Review Agent Governance

Claude Code: /plugin marketplace add wshobson/agents → /plugin install review-agent-governance@claude-code-workflows

The default Cedar policy names the surfaces where an agent's mistake becomes other people's problem: gh pr review, comment, merge and close, the issue and release commands, pushes to main or release branches, and writes into .github/workflows or .gitlab-ci.yml. Everything else passes through untouched. Approval is a flag file — create it, let the action run, remove it — or a slash command that writes the same flag with a stated reason. What makes the documentation unusually trustworthy is the section admitting its limits: the approval log is plain JSON an operator could edit afterwards, and a human-approved call produces a receipt with no policy digest because Cedar was never consulted. Only the tool-call receipts are signed, and the README says so plainly.