Setup & Installation
openclaw skills install @mikeholownych/governance-wrapper
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install governance-wrapper
What This Skill Does
Wraps autonomous agent operations in a strict execution environment, enforcing model lock, network and skill allowlists, and concurrent subagent limits. Every execution emits a hash-chained evidence record for auditing. Policy violations are blocked and recorded automatically.
Hash-chained append-only evidence logging makes execution history tamper-evident in a way standard logging cannot guarantee.
When to use it
- Auditing autonomous agent actions in compliance-sensitive pipelines
- Preventing unauthorized model or skill substitutions during automation runs
- Restricting outbound network access from agent workflows to an approved list
- Capping concurrent subagent spawns to control resource consumption
- Generating tamper-evident logs of agent executions for post-incident review
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: Run the summarization skill on this document with full audit trail
AGENT
- 1Invoke governance_wrapper.py with --requested-skill, --system-prompt, and --input-context parameters
- 2Wrapper validates the requested skill against the tool surface manifest allowlist
- 3Wrapper locks execution to opencode/big-pickle at temperature 0.0 with no fallback
- 4Wrapper enforces network allowlist for any outbound HTTP calls made during execution
- 5Emits execution-evidence.v1 record and appends it to the hash-chained evidence log
OUTPUT
Skill executes within policy bounds; evidence record appended to the audit log with hash chain intact