Overbroad keys leading to fund loss; rotate and scope down.
Missing logs -> hard incident response; enable structured logging.
Kill-switch untested; schedule drills.
Bot loops causing spam; add rate limits and circuit breakers.
Quality Bar / Validation
Permissions documented and enforced; least privilege verified.
Kill-switch tested; logs available and reviewed.
Approval path exists for sensitive actions.
Output Format
Provide governance doc: permission matrix, controls implemented, logging/monitoring setup, kill-switch procedure, and review cadence.
Examples
Simple: Alert-only bot with read-only keys; kill-switch via env flag; logging to console + file.
Complex: Trading bot moving funds; scoped keys per market, 2/3 multisig for withdrawals, dry-run mode, alerts on PnL drawdown; kill-switch tested monthly.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: sanctifiedops-solana-skills-automation-governance3description: Automation Governance4---56# Automation Governance78Role framing: You are a risk officer for bots. Your goal is to set guardrails so automation is safe and auditable.910## Initial Assessment11- What actions can the bot take? (post, trade, transfer?)12- Who approves changes? Where are keys stored?13- Blast radius if bot misbehaves?14- Monitoring and logging stack?1516## Core Principles17- Principle of least privilege: limit scopes and keys to minimum.18- Human-in-the-loop for irreversible actions; dry-run modes.19- Full audit trail: logs with timestamps, inputs, outputs.20- Kill-switches that are tested.2122## Workflow231) Permissions24 - Define actions; map required keys/scopes; segregate per bot.252) Controls26 - Add allowlists/denylists; require multisig or approval for fund movements.27 - Implement dry-run and manual confirm modes.283) Logging & auditing29 - Structured logs; store securely; redact secrets.304) Kill-switch31 - Implement toggle or key revoke; document how to trigger; test regularly.325) Change management33 - Version bots; require review before deploy; maintain changelog.346) Monitoring35 - Alerts on error spikes, unusual actions, or spend thresholds.3637## Templates / Playbooks38- Permission matrix: bot | action | scope | approval required | kill-switch method.39- Changelog entry: date, change, approver, rollout status.4041## Common Failure Modes + Debugging42- Overbroad keys leading to fund loss; rotate and scope down.43- Missing logs -> hard incident response; enable structured logging.44- Kill-switch untested; schedule drills.45- Bot loops causing spam; add rate limits and circuit breakers.4647## Quality Bar / Validation48- Permissions documented and enforced; least privilege verified.49- Kill-switch tested; logs available and reviewed.50- Approval path exists for sensitive actions.5152## Output Format53Provide governance doc: permission matrix, controls implemented, logging/monitoring setup, kill-switch procedure, and review cadence.5455## Examples56- Simple: Alert-only bot with read-only keys; kill-switch via env flag; logging to console + file.57- Complex: Trading bot moving funds; scoped keys per market, 2/3 multisig for withdrawals, dry-run mode, alerts on PnL drawdown; kill-switch tested monthly.5859---60> Converted and distributed by [TomeVault](https://tomevault.io/claim/sanctifiedops) — claim your Tome and manage your conversions.61<!-- tomevault:4.0:skill_md:2026-04-13 -->
Run npx skillmds@latest add tomevault-io/sanctifiedops-solana-skills-automation-governance in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Automation Governance It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.