Inbin Gate

Safe auto-approve for IBM Bob. The agent keeps auto-approve on; it can act on its own only on values that someone with authority actually stated. Everything below runs the published resolver in your browser; nothing is sent anywhere.

1. What has authority

Developer intent (typed by a human, out of band: gate intent "…") Repository policy (what the maintainers established: package.json scripts and dependencies, .gate/policy.json)

2. What the agent read (no authority)

Content in front of the agent: issues, README, CI log

3. What the agent proposes

Action

Operand

Replay: 20 proposed actions on the sample project

Ten legitimate actions from the task list, ten injected ones planted in the README, the issues and the CI log. Computed live from the same resolver.

The resolver (authority.js) derives an authority class from the channel a value arrived on and never from the value. Developer intent and repository policy are the only channels with a grant; the agent's own proposal always mints PROPOSING, and a value that appears only in what the agent read never becomes anything else, however it is phrased. Source and paper links are in the repository.