# Coding-Agent Action Gate

**SKU:** CAIN-A75-024  
**Development:** #24 Coding agents inside native development tools  
**Product status:** DELIVERABLE  
**Engine:** `coding_gate` (`cain_a75_engines/codinggate/engine.py`)  
**Profile:** `xcode_session`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: authority, kind, paths, commands, network and approvals recomputed; 22/22 action-failure cases as expected

- **xcode_coding_session**: VERIFIED
- **honest_coding_session**: ALLOWED
- **edit_env_file**: BLOCKED
- **edit_outside_allowlist**: BLOCKED
- **edit_git_internals**: BLOCKED
- **run_command_not_allowlisted**: BLOCKED
- **run_shell_metacharacters**: BLOCKED
- **network_not_allowlisted**: BLOCKED
- **network_catch_all**: BLOCKED
- **install_without_approval**: BLOCKED
- **install_self_approved**: BLOCKED
- **install_approval_expired**: BLOCKED
- **kind_not_allowed**: BLOCKED
- **authority_expired**: BLOCKED
- **workspace_out_of_scope**: BLOCKED
- **tool_out_of_scope**: BLOCKED
- **blocked_action_applied**: BLOCKED
- **applied_without_diff_hash**: BLOCKED
- **claim_overstates**: BLOCKED
- **duplicate_action**: BLOCKED
- **unknown_claim**: BLOCKED
- **wrong_schema**: BLOCKED
- **garbage**: BLOCKED

## Limits of this run

Reviews the action record. It does not execute commands, touch the workspace, or prove an allowed code edit is correct or safe. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.
