Commit Gate Engine v0.1.0

Commit Gate Engine v0.1.0

Deterministic, hash-bound commit authority gate.

Deliverables

• D1: commit_gate CLI (stdlib-only)
• D2: Canonical decision artefact (JSON)
• D3: Authority graph + drift diff
• D4: CI tests proving determinism + non-expansion

Tests

• T1: Determinism (same input -> byte-identical output)
• T2: Hash stability (sha256 hex lower-case, 64 chars)
• T3: Key + reason ordering stability
• T4: Drift FAIL on reachability expansion
• T5: Drift PASS on tightening
• T6: Drift PASS with expansion + acknowledged revision

Constraints

• stdlib only, no network
• Python 3.10 / 3.11 / 3.12
• Zero imports from /prometheus/
• No new governance primitives beyond {ALLOW, REFUSE, ESCALATE}

Prometheus Anomaly Surveyor v0.1.0

Prometheus Anomaly Surveyor v0.1.0

First release of the Prometheus observability island.

Scope

• Read-only anomaly surveyor: observes and reports, no execution authority
• NON_EXEC: no schedulers, runners, deploy hooks, or automation
• Island: lives only under /prometheus/*; never imported by gate or pipeline code
• Deterministic: same inputs + same repo snapshot = byte-identical outputs

Components

• schemas.py -- DiagEvent + AnomalySummary validation (stdlib only)
• io_jsonl.py -- JSONL read/write with sort_keys=True, indent=2
• hashing.py -- SHA-256 deterministic file hashing (lexicographic ordering)
• aggregate.py -- Anomaly statistics aggregation
• redlines.py -- Red-line scanner (/trinity/gate/, /alviantech/pipeline/, ALLOW/HOLD/DENY/SILENCE)
• fit_report.py -- FIT_CLEAN / FIT_WITH_WARNINGS / DRIFT_RISK classification
• render.py -- Orchestration entrypoints (fixture + runtime modes)

Red-line rules

• Forbidden paths: /trinity/gate/, /alviantech/pipeline/
• Forbidden tokens: ALLOW, HOLD, DENY, SILENCE (case-insensitive)
• Scanner scope: src/**/*.py only

CI

• Python 3.10 / 3.11 / 3.12 matrix, all green
• 61+ tests across 5 test modules

Verdicts

Verdict	Condition
FIT_CLEAN	No schema errors, no red-lines, no forbidden content
FIT_WITH_WARNINGS	Schema-invalid events, but clean otherwise
DRIFT_RISK	Red-line hit in code OR forbidden content in invalid event data

Licence

Apache 2.0 (same as parent repo)

v0.2.0 — Three deterministic primitives

Primitives

• stop_machine — Three-state finite machine (GREEN/AMBER/RED). RED is terminal.
• authority_gate — Evidence-ordered access gate (NONE < USER < OWNER < ADMIN). Monotonic, pure.
• invariant_litmus — Posture classifier (hard invariant vs cost curve vs edge). Phrase matching + regex.

Stats

• 3 primitives, 3 test suites
• 34 test cases total (9 + 12 + 13)
• All under 120 LOC each
• No external dependencies (stdlib + pytest only)
• No orchestration. No logging. No callbacks.

Run

pip install pytest
pytest -v