Source governance
Use when recording provenance, reviewing licences and costs, writing the decision log, or performing an explicit source-refresh to bring external references into the approved registry.From its SKILL.md
npx -y skills add Suraj787/motif --skill source-governanceAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.5 KB, 269 tokens by cl100k_base, as published. Nobody here has run it
Source Governance
Responsibility: Own provenance, licences, the decision log, and the only sanctioned
path to the internet, the explicit source-refresh.
When to invoke
- Whenever a registry entry, external reference, or new dependency enters a decision.
- At the end of every task to write the decision log + provenance.
Inputs
- Candidate sources, dependencies, ranking tables, and final selections.
Outputs
- Provenance records (source, licence, retrieval date, approval status).
- A licence + cost review per dependency.
- The decision log entry for the task.
How it connects
- Curates
registry/entries; the default runtime is the offline approved registry. - A
source-refresh(viapython -m motif) is the only way internet retrieval is allowed, and it must be explicit and recorded.
Invariants
- Never copy restricted or licence-incompatible code into the registry or repo.
- Never add a dependency without a recorded licence + cost review.
- Never retrieve from the internet outside an explicit
source-refresh. - Every shipped interaction has a provenance entry.
Notes
Offline-first is the default posture. Treat any unprovenanced or unlicensed candidate as unusable until governance resolves it.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.