# Add to your Claude Code skills
git clone https://github.com/govctl-org/govctlLast scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T16:33:05.390Z",
"npmAuditRan": true,
"pipAuditRan": true
}govctl is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by govctl-org. A governance harness for AI coding. It has 130 GitHub stars.
Yes. govctl passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/govctl-org/govctl" and add it to your Claude Code skills directory (see the Installation section above).
govctl is primarily written in Rust. It is open-source under govctl-org on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh govctl against similar tools.
No comments yet. Be the first to share your thoughts!
govctl is a governance-as-code CLI for teams using AI to build software seriously.
It gives AI-assisted development a control plane that lives in your repo:
The point is not bureaucracy. The point is that AI-generated changes become reviewable, traceable, and phase-gated.
Most AI coding tools optimize for generation. govctl optimizes for delivery.
Without explicit governance, teams drift into the same pattern:
govctl closes that gap by making governed artifacts, lifecycle, and verification part of the normal workflow.
Without govctl:
prompt -> code -> drift -> arguments
With govctl:
RFC / ADR -> work item -> guarded implementation -> stable history
govctl is built around the idea that implementation follows governed artifacts.
In practice, that means:
Instead of treating prompts as the source of truth, the source of truth becomes governed artifacts in the repository.
govctl does not hide governance behind a web app or an MCP server.
Artifacts live in gov/ as TOML files with schema headers, references, and stable CLI access. That means:
The CLI is the operating surface for agents:
list, show, get, editadr accept, rfc advance, rfc supersede, and work moveeditThis matters because agent workflows get better when the interface is stable, local, and inspectable.
This is not only for greenfield projects.
For existing repositories, the /migrate workflow helps you adopt governance incrementally: discover undocumented decisions, backfill ADRs, and establish governed artifacts without restarting the project.
# Install from source
cargo install govctl
# Or install a prebuilt binary (faster, skips compilation)
cargo binstall govctl
govctl init
govctl status
To update an existing installation:
govctl self-update
Then create your first governed artifacts:
govctl rfc new "Caching Strategy"
govctl adr new "Choose cache backend"
govctl work new --active "implement caching"
Initialize governance, then install or load the agent workflows for your tool:
/discuss <topic> to draft RFCs and ADRs/gov <task> to execute governed implementation/quick <task> for intentionally small changes/commit to record work with governance checksFor Claude Code plugin installation:
/plugin marketplace add govctl-org/govctl
/plugin install govctl@govctl
/govctl:init
For a global Codex installation:
mkdir -p ~/.codex
cd ~/.codex
govctl init
govctl init-skills --format codex --dir .
This keeps the govctl-managed workspace, generated skills, and generated agents inside ~/.codex instead of writing governance files into your home directory.
govctl rfc new "Verification Guard Policy"
govctl clause new RFC-0015:C-GUARD-REQUIREMENTS "Required guards" -s "Verification" -k normative
govctl adr new "Require clippy on parser refactors"
govctl work new --active "add parser lint guard"
Agents and humans work through a stable CLI contract.
Read the exact field you need:
govctl rfc get RFC-0001 status
For precise artifact mutation, govctl provides a canonical path-first interface:
govctl adr edit ADR-0038 content.decision --stdin
govctl work edit WI-2026-01-17-001 content.acceptance_criteria[0] --tick done
govctl clause edit RFC-0002:C-CRUD-VERBS text --stdin
This is not the product's identity. It is the low-level tool agents use to update governed artifacts precisely and consistently.
Use govctl search to find governed artifacts across RFCs, clauses, ADRs,
work items, and guards:
govctl search cache
govctl search RFC-0002 --output json
govctl search migration --type rfc --type adr --tag cli -n 5
Search uses a disposable local index under .govctl/. The TOML artifacts remain
the source of truth, and --reindex forces a fresh rebuild when needed.
Work items can declare hard execution dependencies with depends_on; keep
informational links in refs.
govctl work edit WI-2026-01-17-002 depends_on --add WI-2026-01-17-001
govctl check
For multi-work-item implementation batches, use a generated local loop ID and
record round evidence in .govctl/loops/ instead of work item notes:
govctl loop list open
govctl loop start WI-2026-01-17-001 WI-2026-01-17-002
govctl loop run <LOOP-ID>
Guards are executable checks that run when work reaches completion gates.
Define reusable project defaults in gov/config.toml:
[verification]
enabled = true
default_guards = ["GUARD-GOVCTL-CHECK", "GUARD-CARGO-TEST"]
You can also require extra guards on a specific work item or waive a guard with an explicit reason. See:
These are related, but different:
/migrate workflow — adopt govctl in an existing repository by discovering decisions, backfilling ADRs, and introducing governance incrementallygovctl migrate command — upgrade existing TOML govctl artifacts to the current on-disk format and schemaFor format upgrades:
govctl migrate
govctl check
In govctl 0.9 and later, RFC and clause artifacts are TOML-only. govctl migrate no longer converts legacy RFC/clause JSON storage; migrate those repositories with govctl <0.9 before upgrading.
govctl tui
Open the read-only cockpit for project overview, artifact browsing, search,
loop-state inspection with dependency DAG context, guards, releases, tags, and
govctl check diagnostics. Mutation remains owned by CLI commands.
govctl is intentionally opinionated:
If that matches how you want AI-assisted development to work, contributions are welcome.
MIT