diff --git a/docs/GOVERNANCE.md b/docs/GOVERNANCE.md
index 13851b1..b7ffb06 100644
--- a/docs/GOVERNANCE.md
+++ b/docs/GOVERNANCE.md
@@ -63,6 +63,9 @@ the community:
 
 - GPG key expiration (checked quarterly).
 - CI pipeline is functional (every commit push triggers it).
+- `[skip ci]` is used for trivial commits (changelog, governance, docs-only).
+  Touching `Cargo.toml`, `Cargo.lock`, `deny.toml`, or source files must
+  always run full CI.
 - Backup of repository and signing subkey exists in offline storage.
 
 ## Code of Conduct
diff --git a/skills/session-protocol/SKILL.md b/skills/session-protocol/SKILL.md
index e2df78f..7be352b 100644
--- a/skills/session-protocol/SKILL.md
+++ b/skills/session-protocol/SKILL.md
@@ -43,3 +43,7 @@ assuming a CSS specificity problem.
    Build + test + lint before declaring done.
 4. **Draft release cycle** — commit → push → tag → CI builds draft →
    user tests → publish. Never ship without draft testing.
+5. **`[skip ci]` on trivial commits** — changelog, governance, documentation-only
+   commits skip the full CI `check` run. Include `[skip ci]` in the commit
+   message to save CI minutes on housekeeping changes. Omit for any commit
+   that touches `Cargo.toml`, `Cargo.lock`, `deny.toml`, or source files.