amama-approval-workflows

Approval Workflows Skill

Overview

GovernanceRequest API workflows. Two tracks:

• Governance (this skill): Team, COS, agent lifecycle, transfers.
• Operational (amama-amcos-coordination): Deploys, merges, tests.

Prerequisites

• AI Maestro v2+ at $AIMAESTRO_API
• Password set per references/governance-password.md
• Writable state file and docs_dev/handoffs

Instructions

1. Poll pending (GET /api/v1/governance/requests?status=pending)
2. Parse type per references/governance-request-types.md
3. Present to MANAGER using template
4. Call approve/reject endpoint with password
5. Verify transition per references/state-machine.md
6. Update state per references/state-tracking.md
7. Notify requesting agent

Output

Outcome	Action
Approve	Call approve, update, notify
Reject	Call reject, update, notify
Info needed	Query, re-present
Timeout 24h	Auto-reject per expiry-workflow
Rate limit	Queue, wait, retry

Error Handling

Error	Fix
401	Re-enter password
429	Wait 60s, retry
404	Check request ID
409	Refresh status
No password	references/governance-password.md

Examples

Input: POST /api/v1/governance/requests/{id}/approve with {"password":"***","approvedBy":"MANAGER","notes":"Approved after review"}

Output: {"status":"approved","updatedAt":"2026-03-08T10:00:00Z","approvedBy":"MANAGER"}

See references/examples.md for more.

Copy this checklist and track your progress:

• Verify password set
• Poll pending GovernanceRequests
• Parse type, present to MANAGER
• Wait for decision
• Call approve/reject endpoint
• Verify state transition
• Update state file, notify agent

Resources

• references/governance-request-types.md - Request types
  • add-to-team, remove-from-team, assign-cos, remove-cos, transfer-agent, create-agent, delete-agent, configure-agent
• references/api-endpoints.md - API endpoints
  • List Pending Requests, Get a Specific Request, Approve a Request (MANAGER only)
  • Reject a Request (MANAGER only), Submit a Transfer Request, Transfer Request Handling (M5)
• references/state-machine.md - State machine
  • States, Transitions, Plugin Prefix Reference
• references/state-tracking.md - State tracking
  • State File Schema, Proactive Monitoring
• references/escalation-rules.md - Escalation
  • Auto-Reject Conditions, Auto-Approve Conditions (NEVER by default)
  • Escalation Triggers, User Notification, Workflow Checklist
• references/governance-password.md - Password
  • Initial Setup, Security Rules
• references/legacy-approval-types.md - Legacy v1
  • Push Approval, Merge Approval, Publish Approval
  • Security Approval, Design Approval
• references/expiry-workflow.md - Expiry
  • Expiry Check Schedule, Expiry Workflow Steps, Expiry Configuration
• references/examples.md - Examples
  • Example 1: Approving a Team Membership Request
  • Example 2: Handling a Transfer Request, Example 3: Rejecting a Dangerous Request
• references/rule-14-enforcement.md - RULE 14: immutable user requirements
• references/best-practices.md - Best practices
  • Always Verify Before Reporting, Maintain Records Consistently, Clear Communication with User
  • Risk-Aware Approval Decisions, Scope Management, Error Handling, Timeliness