feat: add ProofPath Deploy Guard assured-action demo

[safal207]

What changed

Adds the first product-shaped ProofPath Assured Action demo for AI coding and cloud agents.

ProofPath Deploy Guard evaluates one proposed production deployment against observable authority, policy, approval, test, security, ticket, artifact, commit, provenance, and runner evidence. It emits a deterministic clearance certificate with one of four outcomes:

ACCEPT     policy satisfied for this exact action
HOLD       required evidence is incomplete or pending
BLOCK      an objective policy or safety requirement failed
CHALLENGE  claimed facts conflict and require investigation

The implementation adds:

• a dependency-free, strict-JSON Deploy Guard verifier;
• domain-separated policy, evidence, and clearance roots;
• fail-closed CHALLENGE > BLOCK > HOLD > ACCEPT precedence;
• four public production-deploy scenarios;
• a strict clearance-certificate schema;
• 25 focused decision, mutation, integrity, and determinism tests;
• 7 workflow-boundary tests;
• a signed GitHub Actions demo;
• product and safety documentation.

Assured Action certificate

Every certificate states the exact current assurance boundary:

Assurance: POLICY_VERIFIED
Witnesses: SINGLE_WORKFLOW_REFERENCE
Coverage:  NOT_FINANCIALLY_COVERED

authority_granted is always false. An ACCEPT decision says only that the supplied observable evidence satisfies the evaluated policy for the exact action.

Signed demo

The workflow:

1. runs 32 focused tests;
2. generates all four decision certificates;
3. verifies the deterministic ACCEPT clearance root;
4. keyless-attests the exact ACCEPT certificate;
5. keyless-attests a four-scenario demo manifest;
6. uploads the evidence bundle for 14 days.

Safety boundary

The demo does not deploy anything, call a cloud provider, modify IAM, merge code, grant broader authority, claim an independent quorum, or provide financial coverage. It signs the decision artifact rather than executing the deployment.

Product path

Deploy Guard
    ↓
external PoCI quorum
    ↓
bonded witnesses and disputes
    ↓
covered proof through an appropriate licensed partner

Stacked PR

Base: agent/poci-external-submission-admission-v0.1 / #205

No merge is performed by this PR.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9b20ca3e-c9b5-4989-8548-6094b0b67196

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[safal207]

Validation complete

Final head: 384826649b5a8c24e0d31a57a0f8756f61053ca4

Passed:

• ProofPath Deploy Guard run Write ProofPath HTTP Profile v0.1 #1 (30714553079)
  • 25 decision, mutation, integrity, precedence, and determinism tests;
  • 7 workflow-boundary tests;
  • all four public scenarios produced the expected ACCEPT / HOLD / BLOCK / CHALLENGE decisions;
  • deterministic ACCEPT clearance root verification;
  • keyless attestation of the exact ACCEPT certificate;
  • keyless attestation of the four-scenario demo manifest;
  • bounded evidence artifact upload.
• Rust run #288 (30714553055)
  • formatting;
  • clippy;
  • workspace tests;
  • Compute Witness;
  • live action-boundary metrics;
  • reusable ProofPath action;
  • Personal Agent Guard;
  • Agent Payment Guard.

ACCEPT certificate

• clearance root: sha256:31a5e449aab0d91df14cb7a1109890a0355733dfe3ea94b1a3735a7519d40236
• exact subject SHA-256: a12cf08a5550c89c29260d8613e8219e67827a4646b5f3358703cc8ee6912ec0
• GitHub attestation ID: 38350402
• Rekor log index: 2314006562

Demo manifest

• exact subject SHA-256: a078f8a59f82645da509321190ecafba45e780e98aa7d191c0d557a37ff6636a
• GitHub attestation ID: 38350403
• Rekor log index: 2314006699

Evidence artifact

• name: proofpath-deploy-guard-30714553079
• artifact ID: 8822919731
• size: 5815 bytes
• SHA-256: fc85e513b5a926587713125413d422b6312ac7f1c6f6d18a9f1cd9991ea83591
• expires: 2026-08-15T19:20:48Z

Honest boundary remains explicit:

Assurance: POLICY_VERIFIED
Witnesses: SINGLE_WORKFLOW_REFERENCE
Coverage: NOT_FINANCIALLY_COVERED
Deployment performed: false
Authority granted: false

No merge has been performed.