Workspace Governance

Use a deterministic read-only CLI to validate declared repository ownership, explain inherited rules, observe checkouts, and compare placement previews. This skill owns catalog/policy governance, not model routing, child lifecycles, codebase investigation, or publishing. It never executes workflows or moves repos.

When to Use

• A user wants a declared organization/area/project/repository catalog audited.
• An agent needs the effective rules and their provenance for a stable node ID.
• A user wants a safe, reproducible local placement preview before designing moves.

Do not use for checkout mutation, remote administration, executing workflow steps, or enforcing a filesystem security boundary: none is shipped in v0.1.

Prerequisites