SOSA Governor — On-Demand Audit & Reporting

This skill provides manual governance operations. The hooks handle real-time classification and gating automatically; this skill handles reporting, configuration, and manual overrides.

Audit Report

When the user asks for a SOSA audit or governance report:

1. Read the audit log at ${CLAUDE_PLUGIN_ROOT}/audit/ for today's date (YYYY-MM-DD.jsonl)
2. Parse each line as JSON — fields: timestamp, session_id, tool, impact_level, reason, decision
3. Summarize:
   • Total tool calls today
   • Breakdown by impact level (low / medium / high)
   • Denied actions (high-impact that were blocked)
   • Most active tools
   • Sessions with the most activity
4. Present as a clear table