gated

Overview ¶

Command gated shows jess's fail-closed tool gate plus the provenance ledger. The model calls a "restart_service" tool (not marked Safe). Without an approver the gate denies it; here we wire an approver that reads a y/n from stdin (a stand-in for the daemon's Telegram confirm). Because the tool is non-safe, it also cannot run without a durable record: we back it with a real SQLite ledger so an approved action is committed first, then executes. After the run we read the chain back to show why the agent acted.