Skip to content

Governance Overview — OpenSIN-AI Fleet Governance

Status: Active Owner: SIN-Zeus (control-plane)


What Is Governance?

Governance defines the rules, processes, and automated checks that keep the OpenSIN-AI fleet operating safely, consistently, and in alignment with organizational standards. Governance is not optional — it is enforced through automated checks, PR-watcher hooks, and fleet-wide mandates.


Governance Layers

1. Repo Governance

Every repository in the OpenSIN-AI organization must comply with minimum standards:

  • README.md with project description
  • AGENTS.md with agent operating manual
  • LICENSE file
  • .gitignore configuration
  • GitHub Topics (at least 1)
  • No hardcoded secrets

Enforced by: Repo Health Check GitHub Action

2. Code Governance

  • PR-Watcher: Every PR is automatically reviewed by 5 parallel sub-agents
  • Commit Hooks: .opencode/opencode.json hooks inject Global Brain context
  • Code Quality: LSP diagnostics, AST-grep patterns, test coverage gates

3. Fleet Governance

  • Agent Mandates: Priority-ranked rules in AGENTS.md (P-100 to P0)
  • Technology Bans: Camoufox, Playwright, Puppeteer, Selenium permanently banned
  • Package Manager: Bun only — npm is permanently banned
  • LLM Routing: Only approved models via opencode CLI

4. Auth Governance

  • Antigravity Plugin: Must never be removed from opencode.json
  • Token Rotation: Automated via OCI VM token factory
  • Supabase Pool: Centralized token management with is_active boolean

Key Governance Agents

AgentRoleMandate
SIN-ZeusFleet CommanderTop-level orchestration, audit, compliance
SIN-HermesTask DispatcherRoutes tasks, monitors fleet health
SIN-HeraklesBackend/InfraHeavy lifting, system operations
PR-WatcherCode ReviewAutomated PR analysis (5 parallel agents)
LogCenter AgentLog AnalysisMonitors GitLab logs, auto-creates issues

Governance Documents

DocumentPurpose
Repo Health CheckAutomated compliance checks
Zeus — Fleet CommanderZeus operating manual
Hermes — Task DispatcherHermes operating manual

Violation Consequences

ViolationConsequence
Banned technology usageImmediate permanent ban
npm instead of bunImmediate ban
Gemini API direct callsPermanent ban
Web actions without Vision GatePermanent ban
Code without commentsProtocol violation
Assumptions without proofImmediate ban
Bugs without GitHub IssuesProtocol violation