Initial commit

skills/governance/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: governance
+description: Use to enforce approvals, compliance, and auditability for personalization
+  programs.
+---
+
+# Personalization Governance Skill
+
+## When to Use
+- Deploying or updating personalization rules, models, or high-impact content variants.
+- Running quarterly audits on consent, data usage, or fairness metrics.
+- Investigating incidents related to personalization errors or policy breaches.
+
+## Framework
+1. **Policy Alignment** – document legal, privacy, accessibility, and ethical constraints per channel.
+2. **Approval Workflow** – define RACI (architect, legal, security, marketing) and required evidence per change.
+3. **Change Logging** – capture version metadata (who, what, when, why), including rollback steps.
+4. **Risk Monitoring** – set KPIs + alerts for fairness, bias, consent violations, or performance regressions.
+5. **Audit Trail** – maintain dashboards + storage for decision logs, approvals, and incident reports.
+
+## Templates
+- Change request form (summary, impact, risk score, approvers, attachments).
+- Governance checklist (consent, accessibility, localization, security, QA evidence).
+- Incident review template (root cause, remediation, follow-up actions, owner).
+
+## Tips
+- Pair governance checkpoints with CI/CD or deployment scripts to prevent bypass.
+- Use unique change IDs to connect decision tree updates with content variants and experiments.
+- Schedule quarterly tabletop exercises to keep stakeholders fluent in escalation paths.
+
+---