A single entry point for human readers and AI agents walking the docs/ tree.
Start here. A human evaluating one change wants
quickstart.md — one review end to end on a committed sample,
including which build provides which commands. A coding agent wants
../AGENTS.md and agents/README.md. The
repository README.md is the landing page that routes to both.
Three constructed host-review examples show shell permissions, a remote MCP declaration and workflow token permissions, with exact Git histories and captured output from released 1.1.0. The asset bundle includes a short demo and transcript; publication and reader observations remain separate, pending work.
overview.md— one-page summary for developers, reviewers, and AI agentsconcepts.md— tool-use readiness in depth (the seven dimensions)mental-model.md— the 5-minute model: one engine, one verdict, every artifact a projection; who reads what and what agents cannot cheatreport-v1-consolidation-rc.md— proposal to regroup the report's top level by reader and freeze v1.0 (no behavior change yet)hosted-plane-design.md— design boundary for a future optional hosted product over local attestations/registry rows; the gate stays localmcp-governance.md— the two MCP surfaces (agent tool exports vs coding-agent host grants) and theSHIP-HOST-BOUNDARY-*checkshost-boundary-support.md— exact static Codex/Claude Code/Cursor/VS Code/GitHub support and scope matrixmcp-server.md— optional local MCP server mode (mcp-serve): read-onlyshipgate.check,shipgate.preflight,shipgate.explain, andshipgate.capabilitiesorganization.md— local-first organizational governance: policy-pack pins, exception hygiene, host-grant drift, attestations, and registry reportingcategory.md— what an "agent release gate" is, in product termsglossary.md— category vocabularyai-search-summary.md— human-readable summary for AI search and coding agentsdesign-partners.md— early design partner criteria and contact pathdesign-partner-verifier-pilot.md— runbook for the design-partner cohort: the two routes under test, the denominators, what counts as reviewer-understood first value, and the pre-registered continue/narrow/stop ruledesign-partner-pilot-results.md— the public aggregate ledger for that experiment: denominators, dated enrollment shortfall, reproduced blockers, and the standing decisionarchitecture.md— codebase layout for new contributorsdecisions.md— current accepted-decision index, superseded v0.1 defaults and explicit implementation obligations before the v1.0 freezeengineering/ai-coding-workflow-verifier.md— canonical engineering guide and roadmap for making Agents Shipgate the deterministic verifier inside AI coding workflowsengineering/insufficient-evidence-cold-start.md— proposed design for getting first-adoption repos out of a standinginsufficient_evidenceverdict on every turnengineering/host-authenticated-approval-receipts.md— proposed design for in-session approval receipts a host attests, and the record of why the unsigned version was rejectedagent-native-merge-contract.md— the agent-native protocol map: the eight merge contracts, each mapped to the artifact that implements itproduct-hardening-gap-closure.md— closure map for the root dogfood gate, governance case catalog, policy-pack tests, trace contract, and runtime-inventory boundaryagent-workflow-evidence.md— local Agent Workflow Evidence and AgentTraceEvent contract for replayable verifier scenarioscapability-standard.md— stable static capability lock/diff standard for external integrations and researchcapability-payload.md— the frozenshipgate.capability_payload/v1payload shared by the exported capability delta and the committed capability state, andv2, which adds each tool's definition digests; one payload, two views, one subject per rowcapability-delta-attestation.md— the capability delta published as a standalone in-toto attestation any consumer can verify without running Agents Shipgate; predicate type, subject binding, and the reference verifierpassed-verdict-contract.md— evidence-backed static meaning ofpassed, semantic gap routing, and 0.15 migrationgovernance-benchmark.md— stable research benchmark for evaluating agent governance behaviormanifest-v0.1.md— manifest schema in prose formtrust-model.md— what the scanner does and doesn't dobaseline.md— baseline workflowframework-adapter-checklist.md— checklist for adding static framework adaptersmcp-registration-idioms.md— the 30-server survey behind the built-in MCP registration-idiom registry: which shapes ship, what the reader excludes, and why an export still winsdistribution-surfaces.md— every surface this engine is published through, what each one claims, and the test that proves it; the registry a new surface has to be added todeterminism-boundary.md— generated coverage matrix: what each input can establish per declaration shape, the extraction-confidence ceiling it reaches, and what that ceiling means for a verdict
checks.md— full check catalog (human-readable)checks.json— machine-readable check catalog (regenerated each release)determinism-boundary.json— machine-readable determinism boundary (shipgate.determinism_boundary/v1; regenerated from the adapter registry, drift-checked in CI)manifest-v0.1.json— JSON Schema forshipgate.yamlreport-schema.v1.0.json— JSON Schema forreport.json(current, frozen at1.0, superseding0.43; emitted reports carryreport_schema_version: "1.0".1.xis additive-only — seereport-1-0-contract.md)report-schema.v0.43.json— frozen reference; the last pre-freeze version (privacy-safedeclaration_reviewprojection for PR verification)report-schema.v0.42.json— frozen reference (effective_policy.control_packnames the control pack in force)report-schema.v0.41.json— frozen referencereport-schema.v0.39.json— frozen reference (a confirmed declaration whose evidence has since moved re-opens as adeclaration_driftgap)report-schema.v0.38.json— frozen v0.38 reference; pre-v0.39 reports validate against thisreport-schema.v0.37.json— frozen reference (addedsemantic_coverage.declaration_questions, the questionnaire projection that says how many declarations a repository still owes)report-schema.v0.36.json— frozen reference (added thedeclaration_below_inferred_evidencegap kind that records a declaration weaker than the evidence observed for it)report-schema.v0.35.json— frozen v0.35 surface-exclusion-ledger reference; pre-v0.36 reports validate against thisreport-schema.v0.33.json— frozen v0.33 typed policy-evidence referencereport-schema.v0.32.json— frozen v0.32 Conductor OSS summary reference; pre-v0.33 reports validate against thisreport-schema.v0.31.json— frozen v0.31 root-reachable binding reference; pre-v0.32 reports validate against thisreport-schema.v0.30.json— frozen v0.30 provider-scoped identity reference; pre-v0.31 reports validate against thisreport-schema.v0.29.json— frozen v0.29 reference schema; pre-v0.30 reports validate against thisreport-schema.v0.28.json— frozen v0.28 reference schema; pre-v0.29 reports validate against thisreport-schema.v0.27.json— frozen v0.27 reference schema; pre-v0.28 reports validate against thisreport-schema.v0.26.json— frozen v0.26 reference schema; pre-v0.27 reports validate against thisreport-schema.v0.25.json— frozen v0.25 reference schema; pre-v0.26 reports validate against thisverifier-schema.v0.21.json— current JSON Schema forverifier.json, including declaration review in the embedded release decision, the unchanged limits a host comparison names, what each host comparison established and the changed inputs it does not readverifier-schema.v0.20.json— frozen prior reference; what each host comparison established, without the changed inputs it does not readverifier-schema.v0.19.json— frozen prior reference; published by1.0.0, without host comparison coverageverifier-schema.v0.16.json— frozen prior reference; no inferred structural comparisonverifier-schema.v0.15.json— frozen verifier referenceverifier-schema.v0.12.json— frozen v0.12 reference; pre-v0.13 verifier artifacts validate against thisverifier-schema.v0.11.json— frozen v0.11 reference; pre-v0.12 verifier artifacts validate against thisverifier-schema.v0.8.json— frozen prior JSON Schema forverifier.jsonverifier-schema.v0.6.json— frozen v0.6 reference schemaverifier-schema.v0.5.json— frozen v0.5 verifier referenceverifier-schema.v0.4.json— frozen v0.4 verifier referenceverifier-schema.v0.3.json— frozen v0.3 verifier referenceverifier-schema.v0.2.json— frozen v0.2 verifier referenceverifier-schema.v0.1.json— frozen v0.1 verifier referenceverify-run-schema.v5.json— JSON Schema forverify-run.json, the deterministic verify-run reproducibility artifactverify-run-schema.v2.json— frozen verify-run v2 referenceverify-run-schema.v1.json— frozen verify-run v1 referencehuman-authorization-schema.v1.json— current schema family for unsigned requests, externally signed grants, evaluations, and external trust policieshuman-authorization-signature-v1.json— canonical Ed25519 signature interoperability vectoragent-handoff-schema.v9.json— current compact verifier handoff schema with authorization provenanceagent-handoff-schema.v8.json— frozen prior reference; no inferred structural comparisonagent-handoff-schema.v5.json— frozen handoff v5 referenceverification-plan-schema.v1.json— content-addressed verification subject, inputs, engine requirement, and task planverification-unit-result-schema.v1.json— decision-free worker result contractverification-artifact-manifest-schema.v1.json— content-addressed terminal artifact setverification-receipt-schema.v1.json— terminal request, decision, executor, and artifact closurecurrent-control-schema.v1.json— the atomic pointer naming which control identity is currentagent-control-schema.v1.json— the compactshipgate.agent_control/v1control envelope emitted on stdoutagent-handoff-schema.v4.json— frozen handoff v4 referenceagent-handoff-schema.v3.json— frozen handoff v3 referenceagent-handoff-schema.v2.json— frozen handoff v2 referenceagent-result-schema.v3.json— current shared local-check and MCP result schemaagent-boundary-result-schema.v3.json— current host-neutral JSON Schema forshipgate check --format agent-boundary-jsoncodex-boundary-result-schema.v2.json— frozen deprecated compatibility projection for--format codex-boundary-jsoncodex-boundary-result-schema.v1.json— frozen boundary v1 referenceagent-result-schema.v1.json— legacy JSON Schema retained for existing local-agent protocol and MCP surfaces; not emitted byagents-shipgate verifypreflight-schema.v0.6.json— current proactive preflight control schema;planning_only, and no permission on any routepreflight-schema.v0.5.json— frozen prior reference; an empty plan returned the sharedcompletepreflight-schema.v0.4.json— frozen reference; no inferred structural comparisonpolicy-pack-schema.v0.4.json— JSON Schema for local policy-pack YAML files (current; selectors are evaluated against typed predicate evidence)policy-pack-schema.v0.3.json— frozen v0.3 policy-pack referencepolicy-pack-schema.v0.2.json— frozen v0.2 policy-pack referencepolicy-pack-schema.v0.1.json— frozen v0.1 reference schema for the flat match syntaxattestation-schema.v0.6.json— JSON Schema forattestation.jsonemitted byagents-shipgate attest; verify-run binding, explicit CI event facts, capability-lock/diff summaries with tool-definition digests, policy-pack pin records, and the pull request's approving reviews (approval) for cross-repo ledgersattestation-schema.v0.5.json— frozen v0.5 attestation referenceattestation-schema.v0.4.json— frozen v0.4 attestation referenceorg-governance-schema.v0.1.json— JSON Schema foragents-shipgate org status --json; local governance projection, not a release verdictorg-evidence-bundle-schema.v2.json— JSON Schema foragents-shipgate org bundle; compact CI/ledger ingestion artifact over verifier/report/attestation/org/host-grant evidence, not a release verdictregistry-schema.v0.5.json— JSON Schema foragents-shipgate registry query --json,registry summary --json,registry verify --json, andregistry report --bypass --json; rows carry the attestedapprovalregistry-schema.v0.4.json— frozen v0.4 registry referenceregistry-schema.v0.3.json— frozen v0.3 registry referencehost-grants-inventory-schema.v0.7.json— current typed, redacted, scope-aware host inventory; records the in-tree links a read followed, each workflow step's action reference, and each agent launch and checkout ref a workflow declares, plus hook handlers and MCP package/argument digestshost-grants-inventory-schema.v0.6.json— frozen v0.6 referencehost-grants-inventory-schema.v0.5.json— frozen v0.5 referencehost-grants-inventory-schema.v0.4.json— frozen v0.4 referencehost-grants-inventory-schema.v0.2.json— frozen prior reference; no inferred structural comparisonhost-grants-baseline-schema.v0.7.json— current acknowledged host-grant baselinehost-grants-baseline-schema.v0.6.json— frozen v0.6 reference; compared by drift only when it holds no workflow granthost-grants-baseline-schema.v0.5.json— frozen v0.5 reference; compared by drift only when it holds no workflow granthost-grants-baseline-schema.v0.4.json— frozen v0.4 reference; compared by drift only when it holds no workflow granthost-grants-baseline-schema.v0.2.json— frozen prior reference; no inferred structural comparisonhost-grants-drift-schema.v0.7.json— current comparable/incomparable host-grant drift resulthost-grants-drift-schema.v0.6.json— frozen v0.6 referencehost-grants-drift-schema.v0.5.json— frozen v0.5 referencehost-grants-drift-schema.v0.4.json— frozen v0.4 referencehost-grants-drift-schema.v0.2.json— frozen prior reference; no inferred structural comparisonhost-grants-inventory-schema.v0.1.json— frozen legacy host inventory referenceattestation-schema.v0.3.json— frozen v0.3 attestation referenceattestation-schema.v0.2.json— frozen v0.2 attestation referenceattestation-schema.v0.1.json— frozen v0.1 attestation referenceregistry-schema.v0.2.json— frozen v0.2 registry referencecapability-payload-schema.v1.json— frozen JSON Schema forshipgate.capability_payload/v1; the shared payload of the exported delta and the committed state, non-gatingcapability-delta-attestation-schema.v1.json— frozen JSON Schema for the in-toto statementverifywrites ascapability-delta-attestation.json, non-gatingcapability-payload-schema.v2.json— JSON Schema forshipgate.capability_payload/v2: v1 plus each tool's definition digests (description, output schema, annotations), non-gatingcapability-delta-attestation-schema.v2.json— JSON Schema for the v2 statementverifywrites beside v1 ascapability-delta-attestation.v2.json, non-gatingcapability-lock-schema.v0.9.json— current JSON Schema forcapabilities.lock.json; carries typed semantic evidence and tool-definition digests, and remains non-gatingcapability-lock-schema.v0.8.json— frozen v0.8 reference; a v0.8 lock still loads, and is re-exported before it is comparedcapability-lock-schema.v0.7.json— frozen v0.7 referencecapability-lock-schema.v0.6.json— frozen v0.6 reference; a v0.6 lock still loads and is advanced on readcapability-lock-diff-schema.v0.10.json— current JSON Schema for semantic capability-lock diff artifacts, withdefinition_changedrows; remains non-gatingcapability-lock-diff-schema.v0.9.json— frozen v0.9 referencecapability-lock-diff-schema.v0.8.json— frozen v0.8 referencecapability-lock-diff-schema.v0.7.json— frozen v0.7 referencecapability-lock-schema.v0.5.json— frozen v0.5 binding-hash referencecapability-lock-diff-schema.v0.6.json— frozen v0.6 diff referencecapability-lock-schema.v0.2.json— frozen v0.2 capability-lock referencecapability-lock-diff-schema.v0.3.json— frozen v0.3 capability-lock-diff referencecapability-lock-schema.v0.1.json— frozen experimental reference for old capability lock and diff artifacts;capability diffstill accepts old lock inputsgovernance-benchmark-catalog-schema.v0.2.json— stable JSON Schema forbenchmark/agent-pr-governance/cases.yaml; an eval substrate, not a release gategovernance-benchmark-result-schema.v0.2.json— stable JSON Schema for governance benchmark result artifacts emitted byscripts/run_governance_benchmark.py; non-gating and not part ofreport.jsongovernance-benchmark-result-schema.v0.1.json— frozen experimental benchmark result referenceagent-trace-event-schema.v0.1.json— JSON Schema for local, opt-in AgentTraceEvent records used by Agent Workflow Evidenceagent-workflow-evidence-bundle-schema.v0.1.json— JSON Schema for local, opt-in replay bundles that combine verifier artifacts, trace files, and expected governance outcomesscenario-schema.v0.1.json— JSON Schema for the workflow-evidencescenario.jsonemitted byagents-shipgate feedback captureprivacy.md,terms.md, andreport-sensitive-fields.json— Codex plugin privacy/terms, redaction behavior, and report sensitive-field inventoryagent-action-guide.md— per-category recipe for what to do with a finding (canonical fix per check category, last-resort suppression rules)upstream-integrations.md— per-framework 60-second drop-in for adding Shipgate to an existing project (OpenAI Agents SDK, LangChain, CrewAI, ADK, MCP-only, OpenAPI-only, OpenAI Messages API, Anthropic Messages API)report-schema.v0.24.json— frozen v0.24 reference schema; pre-v0.25 reports validate against thisreport-schema.v0.23.json— frozen v0.23 reference schema; pre-v0.24 reports validate against thisreport-schema.v0.22.json— frozen v0.22 reference schema; pre-v0.23 reports validate against thisreport-schema.v0.21.json— frozen v0.21 reference schema; pre-v0.22 reports validate against thisreport-schema.v0.20.json— frozen v0.20 reference schema; pre-v0.21 reports validate against thisreport-schema.v0.19.json— frozen v0.19 reference schema; pre-v0.20 reports validate against thisreport-schema.v0.18.json— frozen v0.18 reference schema; pre-v0.19 reports validate against thisreport-schema.v0.17.json— frozen v0.17 reference schema; pre-v0.18 reports validate against thisreport-schema.v0.16.json— frozen v0.16 reference schema; pre-v0.17 reports validate against thisreport-schema.v0.15.json— frozen v0.15 reference schema; pre-v0.16 reports validate against thisreport-schema.v0.14.json— frozen v0.14 reference schema; pre-v0.15 reports validate against thisreport-schema.v0.13.json— frozen v0.13 reference schema; pre-v0.14 reports validate against thisreport-schema.v0.12.json— frozen v0.12 reference schema; pre-v0.13 reports validate against thisreport-schema.v0.11.json— frozen v0.11 reference schema; pre-v0.12 reports validate against thisreport-schema.v0.10.json— frozen v0.10 reference schema; pre-v0.11 reports validate against thisreport-schema.v0.9.json— frozen v0.9 reference schema; pre-v0.10 reports validate against thisreport-schema.v0.8.json— frozen v0.8 reference schema; pre-v0.9 reports validate against thisreport-schema.v0.7.json— frozen v0.7 reference schema; pre-v0.8 reports validate against thisreport-schema.v0.6.json— frozen v0.6 reference schema; pre-v0.7 reports validate against thispacket-schema.v0.18.json— JSON Schema for the Release Evidence Packet (current; emitted packets add exhaustive base-vs-head declaration review while the PR comment remains attention-only)packet-schema.v0.17.json— frozen packet referencepacket-schema.v0.15.json— frozen v0.15 reference; pre-v0.16 packets validate against thispacket-schema.v0.14.json— frozen v0.14 declaration-questionnaire packet reference; pre-v0.15 packets validate against thispacket-schema.v0.11.json— frozen v0.11 typed policy-evidence packet referencepacket-schema.v0.10.json— frozen v0.10 binding-aware packet referencepacket-schema.v0.9.json— frozen v0.9 reference packet schema; pre-v0.10 packets validate against thispacket-schema.v0.8.json— frozen v0.8 reference packet schema; pre-v0.9 packets validate against thispacket-schema.v0.7.json— frozen v0.7 reference packet schema; pre-v0.8 packets validate against thispacket-schema.v0.6.json— frozen v0.6 reference packet schema; pre-v0.7 packets validate against thispacket-schema.v0.5.json— frozen v0.5 reference packet schema; pre-v0.6 packets validate against thispacket-schema.v0.4.json— frozen v0.4 reference packet schemapacket-schema.v0.3.json— frozen v0.3 reference packet schemacategory.md— what an "agent release gate" is, in product terms
examples.md— narrative tour of sample agents and CI recipes../examples/golden-prs/— end-to-end advisory PR examples for humans and coding agentsincidents/— three replayable public-incident shapes, an honest expected-fail, and the response-article templatemanifest-v0.1.example.minimal.yaml— smallest valid manifestmanifest-v0.1.example.full.yaml— every section populatedexamples/capability-fact.v0.2.example.json— capability-standard v0.2 fact with normalized semantic evidenceexamples/capability-payload.v1.state.example.json— workedview: statecapability payload, generated fromsamples/ai_generated_refund_prexamples/capability-payload.v1.delta.example.json— workedview: deltacapability payload for the same sample's one-added-tool PRexamples/capability-delta-attestation.v1.example.json— the same delta wrapped as an in-toto statement; the filetools/verify-capability-delta.pyis demonstrated againstexamples/capability-payload.v2.state.example.json,examples/capability-payload.v2.delta.example.jsonandexamples/capability-delta-attestation.v2.example.json— the same three, in v2examples/capability-lock.v0.5.example.json— current deterministic capability lock exampleexamples/capability-lock-diff.v0.6.example.json— current semantic capability-lock diff example../samples/— runnable fixtures../samples/_anti_patterns/— manifests that intentionally fail validation
quickstart.md— the human entry path: one review end to end on a committed sample — which build you get, what the change added, why the top result matters, what was not established, and who owns the next action; then the two adoption routes, advisory CI, and the second PRfaq.md— common questions, AI-search-friendlyintegrations.md— CI/CD integration recipes (GitHub Actions, GitLab CI, CircleCI, Jenkins snippet)troubleshooting.md— error messages → fixesdistribution.md— release process and SBOM/signature verificationrelease-runbook.md— cutting a tag: mandatory rehearsal, the two-job publication transaction, provenance bindings, and the recovery path when PyPI succeeds but finalization failsrelease-evidence-policy-decision.md— the approved release evidence bar: the 38-casepre_1_0policy for0.xtags, the 80-casebetapolicy from 1.0 on, and the promotion path between them (decided 2026-08-29, #341; amended 2026-09-04, #520)release-evidence-policy-decision.md§ Amendment 2 — the unqualified preview channel: the admissibility finding, the five conditions it holds under, and what would have made it inadmissible (decided 2026-09-02, #491)changelog/1.2.0.md— the full reviewed prose for every 1.2.0 change;CHANGELOG.mdcarries the one-line-per-change release notechangelog/1.1.0.md— the full reviewed prose for every 1.1.0 change;CHANGELOG.mdcarries the one-line-per-change release notechangelog/1.0.0.md— the full reviewed prose for every 1.0.0 change made after the0.16.0section was cut;CHANGELOG.mdcarries the one-line-per-change release notechangelog/0.16.0.md— the full reviewed prose for every 0.16.0 change;CHANGELOG.mdcarries the one-line-per-change release notedecisions.md— architectural decisions
-
agents/README.md— compact entry point for coding agents: discovery, local control, PR verify, and redacted feedback -
agents/protocol.md— normative local control protocol forshipgate check --format agent-boundary-json -
agent-recipes.md— copy-pasteable AI-agent workflows for verify-first PRs and first adoption (detect → init → scan → apply-patches) -
agent-contract-current.md— current statement of whichreport.jsonfields agents and CI integrations should read -
report-reading-for-agents.md— reader's primer forreport.json; walks the file in the order a new consumer should read it -
agent-autofix-boundary.md— what an agent may do mechanically vs. what must defer to a human reviewer -
autofix-policy.md— which findings are safe to apply, which need review, and howapply-patches --confidencefilters them -
diagnostics.md— ranked next-action diagnostics surfaced bydetect,doctor, and structured-error JSON -
target-repo-agent-snippets.md— copyableAGENTS.md, Codex skill,CLAUDE.md, Cursor, PR template, and advisory workflow snippets for downstream repos -
agents/use-with-claude-code.md— install the/shipgateslash command andagents-shipgateskill in your agent project -
agents/use-with-codex.md— install the canonicalAGENTS.mdsnippet and repo-scoped Codex skill -
agents/use-with-cursor.md— drop the auto-attach.cursor/rules/agents-shipgate.mdcrule in for Cursor -
agent-adoption-harness.md— manual protocol for measuring whether coding agents discover and use Shipgate -
minimal-real-configs.md— framework-by-framework references to the smallest working manifest -
../AGENTS.md— agent-facing instructions -
../CLAUDE.md— Claude Code-specific notes -
../STABILITY.md— what won't break across0.x -
../prompts/— reusable prompts -
../llms.txt— AI-readable project summary -
ai-search-summary.md— prose companion tollms.txt -
../.well-known/agents-shipgate.json— discovery metadata -
Instruction structure and review routing — supported profiles, edit-hook behavior and legacy evidence migration.