-
Notifications
You must be signed in to change notification settings - Fork 0
Operator FAQ
David Ahmann edited this page Feb 10, 2026
·
1 revision
To enforce action boundaries at execution time, not after the fact. Gate evaluates intent, policy, approvals, and provenance before side effects execute.
Yes for core workflows. Recording, verifying, diffing, replay, policy test, and regression run locally.
Default is fail-closed for high-risk paths. Simulation mode exists for staged rollout.
Use traces, runpacks, verification output, and ticket footer artifacts. These are deterministic and schema-validated.
Use one contract across adapters. No framework receives privileged bypass behavior.
- Use
--jsonoutputs. - Preserve canonical artifacts under
gait-out/. - Run regress fixtures in CI.
OSS focuses on execution substrate and local control loops. Fleet control-plane concerns stay in enterprise planning docs, not OSS runtime path.