<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Governance on Unladen swallow - Olivier Wulveryck</title>
    <link>https://blog.owulveryck.info/tags/governance.html</link>
    <description>Recent content in Governance on Unladen swallow - Olivier Wulveryck</description>
    <generator>Hugo</generator>
    <language>en</language>
    <copyright>Olivier Wulveryck</copyright>
    <lastBuildDate>Fri, 10 Jul 2026 11:07:40 +0200</lastBuildDate>
    <atom:link href="https://blog.owulveryck.info/tags/governance/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Same Task, Two Endings: A Payment Integration With and Without the Planning Gateway</title>
      <link>https://blog.owulveryck.info/2026/07/09/same-task-two-endings.html</link>
      <pubDate>Thu, 09 Jul 2026 10:00:00 +0200</pubDate>
      <guid>https://blog.owulveryck.info/2026/07/09/same-task-two-endings.html</guid>
      <description>A developer asks a coding agent to add Stripe as a payment method to the checkout service. This article tells that story twice: once with today&amp;rsquo;s state of the art (the rules injected as text, through CLAUDE.md and a dedicated skill; the agent still touches frozen legacy code and bypasses the mandatory egress proxy, and the bill arrives days later in code review), and once through the Platform Planning Gateway, where the same rules live as data and the same mistakes are caught in seconds, inside the loop. Every JSON block is a real transcript from the proof of concept, replayable with curl.</description>
    </item>
    <item>
      <title>The Governed Skills Registry: Policy-as-Code for Enterprise Agent Capabilities</title>
      <link>https://blog.owulveryck.info/2026/07/08/governed-skills-registry.html</link>
      <pubDate>Wed, 08 Jul 2026 10:00:00 +0200</pubDate>
      <guid>https://blog.owulveryck.info/2026/07/08/governed-skills-registry.html</guid>
      <description>Skills are the distribution unit of the agentic workforce, but today&amp;rsquo;s package managers are capability-blind: they version and distribute without validating governance. This article extends the Platform Planning Gateway with a skill governance linter: a deterministic OPA/Rego gate that classifies every skill by security tier before it reaches the enterprise registry.</description>
    </item>
  </channel>
</rss>
