git:20260711.9bd63fa to git:20260711.e0bc462

16 added, 5 removed. Audit A to A.

---

name: governance-sync

description: "Audit or explicitly synchronize Claude and Codex repository governance without overwriting conflicts. Triggers: governance sync, CLAUDE.md, AGENTS.md, instruction mirror."

user-invocable: true

allowed-tools: Read, Bash

disable-model-invocation: true

kernel:

kind: operator

version: 1

side_effects: writes_repo

confirmation: always

---

# Governance sync

This explicit-only operator audits native repository instructions and can create a

missing Claude or Codex adapter from one declared source. It never edits a conflict.

## Audit first

- Run `python3 scripts/governance-sync.py audit <root> --json`. The audit discovers

+ Resolve the installed plugin root once. Claude Code and Codex compatibility loading

+ provide `CLAUDE_PLUGIN_ROOT`; the fallback is valid when the skill runs from its own

+ installed `skills/governance-sync` directory:

+ ```bash

+ KERNEL_PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$(cd ../.. && pwd -P)}"

+ test -f "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py"

+ ```

+ Run `python3 "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py" audit <root> --json`.

+ The audit discovers

canonical Git roots, ignores caches, deduplicates linked worktrees, and reports:

missing both, Claude-only, AGENTS-only, both identical, generated current, generated

stale, incomplete generation, conflict, and scoped `.claude` states. Generated states

are decided from manifest hashes and adapter provenance, not raw file equality.

Missing-both is compliant and remains untouched unless `init` is explicit.

## Writes require confirmation

Show the exact repository, source, target, and backup directory. Continue only after

the user confirms one command:

```text

- python3 scripts/governance-sync.py adopt REPO --source CLAUDE.md --backup-dir REPO/.kernel-governance-backups/adopt

- python3 scripts/governance-sync.py generate REPO --backup-dir REPO/.kernel-governance-backups/generate

- python3 scripts/governance-sync.py check REPO

+ python3 "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py" adopt REPO --source CLAUDE.md --backup-dir REPO/.kernel-governance-backups/adopt

+ python3 "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py" generate REPO --backup-dir REPO/.kernel-governance-backups/generate

+ python3 "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py" check REPO

```

`AGENTS.md` and `.claude/CLAUDE.md` are also valid sources. The manifest pins the

source path, source hash, output, output hash, and generator version. Scoped sources

stay where they are; only the missing root-native adapter is generated. A regular

file conflict, unrecorded edit, stale hash, malformed manifest, symlink, or existing

backup with different content stops the operation. Identical backups are idempotent.

Backups stay inside the repository. Use separate `BACKUPS/adopt` and

`BACKUPS/generate` phases so an approved source

update preserves both the pre-adoption state and the adapter it replaces.

Writes are crash-consistent per file: each completed replacement is a whole, fsynced

file. An interruption can leave some files current and others stale; `check` reports

that drift without changing anything, and rerunning the write operation converges it.

There is no background lock, journal, rollback, or cleanup of unknown temporary files.

An existing backup-directory symlink is always rejected before path resolution.

- Use `init REPO --backup-dir BACKUPS` only when the user explicitly wants governance

+ Use `python3 "$KERNEL_PLUGIN_ROOT/scripts/governance-sync.py" init REPO --backup-dir

+ REPO/.kernel-governance-backups/init` only when the user explicitly wants governance

created in a repository where both native files are absent.