AgentOps / Harness Governance

Ad Platform Policy Gate Designer

Design policy gates, approval thresholds, deny rules, and bounded execution rules for marketing agents that change bids, budgets, targeting, audiences, feeds, or tracking.

DocumentationAgent instructionsRequirements & limitsRelated reading

Use when defining what an ad-platform agent may auto-execute, what requires approval, and what must be denied.

Inputs

Collect:

  • Platforms and entity types: account, advertiser, campaign, insertion order, line item, ad group, keyword, audience, feed item.
  • Action types: bid, budget, status, targeting, audience, creative, feed, tracking.
  • Business context: client, market, spend tier, regulated category, SLA.
  • Existing approval owners and escalation paths.
  • Risk thresholds: budget delta, bid delta, audience expansion, geo expansion, pacing variance.
  • Rollback and audit requirements.

Outputs

  • Policy gate table
  • Approval threshold map
  • Deny rule set
  • Audit evidence checklist

Before you begin

  • Reading and copying the procedure require no terminal setup. Check requirements for any packaged programs separately.

Try this first

Read the procedure and supply its documented inputs. Use the full text in an agent app or chat that supports pasted instructions, following that host's guidance.

Limits for this step
  • Instruction package only; it does not provide or authorize an executable runtime capability.
  • Analysis-only; must not change live policy, approve campaign changes, or execute platform writes.
Read full instructionsHide full instructionsSKILL.md · v0.1.0

Ad Platform Policy Gate Designer

When to use

Use this skill when a team needs concrete governance rules for an agent that can propose or execute ad-platform changes.

Typical triggers:

  • "What Google Ads actions can this agent auto-execute?"
  • "Which DV360 changes need human approval?"
  • "Design policy gates for bid, budget, and targeting changes."
  • "Create deny rules for regulated categories or sensitive markets."
  • "Turn our campaign-risk policy into executable thresholds."

Inputs required

Collect:

  • Platforms and entity types: account, advertiser, campaign, insertion order, line item, ad group, keyword, audience, feed item.
  • Action types: bid, budget, status, targeting, audience, creative, feed, tracking.
  • Business context: client, market, spend tier, regulated category, SLA.
  • Existing approval owners and escalation paths.
  • Risk thresholds: budget delta, bid delta, audience expansion, geo expansion, pacing variance.
  • Rollback and audit requirements.

Workflow

  1. Classify actions by risk.

    • Low: read-only, recommendation-only, status summaries, small reversible bid changes.
    • Medium: bounded bid/budget edits, narrow targeting edits, non-publishing feed drafts.
    • High: budget increases, targeting broadening, audience expansion, live publishing, tracking changes.
    • Blocked: cross-client actions, unscoped exports, forbidden categories, policy overrides by agent.
  2. Convert risk into gates.

    • Auto-execute only when action is low risk, scoped, reversible, and below thresholds.
    • Route medium/high risk to named approvers.
    • Deny actions that violate scope or organisational policy.
  3. Define bounded execution grants.

    • Include workspace, platform, advertiser, entity, allowed action, max delta, expiry, and approval id.
  4. Define audit evidence.

    • Require current state, proposed diff, policy decision, approval decision, execution payload, post-write state, and rollback patch.
  5. Produce implementation-ready policy tables.

Output format

# Ad Platform Policy Gates

## Risk model
| Risk tier | Definition | Examples |
| --- | --- | --- |

## Policy gates
| Action | Auto-execute | Approval required | Deny when | Audit evidence |
| --- | --- | --- | --- | --- |

## Thresholds
| Metric | Low-risk range | Approval threshold | Block threshold |
| --- | --- | --- | --- |

## Bounded grant fields
- workspace_id
- platform
- advertiser_id
- entity_type
- entity_id
- allowed_action
- max_delta
- expires_at
- approval_id

## Engineering notes
1. ...

Guardrails

  • Do not approve or execute live campaign changes.
  • Do not make policy less strict than the user's stated organisational baseline.
  • Treat missing client/workspace/advertiser scoping as a blocker for auto-execution.
  • Require approval for targeting expansion, budget increases, tracking changes, and regulated-category changes by default.
  • Recommend denial when rollback or post-write verification is unavailable for risky writes.
View file metadata
---
name: ad-platform-policy-gate-designer
description: Design approval gates, auto-execution thresholds, deny rules, and audit requirements for DV360, Google Ads, and ad-platform agent writes.
---

Summary sources · Catalogue metadata, skill.yaml, SKILL.md, examples/output.json · v0.1.0 · Release package

Install instruction files

These commands copy guidance into the selected runtime directories. Confirm that your agent app discovers it. Any packaged programs need separate setup and verification.

Install (Codex)

./bin/skills-hub install agentops/[email protected] --runtime codex

Install (Claude)

./bin/skills-hub install agentops/[email protected] --runtime claude

Install (Generic)

./bin/skills-hub install agentops/[email protected] --runtime generic --target ./my-agent/skills

How You Can Use This

Documentation

Resource form: Agent instructions

Read or copy the guidance. Any packaged programs have separate execution requirements and evidence.

First run: Read SKILL.md and follow the documented workflow.

Current limits

  • Instruction package only; it does not provide or authorize an executable runtime capability.
What installation and verification mean
File installation
Places package files and generated configuration in the selected directories.
Native discovery
Your agent app finds and accepts the instructions, tools or plugin registrations.
Mock execution
Exercises sample fixtures. Connected data and provider effects need a separate check.
Connected operation
Requires current configuration, provider authentication, scoped permissions and a successful operation in your intended environment.

Declared compatibility

Compatibility unknown: versions and capabilities have not been declared.

Classification: declared

Technical details and release files

Operational Summary

Execution mode: analysis-only

Approval boundary: Analysis-only; must not change live policy, approve campaign changes, or execute platform writes.

Review and lifecycle

Review maturity: Experimental

Security review declaration: Not declared

Lifecycle: Active

These release declarations are separate from evidence that a workflow operates in your environment.

Runtime & Dependencies

ID: agentops/ad-platform-policy-gate-designer

Tags: adtech, policy, approvals, dv360, google-ads

Runtimes: codex, claude, generic

Tool dependencies: 0

API dependencies: 0

Dependencies

Tools: Not documented

APIs: Not documented

Outputs

  • Policy gate table
  • Approval threshold map
  • Deny rule set
  • Audit evidence checklist