Useful beyond the agent loop (CI / pre-commit) + machine-readable
v0.2.0 — useful beyond the agent loop (CI / pre-commit) + machine-readable
v0.2.0 takes the proof-gate from an in-loop guardrail to something you can also
gate CI, pre-commit, and release on — and makes every decision
machine-readable so other tools can build on it.
What's new
done-gate.sh assert— verify the ledger without running anything, for
CI / pre-commit / release gates. Require one or more labels (--label,
repeatable), reject stale receipts (--ttl), and constrain the recorded
command class (--allow-command-regex/AGENT_DONE_ALLOWED_COMMANDS).bash done-gate.sh assert --label test --label build --ttl 3600--jsononcapture,assert,verify, andshow— stable,
dependency-free decision objects for Actions, hooks, and editor integrations.- Trust pack: README badges, a comparison table (vs a plain
CLAUDE.md
rule), a "how it can and can't be fooled" threat model, an FAQ,SECURITY.md,
examples/proof.jsonl, and an asciinema cast atdocs/demo.cast.
Changed
epochis documented inproof.schema.json; freshness is judged from the
recorded epoch, never file mtime.- Tests: 18 → 28 (assert pass/fail/all-labels/ttl/regex +
--jsonparse checks),
green on Ubuntu + macOS.
Notes
- Backward compatible with v0.1.0 —
capture/verify/showare unchanged;
assertand--jsonare additive.
Full changelog: see CHANGELOG.md.