Learn-skills.dev gov_audit

Run post-bootstrap or post-migration governance audit.

install
source · Clone the upstream repo
git clone https://github.com/NeverSight/learn-skills.dev
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/NeverSight/learn-skills.dev "$T" && mkdir -p ~/.claude/skills && cp -r "$T/data/skills-md/adamchanadam/openclaw-workspace-governance/gov_audit" ~/.claude/skills/neversight-learn-skills-dev-gov-audit && rm -rf "$T"
OpenClaw · Install into ~/.openclaw/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/NeverSight/learn-skills.dev "$T" && mkdir -p ~/.openclaw/skills && cp -r "$T/data/skills-md/adamchanadam/openclaw-workspace-governance/gov_audit" ~/.openclaw/skills/neversight-learn-skills-dev-gov-audit && rm -rf "$T"
manifest: data/skills-md/adamchanadam/openclaw-workspace-governance/gov_audit/SKILL.md
source content

/gov_audit

Purpose

Perform governance integrity checks after bootstrap, migration, or apply.

Required checks

  1. Run the checklist in
    _control/REGRESSION_CHECK.md
    with fixed denominator 12/12.
  2. Verify governance anchor consistency required by your active migration baseline.
  3. Produce a clear PASS/FAIL result and remediation if any item fails.
  4. Verify path compatibility:
    • governance content must use runtime
      <workspace-root>
      semantics
    • no hardcoded
      ~/.openclaw/workspace
      assumptions in changed governance content
  5. Verify system-truth evidence:
    • OpenClaw system claims must cite
      https://docs.openclaw.ai
      sources
    • latest/version-sensitive OpenClaw claims must also cite
      https://github.com/openclaw/openclaw/releases
      sources
    • date/time claims must include runtime current time evidence (session status)
  6. If a run includes platform control-plane changes, verify:
    • backup path exists under
      archive/_platform_backup_<ts>/...
    • before/after key excerpts are present
    • change was executed via
      gov_openclaw_json
      path (or equivalent documented fallback)
  7. If a run touches Brain Docs (
    USER.md
    ,
    IDENTITY.md
    ,
    TOOLS.md
    ,
    SOUL.md
    ,
    MEMORY.md
    ,
    HEARTBEAT.md
    ,
    memory/*.md
    ), verify run report includes:
    • FILES_READ
      exact paths
    • TARGET_FILES_TO_CHANGE
      exact paths (or
      none
      for read-only) Missing either field => FAIL (evidence incomplete).
  8. If a run includes coding/workspace file writes (for example under
    projects/
    ), verify it was treated as Mode C with:
    • explicit PLAN gate evidence
    • READ evidence
    • QC 12/12 outcome Missing evidence => FAIL (workflow bypass).
  9. If a run includes
    gov_brain_audit APPROVE: ...
    or
    gov_brain_audit ROLLBACK
    , verify:
    • backup path exists under
      archive/_brain_docs_autofix_<ts>/...
    • run report includes approved finding IDs (or rollback scope)
    • changed files are limited to approved Brain Docs/governance targets Missing evidence => FAIL (unsafe Brain Docs mutation).
  10. Official-flow compatibility SOP check (anti-self-lock):
  • verify governance does not falsely block OpenClaw system operation flows (
    openclaw ...
    , including plugin-added/future commands) and governance lifecycle flows (
    gov_help
    ,
    gov_setup quick/check/install/upgrade
    ,
    gov_migrate
    ,
    gov_audit
    ,
    gov_openclaw_json
    ,
    gov_brain_audit
    ,
    gov_uninstall quick/check/uninstall
    ).
  • if a governance block occurred, verify run report labels it as governance policy gate (not system error) and provides copy-paste unblock commands.

Persistence

  • Write audit result into
    _runs/
    when the active governance flow requires persistence.
  • Ensure
    _control/WORKSPACE_INDEX.md
    is updated when a new run report is added.

Output requirements

  • Use this output order for UX consistency:
    1. STATUS
    2. WHY
    3. NEXT STEP (Operator)
    4. COMMAND TO COPY
  • Always include a final
    NEXT STEP (Operator)
    section.
  • If audit PASS:
    • primary: continue normal operation, or run
      /gov_apply <NN>
      only when an approved BOOT menu item exists.
    • fallback:
      /skill gov_apply <NN>
  • If audit FAIL:
    • primary: run
      /gov_migrate
      after remediation.
    • fallback:
      /skill gov_migrate

Fallback

  • If slash command is unavailable or name-collided, use:
    • /skill gov_audit