governed-autonomy-looplisted

Turn any work-queue + any enforcement pipeline into a self-driving, self-healing, human-minimal autonomy loop with a control-systems safety envelope. A prose-defined governor closes a feedback loop over the queue, drives isolated worktree arcs to Done, is metacognitive (defers when the runtime can't support the act, escalates only when genuinely blocked, self-heals when the block clears), and NEVER performs the irreversible act itself — it delegates every merge/deploy/publish to an isolated arc gated by adversarial review + a policy gate + a server-side aggregate check. The controller is a markdown prompt interpreted fresh each tick; a thin tested shell (tick.sh) only schedules, locks, and logs. The skill SCAFFOLDS + GOVERNS a new loop instance: the invariant spine stays fixed, four adapters (tracker / irreversible-act + enforcement / runtime / partition) are per-instance, the deterministic core (scheduler, in-flight fold, reseed gate, config + denylist validation) is extracted into tested scripts, and the la
broomva/skills · ★ 3 · AI & Automation · score 72

Install: claude install-skill broomva/skills

# governed-autonomy-loop > Verbal incantation ("be autonomous", "merge when green") is **open-loop** control. > A governed autonomy loop is the **closed-loop** version — a controller whose > verification signals are causally independent of the agent (`h ⟂ U`), so > "autonomous" becomes a machine-checkable behavior instead of a hope. This skill packages a *demonstrated controller*, not a described one: the reference loop ran in production, hit two real runtime failures, degraded gracefully without paging a human, and self-healed to close its arc — all observable in `loop-log.jsonl` (broomva BRO-1740 + BRO-1833, first fully-autonomous merge 2026-07-10). It generalizes that instance into a recipe. ## The latent-vs-deterministic split (the load-bearing idea) | Deterministic → tested code (`scripts/`) | Latent → prose (`templates/runner-prompt.template.md`) | |---|---| | `tick.sh` — durable scheduler: fire-timing, flock, run-counter, quiet hours, mode decision, watchdog, child-guard | reconcile classification (merged? dead? stale?) | | `loop_state.py` — in-flight fold, **reseed gate arithmetic**, busy-guard, arc-status contract | dispatch selection (which candidate, trust-bounded) | | `validate_config.py` — fail-closed kill switch, DRY_RUN, num_or, partition guard | the govern/escalate judgment | | `denylist_check.py` — tracker write-surface coverage | the adversarial (P20) review verdict | | `mine_loop_log.py` — taxonomy + fixtures + drift-check from a running loop's log | th