What this is
A tiny reference demo repo for one narrow proof path through the ecosystem:
- create or load an identity
- lock a bond in AgentGate
- authenticate through MCP Firewall
- make one governed
write_filecall - verify the file effect on disk independently
- inspect the final resolution and audit artifact
This repo is intentionally narrow. It is not a framework, SDK, starter kit, or general deployment story.
What it proves
This release proves one concrete claim:
- a governed
write_filecall can be mediated by AgentGate and MCP Firewall - the final decision does not have to trust upstream-reported success alone
- the firewall can resolve from the observed file effect on disk
Included proof paths
Success demo
- governed
write_fileruns successfully - target file appears on disk
- parsed firewall audit artifact shows verified / success
Failure demo
- upstream claims success but does not produce the target file
- target file remains missing
- parsed firewall audit artifact shows failed / target missing
First run
npm run demo:success
npm run demo:failure