Split quality gates into independent microservices

[fractional-pm]

Objective

Model gates as independently deployable/scalable microservices, with AGenNext Code Assist acting as orchestrator.

Services

• Audit Trace Service
• Policy Gate Service
• Security Gate Service
• Secrets Gate Service
• Dependency Gate Service
• Container Gate Service
• IaC Gate Service
• Supply Chain / SBOM Gate Service
• RAG Knowledge Service
• Memory Service
• Notification Service

Requirements

• Define stable API contracts for each gate.
• Normalize gate result schema.
• Code Assist calls gate services and records decisions.
• Required gate unavailable => fail closed in production mode.
• Optional gate unavailable => warn + audit.
• Waived gate requires explicit waiver metadata.
• Docker Desktop simulation can run local gate services.
• Shared/cloud services can be configured by URL.

Acceptance criteria

• Gate client interface exists.
• Local fallback remains possible.
• Gate results are normalized and audit-traced.
• Policy Gate Service produces final pass/fail/waived decision.