Claude Code surfaces an interesting tradeoff between skills and hooks — but governance ends up spread across hooks, settings, plugins, and frontmatter rather than living natively in the workflow itself. The next evolution is runtime-native governance, where key checks become structural guarantees instead of distributed control points.