review-agent-governance — Setup

Gate AI agent review actions (PR reviews, comments, merges, CI edits) behind explicit human approval. Every attempt, approved or denied, produces an Ed25519-signed receipt.

When to use this plugin

Install it in projects where a Claude Code agent:

• Reviews, comments on, or merges pull requests (gh pr review, gh pr merge)
• Triages issues (gh issue comment, gh issue close)
• Publishes releases (gh release create)
• Modifies CI configuration (.github/workflows/, .gitlab-ci.yml)
• Pushes to protected branches (main, master, release, production)
• Posts to external notification surfaces (Slack webhooks, Discord), once you add a rule for the command that posts (the default policy does not gate them)