git:20260717.2365497 to git:20260723.6e5370b

---

name: policy-author

description: Draft or tighten a Runx operational policy from a governance brief, then validate the exact runx.operational_policy.v1 contract with the native policy engine. Use for repository/source/runner/owner policy design, fail-closed policy linting, or authority attenuation; never use this lane to widen an existing policy.

---

# Policy Author

Produce one reviewable operational-policy proposal. Let the agent translate

## Workflow

1. Require concrete target repositories, source locators, owner routes, and an

available runner. Return `needs_input` when any are unresolved.

2. Draft the smallest `runx.operational_policy.v1` that admits the stated work.

Unspecified work remains denied.

3. When `existing_policy` is supplied, preserve its target/source/runner set and

only attenuate authority. Do not add locators, actions, targets, sources, or

runners; do not lower confidence or weaken human gates.

4. Pass the draft to the deterministic validation step. Never author or trust an

agent-supplied lint verdict.

5. Return `ready` only when native lint passes. A native failure or attempted

widening returns `reject` with structured findings.

## Native policy contract

```yaml

schema: runx.operational_policy.v1

schema_version: runx.operational_policy.v1

policy_id: string

sources:

- source_id: string

provider: string

allowed_locators: [string]

allowed_actions: [string]

source_thread:

required: boolean

publish_mode: reply | comment | none

missing_behavior: fail_closed

minimum_confidence: number # optional

runners:

- runner_id: string

kind: string

state: available | unavailable

allowed_actions: [string]

target_repos: [owner/repo]

scafld_required: boolean

owner_routes:

- route_id: string

owners: [string]

target_repos: [owner/repo]

targets:

- repo: owner/repo

runner_ids: [string]

allowed_actions: [string]

default_owner_route: string

scafld_required: boolean

base_branch: string # optional

dedupe:

strategy: source_fingerprint

key_fields: [string]

on_duplicate: reuse | comment | block

outcomes:

observe_provider: boolean

verification_required: boolean

close_source_issue: never | when_verified | always

publish_final_source_thread_update: boolean

permissions:

auto_merge: boolean

mutate_target_repo: boolean

require_human_merge_gate: boolean

```

Do not substitute older convenience fields such as top-level `target_repos`, a

single `runner`, or agent-authored `lint` findings. They are not the runtime

contract.

## Stop conditions

- Missing repository, locator, runner, or owner evidence: `needs_input` with

`policy: null`; native lint is not run.

- Proposed widening of an existing policy: `reject` before lint and identify the

widened path.

- Native parse or validation failure: `reject`; never relabel it as ready.

- A request to widen authority: stop and route it to a separate explicit policy

decision. This skill's existing-policy lane is attenuation-only.

## Output

The final `policy_proposal` contains:

```yaml

decision: ready | needs_input | reject

policy: object | null

validation:

status: pass | fail | not_run

findings: [{ code, path, message }]

readback: object | null

reason: string

rationale: string

blockers: [string]

needs_input: [string]

success_checkpoint: object

```

The runtime receipt proves which draft was validated. It does not approve or

install the policy.