Skip to content
Back to skills

Architecture Governance

ASecurity

Apply codexhost package and native ownership rules when changing production code or dependency directions. Inspect public contracts and run the existing boundary check; skip documentation-only work.

  • 2,733 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 24, 2026
ai-agentsrustgonodedocumentation

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned September 24, 2026

npx -y skills add BytePioneer-AI/codex-host --skill architecture-governance --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Architecture Governance?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Architecture Governance
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/bytepioneer-ai-architecture-governance/badge)](https://www.skillsdirectory.com/skills/bytepioneer-ai-architecture-governance)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: architecture-governance
description: Apply codexhost package and native ownership rules when changing production code or dependency directions. Inspect public contracts and run the existing boundary check; skip documentation-only work.
---

<!-- Adapted for codexhost from ZCode 872ad960de7ec172591f7e1952f7849229f94521. See ../NOTICE.md for provenance and licenses. -->

# Architecture governance

Use the current repository's [AGENTS.md](../../../AGENTS.md) and executable [boundary checker](../../../tools/check-boundaries.mjs) as the policy. Paths in commands are relative to the repository root.

## Before changing code

1. Inspect the working tree and identify the owning package or crate. Preserve unrelated edits. Read the relevant package exports, contracts, implementation, tests, and feature documentation; use [docs/index.md](../../../docs/index.md) to locate it.
2. For dependency changes, read `tools/check-boundaries.mjs` and run `node tools/check-boundaries.mjs` before editing to establish the current result. This checker scans the repository; it has no `--changed` mode or suppressible baseline.
3. For changes to state, asynchronous behavior, or cross-package contracts, identify the authoritative owner, command path, derived views, event order, failure semantics, and native capability limits. Use [implementation questions](references/ai-guidance.md) when needed.
4. Record substantial behavior or architecture decisions in the relevant existing feature document. Follow AGENTS.md for documentation scope; small fixes do not require a new spec or module scaffold.

## Implement within existing ownership

Use package public exports for cross-package dependencies. Preserve the Rust, Renderer, Shared Contracts, Host, and Harness Adapter responsibilities from AGENTS.md. Put Harness-specific protocols in the corresponding Adapter and load installed Harnesses through the plugin contract.

Use [public contract guidance](references/module-contract.md) when an interface must change. New modules should solve a present responsibility; do not introduce ZCode's module manifests, layer names, or policy files into this repository merely to follow its original workflow.

## Verify

Run `node tools/check-boundaries.mjs` after production changes that affect boundaries. Select other validation from the actual package scripts and owning test configuration, proportional to the change. Run focused behavior tests for changed semantics; a boundary check alone does not prove runtime correctness.

Report new failures separately from pre-existing failures, and state what was actually executed. A skipped or unavailable check remains unverified. Use the current script output as evidence; do not claim detection of cycles, line-count thresholds, or state ownership unless an executed check actually covers them.

Files in this skill

  • SKILL.md2.8 KB
  • agents/openai.yaml294 B
  • references/ai-guidance.md1.3 KB
  • references/module-contract.md870 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.