Deterministic decisions
action-gate
Evaluate checks into explicit allow, deny or degrade outcomes.
Observed 2026-10-03 · Producer spec-spine 0.28.0
6cfa81efb0426d2c4242e2919b58180ec3b384ea ↗3 specifications. Verification and deployment qualification are unknown in this export.
action-gate bootstrap (pure decision gate over a check registry)
Bootstrap spec for the action-gate repository: a two-crate pure, deterministic decision gate that evaluates an ActionContext against an ordered, pluggable Check registry and returns Allow/Deny/Degrade. Extracted (relicensed Apache-2.0 by the sole copyright holder) from the Open Agentic Platform's crates/policy-kernel/lib.rs (the Case-B extraction: OAP's hardcoded six-gate evaluate becomes a Check registry over a domain-neutral context). Depends on canonical-keysort-json for reproducible decision hashing. This spec establishes the workspace skeleton and seeds this repo's own spec corpus, governed by the pinned spec-spine library.
Secret detector parity: a regex-free detector registry with ids and offsets, and an opt-in deny-by-default terminal check
Converges the family's secret detection upward into action-gate-core. aicortex-gate's detectors (aicortex spec 013 B-4: 24 published-prefix rules, 7 private-key armour markers including the PGP block, a URL credential detector, a JWT detector, and a Q16 fixed-point entropy detector) move here with their stable detector ids and byte offsets, joined by action-gate's own `api_key =` style assignment rule, as one pure, regex-free registry. A new `SecretScanCheck` reports which detector fired and where without echoing the value. The published `SecretsCheck` and the gate's allow-when-silent default are unchanged; a documented, opt-in `DenyByDefault` terminal check lets a consumer close the gate. Golden vectors ported from aicortex's corpus ship with the crate so aicortex spec 047 can assert parity by vector id. Semver-minor (0.2.0).
Adopt Statecraft profile revision 14 with the ordinary Rust code gate
Authorizes the narrow migration from Statecraft github-actions-rust revision 13 to revision 14 after the spec-spine 0.28.0 bridge and pin sequence. Action Gate keeps its exact engine pin, ordinary Rust code gate and all-features job. The managed authority files are regenerated by the revision 14 producer using the retained setup parameters.