ProofGate.
Permission to use a tool isn’t authority to take every action.
ProofGate resolves what a proposed agent action would actually touch, checks it against the human’s authorization, and binds authorization to a canonical digest of that exact action.
- One deterministic policy engine, two domain bindings.
- Read-only Legal resolution and SHA-256 action binding.
- Operations MCP gateway with postconditions and eligible rollback.
1,218 tests passed · Last verified
HUMAN DELEGATED
One matter. No privileged files.
At most 100 documents.
4 ethical-wall-restricted docs independently veto ALLOW.
Violation categories may overlap.
SEPARATE, IN-SCOPE PLAN
80 documents from M-102.
ALLOW, bound to the exact action.
cd4ff5e2544c75e2…dfbf4d561ac57a98…81 is still below the limit.
The action changed. Verification compares digests; it does not rerun policy.
