified outcomes and decisions across sessions and branches.
With the Agent Skills CLI:
npx skills add Ghost011118/engineering-decision-governorOr copy this repository into your agent's skills directory and invoke $engineering-decision-governor.
Use $engineering-decision-governor to verify these review findings, fix the proven in-scope defects, and return only genuine owner decisions and release risks.
Use $engineering-decision-governor to decide whether this failing regression is an auto-fix, an owner decision, or a release risk.
The skill is provider-neutral. It works best with an agent that can inspect source code, trace execution paths, run tests, review Git diffs, and obtain an independent review pass for non-trivial changes.
The skill does not grant product-owner authority. It does not authorize destructive production actions, schema risk acceptance, business-semantic invention, unrelated cleanup, or release with unresolved evidence.
See CONTRIBUTING.md. Security reports should follow SECURITY.md.
Apache License 2.0. See LICENSE.