# Core Governance

> Governance model, gatekeeping policy, and definition-of-done for Vibecode + .opencode.

- Skill: `duck4nh/core-governance` (Agent Skill)
- Install (CLI): `npx skillmds@latest add duck4nh/core-governance`
- Raw SKILL.md: https://api.skillmd.com/api/skills/duck4nh/core-governance/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- License: MIT
- Author: duck4nh (https://skillmd.com/u/duck4nh)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/duck4nh/core-governance

---


# Governance Core

## Mission
- Keep lifecycle discipline and prevent scope drift.
- Enforce security and quality defaults.

## Mandatory Gates
1. No major build before Vision + Context.
2. No implementation before Blueprint + Contract.
3. No release before QA and pre-delivery checks.

## Definition of Done
- Deliverables match approved contract.
- No hardcoded secrets.
- Quality checks completed.
- Handover artifacts available.

## Escalation
- If request violates gates, stop and route back to required stage.

